JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.127.21.66

34.127.21.66 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 65%: ?

65%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	66.21.127.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.127.21.66

Whois 34.127.21.66

IP Abuse Reports for 34.127.21.66:

This IP address has been reported a total of 16 times from 12 distinct sources. 34.127.21.66 was first reported on August 26th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-28 21:59:23 (4 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27. show less	Web App Attack SSH Hacking
🇧🇾 lns.bz	2026-08-27 20:33:49 (5 days ago)	Too many 404 requests [BY]	Web App Attack
🇩🇪 big-cloud.nl	2026-08-27 18:08:09 (5 days ago)	Try to access /backend/.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 10:00:34 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:00:28.634098 2026] [security2:error] [pid 15680:tid 15680] [client 34.127.21.66:37362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thephysicsroom.com"] [uri "/site/.git/config"] [unique_id "apAKvIctVM11Wb3EFv8VNgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 07:34:35 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 03:34:31.114374 2026] [security2:error] [pid 4961:tid 4961] [client 34.127.21.66:55982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mitchmanker.joesteiner.com"] [uri "/site/.git/config"] [unique_id "ao_oh3YeB4XwwjlurOOvqAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 araptus	2026-08-27 07:29:44 (5 days ago)	Gateway auto-report: /.git/config (UA: crusader-worker/1.0)	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-27 04:17:05 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 00:17:02.787727 2026] [security2:error] [pid 1512410:tid 1512475] [client 34.127.21.66:42378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.caarp.tusappsonline.com"] [uri "/api/.git/config"] [unique_id "ao-6PiUqsdKv42CNcx0kQQAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-08-27 02:05:31 (6 days ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇩🇪 IVski.com	2026-08-27 01:30:37 (6 days ago)	IVski WAF \| Sensitive file probe - looking for exposed .git/config	DDoS Attack Bad Web Bot
🇨🇭 Origon	2026-08-27 01:16:33 (6 days ago)	http-sensitive-files - IP: 34.127.21.66 - time="2026-08-27T03:16:32+02:00" level=info msg="(555f66b ... show more http-sensitive-files - IP: 34.127.21.66 - time="2026-08-27T03:16:32+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.127.21.66 (US/396982) : 4h ban on Ip 34.127.21.66" module=db show less	Web App Attack
🇺🇸 mccsoft.io	2026-08-27 01:11:34 (6 days ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇩🇪 Petros Stefanakis	2026-08-26 23:30:09 (6 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.127.21.66 (US/United States/66.21.12 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.127.21.66 (US/United States/66.21.127.34.bc.googleusercontent.com) show less	SQL Injection
🇮🇹 VHosting	2026-08-26 23:05:05 (6 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 22:31:43 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.127.21.66 (66.21.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 18:31:36.333209 2026] [security2:error] [pid 9878:tid 9878] [client 34.127.21.66:43414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zmgmt.z-mgmt.com"] [uri "/wordpress/.git/config"] [unique_id "ao9pSHPkP33UWWfytGs6_QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-26 21:32:49 (6 days ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.132

🇧🇩 182.48.70.110

🇷🇺 178.49.5.49

🇨🇦 104.233.20.104

🇸🇬 84.75.148.242

🇬🇧 34.39.68.79

🇺🇸 2607:f298:5:118a::9e8:3c0b

🇮🇩 2600:3c0c::2000:96ff:fe8b:9e90

🇨🇳 218.9.233.218

🇰🇷 211.56.131.199

🇻🇪 201.221.114.190

🇨🇳 180.108.222.116

🇧🇷 168.75.77.111

🇩🇪 116.202.151.220

🇺🇸 107.174.188.218

🇻🇳 103.78.2.252

🇫🇷 91.231.89.84

🇩🇪 69.5.169.205

🇩🇪 69.5.169.141

🇮🇳 49.37.194.211