JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.48.216.2

34.48.216.2 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	2.216.48.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Washington, District of Columbia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.48.216.2

Whois 34.48.216.2

IP Abuse Reports for 34.48.216.2:

This IP address has been reported a total of 54 times from 39 distinct sources. 34.48.216.2 was first reported on August 28th 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 ☠\|ʂɧąɖơῳ\|☠	2026-09-01 06:24:03 (21 hours ago)	[2026-09-01 06:24:03 UTC] Vulnerability/exploit scanning detected from 34.48.216.2 (2.216.48.34.bc.g ... show more [2026-09-01 06:24:03 UTC] Vulnerability/exploit scanning detected from 34.48.216.2 (2.216.48.34.bc.googleusercontent.com) PATHS: unknown show less	Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-08-31 00:01:03 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇮 ☠\|ʂɧąɖơῳ\|☠	2026-08-30 14:52:24 (2 days ago)	[2026-08-30 14:52:24 UTC] Vulnerability/exploit scanning detected from 34.48.216.2 (2.216.48.34.bc.g ... show more [2026-08-30 14:52:24 UTC] Vulnerability/exploit scanning detected from 34.48.216.2 (2.216.48.34.bc.googleusercontent.com) PATHS: unknown show less	Bad Web Bot Web App Attack
Anonymous	2026-08-30 03:38:18 (2 days ago)	34.48.216.2 46.39.185.24 - [30/Aug/2026:05:38:17 +0200] "GET /.env HTTP/1.1" 404 158 "-" "crusader-w ... show more 34.48.216.2 46.39.185.24 - [30/Aug/2026:05:38:17 +0200] "GET /.env HTTP/1.1" 404 158 "-" "crusader-worker/1.0" ... show less	Hacking Web App Attack
🇧🇪 sid3windr	2026-08-30 02:25:50 (3 days ago)	GET /.env (Tarpitted for 4m20s, wasted 15.35kB)	Web App Attack
🇧🇪 sid3windr	2026-08-30 01:16:37 (3 days ago)	GET /.env (Tarpitted for 2m8s, wasted 7.62kB)	Web App Attack
🇺🇸 its101	2026-08-30 00:55:04 (3 days ago)	Automated detection by LockdownAccess security system. Attack type(s): env_grab, wp_probe, framework ... show more Automated detection by LockdownAccess security system. Attack type(s): env_grab, wp_probe, framework_probe. Reason: Nginx: env_grab attack. Path targeted: unknown. Blocked in Cloudflare. show less	Web App Attack
🇿🇦 conure.sh	2026-08-29 12:01:38 (3 days ago)	csagent: score 20.8: 404 noise floor x3, secrets grab x1, wp-config backup grab x1; 1 domain(s) in 0 ... show more csagent: score 20.8: 404 noise floor x3, secrets grab x1, wp-config backup grab x1; 1 domain(s) in 0s show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 03:46:42 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.48.216.2 (2.216.48.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.48.216.2 (2.216.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:46:37.123373 2026] [security2:error] [pid 30929:tid 30929] [client 34.48.216.2:39954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.createbelieve.mroxygen.org"] [uri "/.env.save"] [unique_id "apJWHRu0pTIkpjeFG87u_wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-29 02:43:20 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 rollenspiel.network	2026-08-29 02:29:18 (4 days ago)	CrowdSec detection: crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 02:12:51 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.48.216.2 (2.216.48.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.48.216.2 (2.216.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 22:12:44.497741 2026] [security2:error] [pid 14686:tid 14686] [client 34.48.216.2:33788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.casaluzislamujeres.com"] [uri "/.env.backup"] [unique_id "apJAHEpTdVyRz4sYBoJiyQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-29 02:12:03 (4 days ago)	Bot / scanning and/or hacking attempts: GET /.env.prod HTTP/1.1, GET /.ENV HTTP/1.1, GET /.env.old H ... show more Bot / scanning and/or hacking attempts: GET /.env.prod HTTP/1.1, GET /.ENV HTTP/1.1, GET /.env.old HTTP/1.1, GET //.env HTTP/1.1, GET /.env/ HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /env HTTP/1.1, GET /.env. HTTP/1.1, GET /%2eenv HTTP/1.1, GET / HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.local HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.example HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env;.png HTTP/1.1, GET /.env HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.production HTTP/1.1, GET /wp-config.php.bak HTTP/1.1 show less	Hacking Web App Attack
🇮🇹 madaello	2026-08-29 02:05:24 (4 days ago)	34.48.216.2 - - [29/Aug/2026:04:05:24 +0200] "GET /.env HTTP/1.1" 301 575 "-" "crusader-worker/1.0" ... show more 34.48.216.2 - - [29/Aug/2026:04:05:24 +0200] "GET /.env HTTP/1.1" 301 575 "-" "crusader-worker/1.0" 34.48.216.2 - - [29/Aug/2026:04:05:24 +0200] "GET /.env.production HTTP/1.1" 301 597 "-" "crusader-worker/1.0" 34.48.216.2 - - [29/Aug/2026:04:05:24 +0200] "GET /.env.bak HTTP/1.1" 301 583 "-" "crusader-worker/1.0" 34.48.216.2 - - [29/Aug/2026:04:05:24 +0200] "GET /.env.prod HTTP/1.1" 301 585 "-" "crusader-worker/1.0" ... show less	Hacking
Anonymous	2026-08-29 02:05:03 (4 days ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a12:da85:2260:3068:8607:dd73:67a2:ab1e

🇹🇭 203.151.27.181

🇯🇵 182.171.90.17

🇳🇱 172.253.7.211

🇺🇸 162.216.150.126

🇭🇰 150.5.148.103

🇫🇮 147.185.133.42

🇺🇸 124.198.131.186

🇩🇪 104.207.62.28

🇩🇪 69.5.169.83

🇺🇸 66.132.172.235

🇱🇺 64.89.161.82

🇫🇷 51.75.21.168

🇹🇿 41.93.28.9

🇬🇧 35.203.210.247

🇺🇸 3.131.220.121

🇫🇷 2a13:f47:aa4d:dd01:b9a8:177d:ce50:99e3

🇫🇷 2a13:f46:5934:bb7f:fbc9:70de:d742:33ec

🇫🇷 2a13:f40:f3d0:e397:70af:13c0:23f0:e814

🇫🇷 2a13:f40:4c14:a7b2:ffc0:98c4:7471:cec8