JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.72.16.21

34.72.16.21 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	21.16.72.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.72.16.21

Whois 34.72.16.21

IP Abuse Reports for 34.72.16.21:

This IP address has been reported a total of 45 times from 39 distinct sources. 34.72.16.21 was first reported on August 27th 2026, and the most recent report was 14 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Klaverstyn	2026-08-28 22:27:14 (14 minutes ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-08-28 22:02:47 (38 minutes ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27. show less	Web App Attack SSH Hacking
🇫🇮 as211431.net	2026-08-28 21:52:43 (48 minutes ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /%2eenv UA: crusader-worker/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 clapper	2026-08-28 21:00:42 (1 hour ago)	(mod_security) mod_security (id:949110) triggered by 34.72.16.21 (US/United States/21.16.72.34.bc.go ... show more (mod_security) mod_security (id:949110) triggered by 34.72.16.21 (US/United States/21.16.72.34.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
🇨🇭 4server	2026-08-28 20:54:45 (1 hour ago)	[FriAug2822:54:40.5251912026][security2:error][pid2986187:tid2986516][client34.72.16.21:0]ModSecurit ... show more [FriAug2822:54:40.5251912026][security2:error][pid2986187:tid2986516][client34.72.16.21:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.aesthetische.beauty.81-17-25-250.cpanel.site\"][uri\"/.env.dev\"][unique_id\"apH1kHZwCdMQBZUi0sf1DgAAAIM\"] show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-08-28 18:34:14 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 Dennis	2026-08-28 18:21:40 (4 hours ago)	34.72.16.21 has been banned for triggering http-probing (11 events over 127.162996ms).	Brute-Force Web App Attack
🇫🇷 Catalin Negru	2026-08-28 18:04:48 (4 hours ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇧🇷 Halux	2026-08-28 16:43:24 (5 hours ago)	34.72.16.21 Probing protected path or service	Web App Attack
🇩🇪 big-cloud.nl	2026-08-28 16:17:06 (6 hours ago)	Try to access /.env	Web App Attack
Anonymous	2026-08-28 16:07:05 (6 hours ago)	Automated web scanner. Requested suspicious paths: /.env.backup \| /crusader-404-probe \| /.env.old \| ... show more Automated web scanner. Requested suspicious paths: /.env.backup \| /crusader-404-probe \| /.env.old \| /.env.production \| /.env.example \| /.env.save \| /.env \| /actuator/env \| /storage/logs/laravel.log \| /.env.dev \| /.env.prod \| /_ignition/health-check \| /actuator/configprops \| /.env.bak \| /.env.local, /env \| /crusader-404-probe \| /.env.old \| /.env.production \| /.env.example \| /.env.save \| /.env \| /actuator/env \| /storage/logs/laravel.log \| /.env.dev \| /.env.prod \| /_ignition/health-check \| /actuator/configprops \| /.env.bak \| /.env.local. UTC: 2026-08-28 15:56:40. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 15:11:09 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.72.16.21 (21.16.72.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.72.16.21 (21.16.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:11:01.506561 2026] [security2:error] [pid 7577:tid 7577] [client 34.72.16.21:40880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matrixpercussiontrio.com"] [uri "/.env.prod"] [unique_id "apGlBVjVNwavItxRbQm6rAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-08-28 14:40:34 (8 hours ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) show less	Hacking Web App Attack
🇳🇱 e.fierstra	2026-08-28 14:26:13 (8 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-28 13:50:04 (8 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /wp-config.php.bak (+12 more) \| 2026-08-28 13:50 UTC show less	Hacking Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.247

🇺🇸 66.249.77.128

🇺🇸 66.132.172.35

🇳🇱 45.148.10.152

🇨🇱 2803:9810:1b3d:9a08:9945:dcaf:1c21:8e81

🇬🇧 193.163.125.177

🇲🇽 189.217.130.86

🇧🇷 162.241.62.217

🇺🇸 136.0.109.162

🇺🇸 104.152.52.200

🇩🇪 69.5.169.50

🇺🇸 35.237.206.111

🇺🇸 34.148.186.29

🇧🇪 198.235.24.195

🇸🇴 197.220.92.185

🇷🇴 193.46.255.86

🇩🇪 165.227.168.96

🇺🇸 156.232.13.218

🇲🇦 154.146.250.249

🇺🇸 104.152.52.214