JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.124.161.21

34.124.161.21 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	21.161.124.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.124.161.21

Whois 34.124.161.21

IP Abuse Reports for 34.124.161.21:

This IP address has been reported a total of 39 times from 30 distinct sources. 34.124.161.21 was first reported on September 7th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-10 06:00:02 (6 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇳🇱 homeshowdomain.nl	2026-09-09 21:59:15 (6 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-08. show less	Web App Attack SSH Hacking
🇬🇧 openstrike.co.uk	2026-09-09 05:14:22 (1 week ago)	129 attacks on VC URLs, PHP URLs, env grabbing URLs, env grabbing URLs (type 2), password/key grabbi ... show more 129 attacks on VC URLs, PHP URLs, env grabbing URLs, env grabbing URLs (type 2), password/key grabbing URLs, config grabbing URLs (type 2): GET /.git/HEAD HTTP/1.1 GET /i.php HTTP/1.1 GET /app/.env.local HTTP/1.1 GET /@fs/proc/self/cwd/.azure/credentials?raw?? HTTP/1.1 GET /id_rsa HTTP/1.1 GET /appsettings.json HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 middelkoopcc	2026-09-08 12:23:01 (1 week ago)	2026-09-08 14:21:26 GET /@fs/.env?raw?? [301] && 2026-09-08 14:21:26 GET /@fs/..%252f..%252f..%252f. ... show more 2026-09-08 14:21:26 GET /@fs/.env?raw?? [301] && 2026-09-08 14:21:26 GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? [301] && 2026-09-08 14:21:26 GET /@fs/home/admin/.aws/credentials?raw?? [301] && 109 more within 20 minutes show less	Web App Attack
🇨🇭 zynex	2026-09-08 11:33:54 (1 week ago)	URL Probing: /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env	Web App Attack
🇺🇸 kosada.com	2026-09-08 11:04:31 (1 week ago)	Repeated exploit attempts, for example: /@fs/root/.env?raw?? /.env (HTTP/1.1 port 443, user agent: " ... show more Repeated exploit attempts, for example: /@fs/root/.env?raw?? /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/126.0.4551.176 Safari/537.36") show less	Web App Attack
🇩🇪 tall1oN	2026-09-08 09:50:50 (1 week ago)	34.124.161.21 - - [08/Sep/2026:11:50:49 +0200] "GET /api/.env HTTP/1.1" 200 16384 "-" "Mozilla/5.0 A ... show more 34.124.161.21 - - [08/Sep/2026:11:50:49 +0200] "GET /api/.env HTTP/1.1" 200 16384 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" "ppl-tech.de" 34.124.161.21 - - [08/Sep/2026:11:50:49 +0200] "GET /config/.env HTTP/1.1" 200 16384 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Chrome/124.0.2445.11 Safari/537.36" "ppl-tech.de" ... show less	Web App Attack Port Scan Hacking
🇮🇹 CoreTech srl	2026-09-08 09:49:02 (1 week ago)	cloudlinux2 fail2ban: 2026-09-08 11:44:19,465 fail2ban.filter [1794]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-08 11:44:19,465 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.124.161.21 - 2026-09-08 11:44:19cloudlinux2 fail2ban: 2026-09-08 11:44:19,489 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.124.161.21 - 2026-09-08 11:44:19cloudlinux2 fail2ban: 2026-09-08 11:44:19,503 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.124.161.21 - 2026-09-08 11:44:19cloudlinux2 fail2ban: 2026-09-08 11:44:19,573 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.124.161.21 - 2026-09-08 11:44:19cloudlinux2 fail2ban: 2026-09-08 11:44:19,556 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.124.161.21 - 2026-09-08 11:44:19cloudlinux2 fail2ban: 2026-09-08 11:44:19,581 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.124.161.21 - 2026-09-08 11:44:19cloudlinux2 fail2ban: 2026-09-08 11:44:15,617 fail2ban.filter [1794]: INFO [plesk-proftpd] Found 89.190.219.16 - 2026-09-08 11:44:1 show less	FTP Brute-Force
🇺🇸 TPI-Abuse	2026-09-08 09:28:39 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.124.161.21 (21.161.124.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.124.161.21 (21.161.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:28:32.318305 2026] [security2:error] [pid 27024:tid 27024] [client 34.124.161.21:27924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.directsat.gulftelecom.com"] [uri "/@fs/app/.env"] [unique_id "ap_VQAmLlmXRa04Eor-phwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 piqwjdas	2026-09-08 09:17:46 (1 week ago)	{"transaction":{"client_ip":"34.124.161.21","time_stamp":"Tue Sep 8 11:17:39 2026","server_id":"468 ... show more {"transaction":{"client_ip":"34.124.161.21","time_stamp":"Tue Sep 8 11:17:39 2026","server_id":"46824fc494f03034e6b98e26d7a2d7a06b25f0b7","client_port":43766,"host_ip":"212.186.116.154","host_port":80,"unique_id":"178885905994.608513","is_interrupted":false,"request":{"method":"GET","http_version":"1.1","hostname":"privatedns.spiess-vienna.at","uri":"/","headers":{"Host":"privatedns.spiess-vienna.at","User-Agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36","Accept":"/","Accept-Encoding":"gzip"}},"response":{"http_code":403,"headers":{"Server":"nginx\u0000","Date":"Tue, 08 Sep 2026 09:17:39 GMT","Content-Length":"548","Content-Type":"text/html","Connection":"keep-alive"}},"producer":{"modsecurity":"ModSecurity v3.0.16 (Linux)","connector":"ModSecurity-nginx v1.0.4","secrules_engine":"Enabled","components":["OWASP_CRS/4.30.0-dev\""]},"messages":[]}} {"transaction":{"client_ip":"34.124.161.21","time_stamp":"Tue ... show less	Web App Attack
Anonymous	2026-09-08 09:03:43 (1 week ago)	Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-path-traversal-probing	Brute-Force
🇺🇸 antlac1	2026-09-08 08:49:51 (1 week ago)	crowdsecurity/http-path-traversal-probing	Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-09-08 08:27:03 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇧🇪 cmbplf	2026-09-08 07:29:34 (1 week ago)	4.049 requests with url.path /@fs/ 928 requests with url.path .aws/ 781 requests with url.pat ... show more 4.049 requests with url.path /@fs/ 928 requests with url.path .aws/ 781 requests with url.path config.json 683 requests with url.path credentials.json 609 requests with url.path .config/ 333 requests with url.path /proc/ 280 requests with url.path .ssh/ 193 requests with url.path /auth.json 122 requests with url.path config.php 104 requests with url.path .local/share/ show less	Brute-Force Bad Web Bot
Anonymous	2026-09-08 07:20:26 (1 week ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.155.106.83

🇹🇼 198.235.24.50

🇹🇼 198.235.24.47

🇷🇴 193.46.255.86

🇦🇷 181.23.234.228

🇺🇸 148.59.129.89

🇻🇳 115.75.150.3

🇭🇰 103.146.159.173

🇳🇱 77.239.124.182

🇭🇰 61.93.135.225

🇨🇳 59.46.182.10

🇰🇿 37.208.46.131

🇳🇱 34.90.147.8

🇳🇱 31.14.32.8

🇮🇩 202.148.31.43

🇹🇼 198.235.24.46

🇹🇼 198.235.24.45

🇰🇪 197.232.56.34

🇺🇸 195.184.76.180

🇵🇱 194.180.48.39