JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.70.245.221

34.70.245.221 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 76%: ?

76%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	221.245.70.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.70.245.221

Whois 34.70.245.221

IP Abuse Reports for 34.70.245.221:

This IP address has been reported a total of 21 times from 14 distinct sources. 34.70.245.221 was first reported on August 27th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-27 18:14:07 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:14:02.132971 2026] [security2:error] [pid 29254:tid 29254] [client 34.70.245.221:49322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "independentmusicconference.com"] [uri "/wp-config.php.bak"] [unique_id "apB-akTTGPE9ZGa51g_m8QAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 fmomo3143	2026-08-27 17:54:38 (3 hours ago)	cie-7 : Trying access unauthorized files/dir=>/wp-config.php.bak	Hacking
🇳🇱 enpepet	2026-08-27 17:28:54 (3 hours ago)	GENERAL: parametres: [url:env=] UA:crusader-worker/1.0 URL:/.env.example	Port Scan Hacking Brute-Force Bad Web Bot
🇩🇪 maxpower	2026-08-27 16:06:00 (5 hours ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.70.245.221 (US/United States/221.245.70.34. ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.70.245.221 (US/United States/221.245.70.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/27 18:05:57 [error] 3986377#3986377: 499839 access forbidden by rule, client: 34.70.245.221, server: liverpoolitalia.it, request: "GET /wp-config.php~ HTTP/1.1", host: "olscitaly.it" 2026/08/27 18:05:57 [error] 3986383#3986383: 499836 access forbidden by rule, client: 34.70.245.221, server: liverpoolitalia.it, request: "GET /wp-config.php.swp HTTP/1.1", host: "olscitaly.it" 2026/08/27 18:05:57 [error] 3986382#3986382: 499847 access forbidden by rule, client: 34.70.245.221, server: liverpoolitalia.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "olscitaly.it" show less	Port Scan
🇺🇸 mnsf	2026-08-27 16:05:09 (5 hours ago)	Abuse Detected (9)	Brute-Force Web App Attack
Anonymous	2026-08-27 15:36:42 (5 hours ago)	Scanner hitting /_ignition/health-check on element.osef.cloud (GOOGL-2) — aaguard	Brute-Force Port Scan
🇳🇱 e.fierstra	2026-08-27 14:44:46 (6 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 14:31:24 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:31:19.980368 2026] [security2:error] [pid 21031:tid 21031] [client 34.70.245.221:57384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bigpanda.expert"] [uri "/.env.local"] [unique_id "apBKN3iAgbV_3x5rRJ8aKAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-08-27 14:12:57 (7 hours ago)	34.70.245.221 - - [27/Aug/2026:17:12:57 +0300] "GET /actuator/configprops HTTP/2.0" 301 0 "-" "crusa ... show more 34.70.245.221 - - [27/Aug/2026:17:12:57 +0300] "GET /actuator/configprops HTTP/2.0" 301 0 "-" "crusader-worker/1.0" 34.70.245.221 - - [27/Aug/2026:17:12:57 +0300] "GET /actuator/env HTTP/2.0" 301 0 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 14:07:23 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:07:15.458014 2026] [security2:error] [pid 29982:tid 29985] [client 34.70.245.221:42204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mdbscommercialcleaning.com"] [uri "/.env"] [unique_id "apBEk_Yk176w0BDxAgWs5wAAAYA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-27 13:46:53 (7 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 13:12:42 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.70.245.221 (221.245.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:12:36.901037 2026] [security2:error] [pid 17899:tid 17899] [client 34.70.245.221:33700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naturev.net"] [uri "/.env.dev"] [unique_id "apA3xC-mBQlUmqIJQ2usPwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇹 juozaspo	2026-08-27 12:52:52 (8 hours ago)	Automatic Report: Too much requests to non-existing pages in a very short time, auto-banned	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-27 12:25:05 (9 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 Victor López	2026-08-27 12:12:38 (9 hours ago)	oralsaludintegral.com 34.70.245.221 - - [27/Aug/2026:07:12:37 -0500] "GET /wp-config.php.bak HTTP/1. ... show more oralsaludintegral.com 34.70.245.221 - - [27/Aug/2026:07:12:37 -0500] "GET /wp-config.php.bak HTTP/1.1" 404 55106 "-" "crusader-worker/1.0" MISS oralsaludintegral.com 34.70.245.221 - - [27/Aug/2026:07:12:37 -0500] "GET /wp-config.php.swp HTTP/1.1" 404 55106 "-" "crusader-worker/1.0" MISS oralsaludintegral.com 34.70.245.221 - - [27/Aug/2026:07:12:37 -0500] "GET /wp-config.php~ HTTP/1.1" 404 55106 "-" "crusader-worker/1.0" MISS ... show less	Hacking Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c01::124

🇦🇷 186.19.123.129

🇮🇳 168.144.79.64

🇻🇳 152.32.163.183

🇺🇸 47.251.184.15

🇯🇵 34.146.234.213

🇬🇧 193.176.29.2

🇺🇿 185.74.7.77

🇺🇸 173.254.211.184

🇨🇳 114.223.72.179

🇫🇷 92.154.57.153

🇸🇪 62.102.148.179

🇨🇳 61.145.181.7

🇦🇷 45.230.206.53

🇯🇵 8.216.1.228

🇬🇧 154.16.44.158

🇩🇪 116.203.18.194

🇳🇱 94.154.43.140

🇳🇱 91.92.47.120

🇷🇺 80.253.31.232