JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.27.16.216

34.27.16.216 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	216.16.27.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.27.16.216

Whois 34.27.16.216

IP Abuse Reports for 34.27.16.216:

This IP address has been reported a total of 42 times from 33 distinct sources. 34.27.16.216 was first reported on August 28th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-08-29 01:27:19 (11 minutes ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇫🇮 JLKnoch Software GmbH	2026-08-29 01:21:59 (16 minutes ago)	CrowdSec crowdsecurity/http-probing	Brute-Force Web App Attack
🇩🇪 Nightreaver	2026-08-29 00:55:08 (43 minutes ago)	34.27.16.216 - - [29/Aug/2026:02:55:07 0200] "GET /.env.dev HTTP/1.1" 404 438 "-" "crusader-worker/ ... show more 34.27.16.216 - - [29/Aug/2026:02:55:07 0200] "GET /.env.dev HTTP/1.1" 404 438 "-" "crusader-worker/1.0" 34.27.16.216 - - [29/Aug/2026:02:55:07 0200] "GET /.env.local HTTP/1.1" 404 438 "-" "crusader-worker/1.0" 34.27.16.216 - - [29/Aug/2026:02:55:07 0200] "GET /.env.backup HTTP/1.1" 404 438 "-" "crusader-worker/1.0" 34.27.16.216 - - [29/Aug/2026:02:55:07 0200] "GET /.env HTTP/1.1" 404 438 "-" "crusader-worker/1.0" 34.27.16.216 - - [29/Aug/2026:02:55:07 0200] "GET /.env.example HTTP/1.1" 404 438 "-" "crusader-worker/1.0"[...] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-29 00:46:51 (52 minutes ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.php.bak	Web App Attack
Anonymous	2026-08-29 00:41:04 (57 minutes ago)	Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1	Hacking Web App Attack
🇺🇸 mnsf	2026-08-29 00:08:58 (1 hour ago)	Abuse Detected (20)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 23:15:15 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:15:09.411753 2026] [security2:error] [pid 9941:tid 9941] [client 34.27.16.216:42050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debbieparisi.com"] [uri "/.env.save"] [unique_id "apIWffldmq9sj65ot2RnXwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 spot	2026-08-28 23:03:26 (2 hours ago)	34.27.16.216 - - [29/Aug/2026:00:03:25 +0100] "GET /.env.dev HTTP/1.1" 404 4656 "-" "crusader-worker ... show more 34.27.16.216 - - [29/Aug/2026:00:03:25 +0100] "GET /.env.dev HTTP/1.1" 404 4656 "-" "crusader-worker/1.0" ... show less	Web App Attack VPN IP
🇺🇸 TPI-Abuse	2026-08-28 20:39:15 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 16:39:11.757244 2026] [security2:error] [pid 6353:tid 6353] [client 34.27.16.216:41226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jellisonrepair.com"] [uri "/.env.prod"] [unique_id "apHx74vxNs21K7t6JyGvxgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-28 18:14:39 (7 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 18:12:32 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:12:25.393446 2026] [security2:error] [pid 20643:tid 20643] [client 34.27.16.216:43048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ericgwin.com"] [uri "/.env.backup"] [unique_id "apHPiaQByLYBQFjhbBK_FwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Lunix	2026-08-28 18:04:22 (7 hours ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 17:57:00 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.27.16.216 (216.16.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:56:55.505116 2026] [security2:error] [pid 3356579:tid 3356649] [client 34.27.16.216:51896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.slelectric.com"] [uri "/.env.example"] [unique_id "apHL55L1xvMbE5J0qfPfXQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-08-28 17:44:10 (7 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-28 17:26:29 (8 hours ago)	[28/Aug/2026:20:26:28 +0300] -- 34.27.16.216 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /s ... show more [28/Aug/2026:20:26:28 +0300] -- 34.27.16.216 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /storage/logs/laravel.log HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:ff10:c8:594::4

🇮🇳 185.100.212.141

🇧🇷 170.81.216.78

🇭🇰 101.32.49.171

🇷🇴 92.118.39.50

🇩🇪 88.214.25.125

🇺🇸 66.132.186.202

🇰🇷 61.73.123.20

🇧🇷 205.210.31.218

🇬🇧 193.32.209.229

🇳🇱 185.223.235.61

🇺🇸 154.40.38.233

🇩🇪 151.243.11.12

🇨🇳 124.90.50.135

🇨🇳 123.132.190.16

🇨🇳 120.227.128.121

🇨🇳 120.48.71.14

🇨🇳 120.48.22.219

🇨🇳 116.179.32.109

🇭🇰 113.28.194.234