JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.74.106.28

Activity Trending Down

Abuse confidence score ?

100% Critical

82 reports

60 reporters · latest 2 weeks ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	28.106.74.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.74.106.28

Export CSV

This IP address has been reported a total of 82 times from 60 distinct sources. 34.74.106.28 was first reported on September 3rd 2026, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: Germany with 18 reports; United States of America with 17 reports; Netherlands with 11 reports. The most common categories in these recent reports were: Web App Attack 59 times; Bad Web Bot 31 times; Brute-Force 30 times; Hacking 16 times; Port Scan 5 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Holger	2026-10-14 06:32:51 (2 weeks ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇩🇪 Holger	2026-10-14 06:17:48 (2 weeks ago)	WordPress WebAttack	Brute-Force Web App Attack
🇩🇪 Holger	2026-10-10 10:25:28 (2 weeks ago)	WordPress WebAttack	Brute-Force Web App Attack
🇺🇸 gamabe	2026-10-09 06:05:39 (2 weeks ago)	Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.	Hacking
🇳🇱 Savvii	2026-10-09 05:29:41 (2 weeks ago)	20 attempts against mh-misbehave-ban on lunar	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-09 05:08:02 (2 weeks ago)	Bot / scanning and/or hacking attempts: GET /.env.backup HTTP/2.0, GET /serverless.yml HTTP/2.0, POS ... show more Bot / scanning and/or hacking attempts: GET /.env.backup HTTP/2.0, GET /serverless.yml HTTP/2.0, POST /dashboard HTTP/2.0, GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/2.0, GET /.npmrc HTTP/2.0, GET /Dockerfile HTTP/2.0, GET /.ssh/id_rsa HTTP/2.0, GET /docker-compose.yaml HTTP/2.0, POST /admin HTTP/2.0, GET /.htpasswd HTTP/2.0, GET /serviceAccountKey.json HTTP/2.0, GET /firebase-adminsdk.json HTTP/2.0, POST /api HTTP/2.0, GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/env, GET /proc/self/cmdline HTTP/2.0, GET /docker-compose.yml HTTP/2.0, GET /.ssh/id_ed25519 HTTP/2.0, GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/en, GET /src/.env HTTP/2.0, GET /@fs/var/task/.env?raw?? HTTP/2.0, GET /terraform.tfstate HTTP/2.0 show less	Hacking Web App Attack
🇩🇪 Holger	2026-10-09 05:07:40 (2 weeks ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-10-09 04:32:56 (2 weeks ago)	Many_bad_calls	Web App Attack
🇩🇪 maxpower	2026-10-09 04:21:10 (2 weeks ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.106.28 (US/United States/28.106.74 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.106.28 (US/United States/28.106.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.106.28 - - [09/Oct/2026:06:21:08 +0200] "GET /.ssh/id_rsa HTTP/2.0" 403 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "34.74.106.28" host=vortici.it show less	Port Scan
🇫🇷 j-tap	2026-10-09 04:15:09 (2 weeks ago)	WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)	Web App Attack
🇨🇿 ptlab	2026-10-09 04:12:39 (2 weeks ago)	Web attack probes: 96 suspicious URL paths (91 known-malicious), 98 requests; 5 successful (2xx) req ... show more Web attack probes: 96 suspicious URL paths (91 known-malicious), 98 requests; 5 successful (2xx) requests to attack paths; types: admin-panel, cgi, lfi, rce, sensitive-files, traversal, wordpress; last seen 2026-10-09 (UTC). Reported automatically by PathDB log analysis. show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-10-09 04:07:05 (2 weeks ago)	Automated web scanner. Requested suspicious paths: /.vite/manifest.json \| /dist/manifest.json \| /dis ... show more Automated web scanner. Requested suspicious paths: /.vite/manifest.json \| /dist/manifest.json \| /dist/.vite/manifest.json \| /build/manifest.json. UTC: 2026-10-09 03:55:42. show less	Web App Attack
🇺🇸 WizardsToolkit	2026-10-09 03:46:06 (2 weeks ago)	attempted to access /@fs/app/.env?raw??	Web App Attack
🇫🇷 regishoussin	2026-10-09 03:31:02 (2 weeks ago)	Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ... show more Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-09 03:31 UTC. show less	Bad Web Bot Web App Attack
🇺🇸 gamabe	2026-10-09 03:30:51 (2 weeks ago)	Detected crowdsecurity/http-dos-swithcing-ua attack pattern. Reported by CrowdSec IDS.	Hacking

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 144.31.185.241

🇻🇳 103.195.236.196

🇷🇺 94.180.139.162

🇫🇷 62.171.183.5

🇺🇸 216.180.246.208

🇹🇼 210.61.216.167

🇺🇸 193.3.53.5

🇳🇱 138.226.239.91

🇨🇳 124.88.113.254

🇵🇰 101.53.224.63

🇭🇰 101.36.116.151

🇰🇷 43.133.238.67

🇮🇩 36.37.73.242

🇧🇪 207.175.245.117

🇧🇪 198.235.24.165

🇮🇹 188.218.100.52

🇺🇸 184.194.161.222

🇺🇸 172.96.181.191

🇸🇪 91.189.92.23

🇮🇶 65.20.189.52