JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.41.220.214

34.41.220.214 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	214.220.41.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.41.220.214

Whois 34.41.220.214

IP Abuse Reports for 34.41.220.214:

This IP address has been reported a total of 30 times from 25 distinct sources. 34.41.220.214 was first reported on August 28th 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 e.fierstra	2026-08-28 18:19:21 (21 minutes ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-08-28 18:04:15 (36 minutes ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.41.220.214 (US/United States/214.220.41.34. ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.41.220.214 (US/United States/214.220.41.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/28 20:04:12 [error] 1502537#1502537: 796138 access forbidden by rule, client: 34.41.220.214, server: circuitografico.it.etag.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "circuitografico.it.etag.it" 2026/08/28 20:04:12 [error] 1502529#1502529: 796143 access forbidden by rule, client: 34.41.220.214, server: circuitografico.it.etag.it, request: "GET /wp-config.php~ HTTP/1.1", host: "circuitografico.it.etag.it" 2026/08/28 20:04:12 [error] 1502540#1502540: 796149 access forbidden by rule, client: 34.41.220.214, server: circuitografico.it.etag.it, request: "GET /wp-config.php.swp HTTP/1.1", host: "circuitografico.it.etag.it" show less	Port Scan
🇬🇧 Aetherweb Ark	2026-08-28 17:09:03 (1 hour ago)	(mod_security) mod_security (id:949110) triggered by 34.41.220.214 (US/United States/214.220.41.34.b ... show more (mod_security) mod_security (id:949110) triggered by 34.41.220.214 (US/United States/214.220.41.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
Anonymous	2026-08-28 17:04:02 (1 hour ago)	Bot / scanning and/or hacking attempts: GET /actuator/configprops HTTP/1.1, GET /wp-config.php.bak H ... show more Bot / scanning and/or hacking attempts: GET /actuator/configprops HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.production HTTP/1.1, GET /actuator/env HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /.env.backup HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 16:59:42 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.41.220.214 (214.220.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.220.214 (214.220.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:59:36.162518 2026] [security2:error] [pid 25506:tid 25506] [client 34.41.220.214:36202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wandering-home.wendeenicole.com"] [uri "/wp-config.php.swp"] [unique_id "apG-eHoCl9IGIOkvtVa_RQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Daniel Baer	2026-08-28 16:55:02 (1 hour ago)	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 5470 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 5470 events: 11 created_at: 2026-08-28T16:52:27Z message: Ip 34.41.220.214 performed 'crowdsecurity/http-probing' (11 events over 137.856588ms) at 2026-08-28 16:52:27.36804209 +0000 UTC target_uri: ["/.env.bak","/_ignition/health-check","/actuator/env","/.env.save","/wp-config.php~","/.env.backup","/crusader-404-probe","/.env.prod","/storage/logs/laravel.log","/.env.local","/.env"] method: ["GET"] status: ["404"] user_agent: ["crusader-worker/1.0"] show less	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-08-28 16:42:08 (1 hour ago)	Aggressive web search of vulnerable pages: /.env.dev /.env.save /.env.example /.env.prod /.env.bak / ... show more Aggressive web search of vulnerable pages: /.env.dev /.env.save /.env.example /.env.prod /.env.bak /.env /.env.local /.env.old /.env.production ... show less	Web App Attack
🇬🇧 gws-hostmaster	2026-08-28 16:37:07 (2 hours ago)	ModSecurity OWASP CRS (Anomaly Score: 10): Attempt to access a backup or working file;Restricted Fil ... show more ModSecurity OWASP CRS (Anomaly Score: 10): Attempt to access a backup or working file;Restricted File Access Attempt;URL file extension is restricted by policy; show less	Web App Attack
🇩🇪 rh24	2026-08-28 15:57:11 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.41.220.214 (US/United States/214.220 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.41.220.214 (US/United States/214.220.41.34.bc.googleusercontent.com) show less	SQL Injection
🇨🇭 ca	2026-08-28 15:43:36 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-28 15:23:31 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.41.220.214 (214.220.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.220.214 (214.220.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:23:25.945106 2026] [security2:error] [pid 3383:tid 3383] [client 34.41.220.214:48604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siedersoft.com.ar.sieder.com"] [uri "/.env.example"] [unique_id "apGn7cfKUzcgYHGDlfX8MAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-08-28 15:14:00 (3 hours ago)	34.41.220.214 - - [28/Aug/2026:18:14:00 +0300] "GET /actuator/configprops HTTP/2.0" 200 390 "-" "cru ... show more 34.41.220.214 - - [28/Aug/2026:18:14:00 +0300] "GET /actuator/configprops HTTP/2.0" 200 390 "-" "crusader-worker/1.0" 34.41.220.214 - - [28/Aug/2026:18:14:00 +0300] "GET /_ignition/health-check HTTP/2.0" 200 390 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-28 14:56:06 (3 hours ago)	[28/Aug/2026:17:56:06 +0300] -- 34.41.220.214 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET / ... show more [28/Aug/2026:17:56:06 +0300] -- 34.41.220.214 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /storage/logs/laravel.log HTTP/1.1 show less	Bad Web Bot Web App Attack
🇩🇪 seal	2026-08-28 14:13:07 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	SSH Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2026-08-28 14:11:39 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.54.114.104

🇺🇦 176.120.100.127

🇺🇸 136.115.160.201

🇻🇳 103.176.20.115

🇩🇪 92.218.127.241

🇬🇧 35.246.123.199

🇨🇴 186.28.229.51

🇮🇳 152.52.227.94

🇩🇪 135.125.235.107

🇮🇳 122.180.242.27

🇷🇺 92.50.143.166

🇳🇱 45.148.10.188

🇨🇳 43.248.108.105

🇲🇲 37.111.53.110

🇸🇬 172.253.84.216

🇨🇳 101.126.69.201

🇩🇪 95.90.13.168

🇳🇱 93.123.109.102

🇰🇷 59.26.33.16

🇺🇸 40.124.170.250