JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.118.241.21

34.118.241.21 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 94%: ?

94%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	21.241.118.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.118.241.21

Whois 34.118.241.21

IP Abuse Reports for 34.118.241.21:

This IP address has been reported a total of 18 times from 16 distinct sources. 34.118.241.21 was first reported on August 26th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2026-08-26 16:30:07 (2 hours ago)	Multiple exploit attempts	Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-08-26 15:32:37 (3 hours ago)	34.118.241.21 - - [26/Aug/2026:17:32:13 +0200] "GET /.env HTTP/1.1" 403 5540 "https://pullhausen.de/ ... show more 34.118.241.21 - - [26/Aug/2026:17:32:13 +0200] "GET /.env HTTP/1.1" 403 5540 "https://pullhausen.de/.env" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; Chrome/122.0.596.119 Mobile Safari/ show less	Web Spam Blog Spam Brute-Force Web App Attack
🇫🇷 dynamix	2026-08-26 15:20:44 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 15:19:35 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.118.241.21 (21.241.118.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.118.241.21 (21.241.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 11:19:27.335245 2026] [security2:error] [pid 26017:tid 26039] [client 34.118.241.21:43668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newleafpro.com"] [uri "/media../.env"] [unique_id "ao8D_54DH60-QkDR2QM7jAAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 pixiekat	2026-08-26 13:49:54 (5 hours ago)	[Wed Aug 26 14:49:54.086725 2026] [security2:error] [pid 3600868:tid 3600915] [client 34.118.241.21: ... show more [Wed Aug 26 14:49:54.086725 2026] [security2:error] [pid 3600868:tid 3600915] [client 34.118.241.21:59714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "integraldata.cc"] [uri "/static../.env"] [unique_id "ao7vAnb2iBI3A5gfwjpG3QAAABM"] [Wed Aug 26 14:49:54.144415 2026] [security2:error] [pid 3600868:tid 3600919] [client 34.118.241.21:59804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluat ... show less	Web App Attack
🇦🇺 rubixstudios	2026-08-26 12:34:03 (6 hours ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇩🇪 akasolutions.de	2026-08-26 12:05:06 (7 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.118.241.21 (US/United States/21.241. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.118.241.21 (US/United States/21.241.118.34.bc.googleusercontent.com) show less	SQL Injection
🇨🇭 backslash	2026-08-26 11:36:00 (7 hours ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇧🇪 madeit	2026-08-26 11:18:11 (7 hours ago)		Web App Attack
Anonymous	2026-08-26 11:06:33 (8 hours ago)	[ssd1.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/media../etc/passwd \| /@fs ... show more [ssd1.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/media../etc/passwd \| /@fs/etc/passwd?raw?? \| /media../.env show less	Hacking Web App Attack
🇬🇧 consul.to	2026-08-26 10:20:35 (8 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 mnsf	2026-08-26 10:05:09 (9 hours ago)	Scanning/Probing (12)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 09:37:18 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.118.241.21 (21.241.118.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.118.241.21 (21.241.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:37:10.119416 2026] [security2:error] [pid 21245:tid 21245] [client 34.118.241.21:19622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.iclog.us"] [uri "/.git/HEAD"] [unique_id "ao6zxinVzn1m5luTKfIFlQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-08-26 07:01:06 (12 hours ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇮🇹 VHosting	2026-08-26 06:45:05 (12 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 119.73.115.24

🇺🇸 66.240.192.82

🇨🇭 51.154.255.87

🇨🇳 180.76.228.20

🇨🇳 118.254.74.240

🇸🇮 102.220.160.124

🇺🇸 35.196.194.152

🇬🇧 216.226.76.30

🇺🇸 216.180.246.95

🇺🇸 192.210.192.220

🇨🇦 165.227.39.235

🇺🇸 102.129.223.92

🇸🇪 95.155.234.161

🇺🇸 34.74.33.31

🇮🇹 31.3.182.133

🇹🇼 198.235.24.69

🇬🇧 195.96.139.76

🇮🇳 182.18.139.237

🇺🇸 172.212.194.58

🇺🇸 159.65.223.164