JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.27.71.240

34.27.71.240 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	240.71.27.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.27.71.240

Whois 34.27.71.240

IP Abuse Reports for 34.27.71.240:

This IP address has been reported a total of 50 times from 42 distinct sources. 34.27.71.240 was first reported on September 16th 2026, and the most recent report was 5 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-17 04:40:04 (5 seconds ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Web App Attack Hacking SQL Injection
Anonymous	2026-09-17 04:32:52 (7 minutes ago)	Blocked by ModSec and CSF	Port Scan
🇳🇱 Alt255	2026-09-17 04:16:31 (23 minutes ago)	[ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ... show more [ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.27.71.240 - - [17/Sep/2026:06:16:08 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.27.71.240 - - [17/Sep/2026:06:16:08 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.27.71.240 - - [17/Sep/2026:06:16:10 +0200] "GET /privatekey.key HTTP/2.0" 404 18123 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.27.71.240 - - [17/Sep/2026:06:16:11 +0200] "GET /dist/manifest.json HTTP/2.0" 404 18123 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-09-17 04:13:38 (26 minutes ago)	Multiple WAF Violations	Web App Attack
🇳🇱 debestelapp	2026-09-17 04:00:17 (39 minutes ago)		Web App Attack
🇺🇸 helios.live	2026-09-17 03:39:02 (1 hour ago)	2026/09/17 03:38:59 [error] 1113881#1113881: 3474945 access forbidden by rule, client: 34.27.71.240 ... show more 2026/09/17 03:38:59 [error] 1113881#1113881: 3474945 access forbidden by rule, client: 34.27.71.240, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com" 2026/09/17 03:38:59 [error] 1113881#1113881: 3474945 access forbidden by rule, client: 34.27.71.240, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com" 2026/09/17 03:39:00 [error] 1113883#1113883: 3474549 access forbidden by rule, client: 34.27.71.240, server: kocerroxy.com, request: "GET /.bash_profile HTTP/1.1", host: "kocerroxy.com" 2026/09/17 03:39:00 [error] 1113883#1113883: 3474549 access forbidden by rule, client: 34.27.71.240, server: kocerroxy.com, request: "GET /.zshrc HTTP/1.1", host: "kocerroxy.com" 2026/09/17 03:39:02 [error] 1113881#1113881: 3474985 access forbidden by rule, client: 34.27.71.240, server: kocerroxy.com, request: "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1", host: "kocerroxy.com" ... show less	Web App Attack
🇳🇱 Savvii	2026-09-17 02:50:53 (1 hour ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-17 02:31:15 (2 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-09-17 02:26:09 (2 hours ago)	Portscan: TCP/8443 (4x), TCP/8080 (4x)	Port Scan
Anonymous	2026-09-17 02:02:04 (2 hours ago)	Bot / scanning and/or hacking attempts: GET / HTTP/2.0, GET /config/secrets.yml HTTP/2.0, POST /v1/g ... show more Bot / scanning and/or hacking attempts: GET / HTTP/2.0, GET /config/secrets.yml HTTP/2.0, POST /v1/graphql HTTP/2.0, GET /app HTTP/2.0, GET /application.properties HTTP/2.0, GET /.env.staging HTTP/2.0, GET /bootstrap.yml HTTP/2.0, [0/0] init, GET /web.config HTTP/2.0, POST /api/graphql HTTP/2.0, GET /.ssh/known_hosts HTTP/2.0, GET /id_rsa HTTP/2.0, GET /config.py HTTP/2.0, GET /actuator/configprops HTTP/2.0, GET /appsettings.Development.json HTTP/2.0, GET /config/master.key HTTP/2.0, GET /app/settings.py HTTP/2.0, GET /signup HTTP/2.0, GET /config/database.yml HTTP/2.0, GET /.ssh/authorized_keys HTTP/2.0, POST / HTTP/2.0, GET /.streamlit/secrets.toml HTTP/2.0, GET /.ssh/id_ecdsa HTTP/2.0, GET /wp-config.php.swp HTTP/2.0, GET /.ssh/id_ed25519 HTTP/2.0, GET /console HTTP/2.0, [74/74] done, GET /backoffice HTTP/2.0, GET /actuator/env HTTP/2.0, GET /appsettings.Production.json HTTP/2.0, GET /bootstrap.properties HTTP/2.0 show less	Hacking Web App Attack
🇩🇪 Séfora Srl	2026-09-17 01:42:48 (2 hours ago)	crowdsecurity/http-bad-user-agent detected by CrowdSec	Bad Web Bot
Anonymous	2026-09-17 01:40:23 (2 hours ago)	34.27.71.240 - - [16/Sep/2026:20:40:21 -0500] "GET /.env.www HTTP/1.1" 301 248 "-" "Mozilla/5.0 Appl ... show more 34.27.71.240 - - [16/Sep/2026:20:40:21 -0500] "GET /.env.www HTTP/1.1" 301 248 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 108.162.216.237 34.27.71.240 - - [16/Sep/2026:20:40:21 -0500] "GET /.env_1 HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" 108.162.216.237 34.27.71.240 - - [16/Sep/2026:20:40:21 -0500] "GET /.env.prod HTTP/1.1" 301 249 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 108.162.216.237 34.27.71.240 - - [16/Sep/2026:20:40:21 -0500] "GET /.env.live HTTP/1.1" 301 249 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 104.22.64.66 34.27.71.240 - - [16/Sep/2026:20:40:21 -0500] "GET /.env.www HTTP/1.1" 403 199 "http://handrail-design.com/.env.www" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +h ... show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-17 01:38:14 (3 hours ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-09-17 01:12:45 (3 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.27.71.240 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.27.71.240 (US/United States/240.71.27.34.bc.googleusercontent.com) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 00:42:08 (3 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.27.71.240 (240.71.27.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.27.71.240 (240.71.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:42:03.485355 2026] [security2:error] [pid 29368:tid 29368] [client 34.27.71.240:43238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|forgottenvictims.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "forgottenvictims.com"] [uri "/rclone.conf"] [unique_id "aqs3W7fhjfgQXaRyv_IWpgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.86.59

🇺🇸 195.252.196.198

🇵🇱 194.180.48.39

🇺🇸 188.213.202.104

🇷🇺 188.190.133.138

🇨🇴 181.204.5.146

🇧🇷 177.37.115.80

🇺🇸 174.168.196.96

🇳🇱 160.119.76.64

🇺🇸 104.248.235.179

🇬🇧 45.146.8.162

🇺🇸 34.73.52.152

🇺🇸 2001:470:2cc:1::274

🇦🇺 216.226.77.10

🇺🇸 216.180.246.162

🇺🇸 205.210.31.81

🇺🇿 198.163.193.3

🇺🇦 195.238.176.70

🇳🇱 195.178.110.232

🇳🇱 195.178.110.217