JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.16.202.101

Neutral Activity

Abuse confidence score ?

0% Low Risk

95 reports

63 reporters · latest 2 months ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	101.202.16.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.16.202.101 has been reported 95 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 34.16.202.101

Export CSV

This IP address has been reported a total of 95 times from 63 distinct sources. 34.16.202.101 was first reported on August 10th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-15 04:34:45 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇪🇸 Gem	2026-08-14 22:04:44 (2 months ago)	Unauthorized web scan.	Web App Attack
🇿🇦 conure.sh	2026-08-13 18:41:53 (2 months ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇩🇪 todix	2026-08-13 18:23:07 (2 months ago)	Web App Attack Exploid from 34.16.202.101	Web App Attack
🇺🇸 itsnixk	2026-08-13 17:21:18 (2 months ago)	(mod_security) mod_security (id:930130) triggered by 34.16.202.101 (US/United States/101.202.16.34.b ... show more (mod_security) mod_security (id:930130) triggered by 34.16.202.101 (US/United States/101.202.16.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Aug 13 13:21:14.652714 2026] [security2:error] [pid 1228103:tid 1228184] [remote 34.16.202.101:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/@fs/../.env"] [unique_id "an39CuesPDZHPqFhFid2NQAAIT8"] show less	Port Scan
🇨🇭 4server	2026-08-13 17:08:05 (2 months ago)	[ThuAug1319:07:59.9361492026][security2:error][pid2080999:tid2081189][client34.16.202.101:0]ModSecur ... show more [ThuAug1319:07:59.9361492026][security2:error][pid2080999:tid2081189][client34.16.202.101:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mail.reddragonrecords.ch\"][uri\"/static../.env\"][unique_id\"an3574JuIF9fKRLpUOgAwwAAAMg\"] show less	Hacking Web App Attack
Anonymous	2026-08-13 17:06:03 (2 months ago)	apache vulnerability scan	Web App Attack
🇳🇱 SysAdmin Dylan	2026-08-13 16:44:42 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.16.202.101 (US/United States/101.202.16.34.b ... show more (mod_security) mod_security (id:210492) triggered by 34.16.202.101 (US/United States/101.202.16.34.bc.googleusercontent.com): 10 in the last 3600 secs show less	Brute-Force
🇳🇱 Site.eu	2026-08-13 16:16:44 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇦🇺 electronico	2026-08-13 15:43:02 (2 months ago)	34.16.202.101 - - [14/Aug/2026:02:43:02 +1100] "GET /@fs/etc/passwd?import&raw?? HTTP/1.1" 404 7403 ... show more 34.16.202.101 - - [14/Aug/2026:02:43:02 +1100] "GET /@fs/etc/passwd?import&raw?? HTTP/1.1" 404 7403 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.16.202.101 - - [14/Aug/2026:02:43:02 +1100] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 404 7403 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.16.202.101 - - [14/Aug/2026:02:43:02 +1100] "GET /@fs/../.env?raw?? HTTP/1.1" 404 7403 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.16.202.101 - - [14/Aug/2026:02:43:02 +1100] "GET /@fs/proc/self/environ HTTP/1.1" 404 7403 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.16.202.101 - - [14/Aug/2026:02:43:02 +1100] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 404 7403 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.16.202.101 - - [14/Aug/2026 ... show less	Brute-Force Web App Attack
🇺🇸 rsa	2026-08-13 15:38:00 (2 months ago)	GET /.env.prod HTTP/1.1	DDoS Attack Brute-Force Exploited Host Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-13 15:18:10 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.16.202.101 (101.202.16.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.16.202.101 (101.202.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 11:18:05.471170 2026] [security2:error] [pid 3903746:tid 3903790] [client 34.16.202.101:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.raytbrown.com"] [uri "/@fs/../.env"] [unique_id "an3gLfcCw0QRSaHd_qT45wAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-13 14:47:33 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.16.202.101 (US/United States/101.2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.16.202.101 (US/United States/101.202.16.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-08-13 11:55:02 (2 months ago)	Restricted File Access Attempt. Matched phrase "proc/self" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇦🇹 vikal	2026-08-13 09:44:25 (2 months ago)	34.16.202.101 - - [13/Aug/2026:11:44:25 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/ ... show more 34.16.202.101 - - [13/Aug/2026:11:44:25 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	Brute-Force SSH

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇺🇸 140.235.171.152

🇹🇷 92.249.61.190

🇨🇿 78.44.238.178

🇺🇸 20.51.250.231

🇺🇸 2.56.189.83

🇳🇱 193.47.62.69

🇧🇷 189.38.18.132

🇵🇱 45.138.12.58

🇺🇸 34.228.104.231

🇷🇴 2.57.121.112

🇮🇳 223.185.35.243

🇺🇸 205.210.31.32

🇮🇩 202.158.36.50

🇺🇸 70.184.82.151

🇲🇲 37.111.53.110

🇧🇴 166.114.130.212

🇭🇰 156.59.198.135

🇨🇳 123.130.233.53

🇺🇸 66.132.195.177