JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.107.116.240

34.107.116.240 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	240.116.107.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.107.116.240

Whois 34.107.116.240

IP Abuse Reports for 34.107.116.240:

This IP address has been reported a total of 35 times from 31 distinct sources. 34.107.116.240 was first reported on October 20th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-21 22:01:46 (9 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20. show less	Web App Attack SSH Hacking
🇧🇪 cmbplf	2026-10-21 08:49:54 (23 hours ago)	265 requests with url.path .ssh/	Brute-Force Bad Web Bot
Anonymous	2026-10-21 08:32:04 (23 hours ago)	Bot / scanning and/or hacking attempts: GET /assets../.env HTTP/2.0, GET /.terraform.lock.hcl HTTP/2 ... show more Bot / scanning and/or hacking attempts: GET /assets../.env HTTP/2.0, GET /.terraform.lock.hcl HTTP/2.0, GET /.terraform.rc HTTP/2.0, GET /media../.env HTTP/2.0, GET /id_rsa HTTP/2.0, GET /....//....//....//..../.env HTTP/2.0, GET /files../.env HTTP/2.0, GET /.dev.vars.production HTTP/2.0, GET /config/environment.json HTTP/2.0, GET /.svn/entries HTTP/2.0, GET /static../.env HTTP/2.0, GET /supabase/.env HTTP/2.0, GET /.env.key HTTP/2.0, GET /application/.env.sample HTTP/2.0, GET /prisma/.env HTTP/2.0, GET /....//....//....//..../proc/self/environ HTTP/2.0, GET /docker-compose/.env HTTP/2.0, GET /docker-compose.prod.yml HTTP/2.0, GET /.terraform/terraform.tfstate HTTP/2.0 show less	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-10-21 05:43:56 (1 day ago)	cloudlinux2 fail2ban: 2026-10-21 07:38:54,152 fail2ban.filter [1488]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-10-21 07:38:54,152 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.107.116.240 - 2026-10-21 07:38:54cloudlinux2 fail2ban: 2026-10-21 07:38:53,970 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.107.116.240 - 2026-10-21 07:38:53cloudlinux2 fail2ban: 2026-10-21 07:38:54,149 fail2ban.filter [1488]: INFO [recidive] Found 34.107.116.240 - 2026-10-21 07:38:54cloudlinux2 fail2ban: 2026-10-21 07:38:53,990 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.107.116.240 - 2026-10-21 07:38:53cloudlinux2 fail2ban: 2026-10-21 07:38:54,019 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.107.116.240 - 2026-10-21 07:38:53cloudlinux2 fail2ban: 2026-10-21 07:38:54,137 fail2ban.actions [1488]: NOTICE [plesk-modsecurity] Ban 34.107.116.240cloudlinux2 fail2ban: 2026-10-21 07:38:54,030 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.107.116.240 - 2026-10-21 07:38:53cloudlinux2 fail2ban: show less	Brute-Force
Anonymous	2026-10-21 05:41:56 (1 day ago)	Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web app ... show more Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files show less	Hacking Web App Attack
🇳🇱 ConsulHosting	2026-10-21 05:09:45 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 masterguru	2026-10-21 05:07:23 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot
🇬🇧 Andrew	2026-10-21 05:03:23 (1 day ago)	34.107.116.240 - - [21/Oct/2026:06:03:20 +0100] "GET /@fs/.env?raw&url?? HTTP/1.1" 404 18358 "-" "Mo ... show more 34.107.116.240 - - [21/Oct/2026:06:03:20 +0100] "GET /@fs/.env?raw&url?? HTTP/1.1" 404 18358 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" 34.107.116.240 - - [21/Oct/2026:06:03:20 +0100] "GET /@fs/.env?url&raw?? HTTP/1.1" 404 18358 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.107.116.240 - - [21/Oct/2026:06:03:20 +0100] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 18361 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.107.116.240 - - [21/Oct/2026:06:03:20 +0100] "GET /@fs/.env?import&?raw?? HTTP/1.1" 404 18358 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.107.116.240 - - [21/Oct/2026:06:03:21 +0100] "GET /.env?raw HTTP/1.1" 404 18354 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.107.116.240 - - [21/Oct/2026:06:03:21 +0100] "GET /.env?import&raw HTTP/1.1" 404 18354 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTM ... show less	Hacking Web App Attack
🇨🇭 Elysium Security	2026-10-20 23:12:04 (1 day ago)	Mass scanning for Web CVE	Web App Attack
🇩🇪 updown.io	2026-10-20 22:29:13 (1 day ago)	{"level":"info","ts":1792535352.4964132,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1792535352.4964132,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.107.116.240","remote_port":"38750","client_ip":"34.107.116.240","proto":"HTTP/2.0","method":"GET","host":"status.gogn.in","uri":"/dist/manifest.json","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Site":["none"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Ch-Ua-Mobile":["?0"],"Priority":["u=0, i"],"Upgrade-Insecure-Requests":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Accept-Language":["en-US,en;q=0.9"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,im ... show less	DDoS Attack Web App Attack
🇹🇷 Jova	2026-10-20 20:47:30 (1 day ago)	Probing a web server for sensitive files (.env, backups, configs): 3 requests.	Web App Attack
🇺🇸 jormaster3k	2026-10-20 20:27:14 (1 day ago)	Attack against Apache (too many 404s)	Web App Attack
🇪🇸 robotstxt	2026-10-20 20:11:16 (1 day ago)	34.107.116.240 - - [20/Oct/2026:20:11:14 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/se ... show more 34.107.116.240 - - [20/Oct/2026:20:11:14 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.107.116.240" 34.107.116.240 - - [20/Oct/2026:20:11:14 +0000] "GET /appearance/../../.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.107.116.240" 34.107.116.240 - - [20/Oct/2026:20:11:14 +0000] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/1.1" 400 193 "-" "-" "-" edge="34.107.116.240" 34.107.116.240 - - [20/Oct/2026:20:11:14 +0000] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.107.116.240" 34.107.116.240 - - [20/Oct/2026:20:11:14 +0000] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.107.116.240" ... show less	Web Spam Web App Attack
🇺🇸 VanKoh	2026-10-20 18:08:17 (1 day ago)	(cpanel) Failed cPanel login from 34.107.116.240 (DE/Germany/Hesse/Frankfurt am Main/-): 5 in the la ... show more (cpanel) Failed cPanel login from 34.107.116.240 (DE/Germany/Hesse/Frankfurt am Main/-): 5 in the last 3600 secs; IP: 34.107.116.240; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [2026-10-20 12:07:59 -0600] info [cpaneld] 34.107.116.240 - - "GET /manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-20 12:08:00 -0600] info [cpaneld] 34.107.116.240 - - "POST /graphql HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-20 12:08:00 -0600] info [cpaneld] 34.107.116.240 - - "GET /serviceAccountKey.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-20 12:08:00 -0600] info [cpaneld] 34.107.116.240 - - "GET /.gitlab-ci.yml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-20 12:08:01 -0600] info [cpaneld] 34.107.116.240 - - "GET /.npmrc HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username show less	Brute-Force
🇺🇦 Olexiy Backend	2026-10-20 16:54:30 (1 day ago)	34.107.116.240 ...	Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 197.145.142.214

🇵🇱 194.180.49.53

🇰🇷 175.209.156.146

🇩🇪 109.160.32.43

🇧🇩 103.112.148.4

🇺🇸 100.29.192.63

🇺🇸 95.135.134.210

🇬🇧 86.38.187.209

🇺🇸 64.62.197.214

🇲🇾 49.124.152.145

🇬🇧 31.104.250.5

🇺🇸 20.221.57.127

🇷🇴 193.32.162.167

🇦🇷 181.228.80.171

🇿🇦 156.155.220.78

🇩🇿 154.248.82.127

🇪🇬 154.182.146.2

🇻🇳 103.53.158.121

🇷🇺 94.243.10.227

🇫🇷 85.217.140.44