JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.11.81.227

Recent Activity

Abuse confidence score ?

100% Critical

86 reports

68 reporters · latest 3 days ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	227.81.11.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Washington, District of Columbia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.11.81.227

Export CSV

This IP address has been reported a total of 86 times from 68 distinct sources. 34.11.81.227 was first reported on December 21st 2025, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Germany with 58 reports; Netherlands with 7 reports; France with 5 reports. The most common categories in these recent reports were: Web App Attack 58 times; Brute-Force 20 times; Bad Web Bot 17 times; Hacking 13 times; Port Scan 5 times; Other 18 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Holger	2026-10-06 17:42:22 (3 days ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-05 17:58:32 (4 days ago)	[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ... show more [mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.11.81.227 - - [05/Oct/2026:19:58:20 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 301 408 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" ... show less	Bad Web Bot Web App Attack
🇫🇷 Lacrimosa99	2026-10-05 15:38:29 (4 days ago)	34.11.81.227 - - [05/Oct/2026:17:38:26 +0200] "GET /admin HTTP/2.0" 404 224 "-" "Mozilla/5.0 (Macint ... show more 34.11.81.227 - - [05/Oct/2026:17:38:26 +0200] "GET /admin HTTP/2.0" 404 224 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.11.81.227 - - [05/Oct/2026:17:38:26 +0200] "GET /admin/login HTTP/2.0" 404 224 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.11.81.227 - - [05/Oct/2026:17:38:28 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" ... show less	Web Spam
🇩🇪 Marco711	2026-10-05 15:22:47 (4 days ago)	port/URL scanning	Port Scan Web App Attack
🇩🇪 jasperedv.de	2026-10-05 15:22:07 (4 days ago)	Apache Login - Brutforcing	Web App Attack Brute-Force
🇩🇪 DyhnenTv	2026-10-05 15:18:38 (4 days ago)	CrowdSec webserver: crowdsecurity/http-probing	Web App Attack Bad Web Bot
🇫🇷 sthoyer.de	2026-10-05 15:05:38 (4 days ago)	34.11.81.227 - - [05/Oct/2026:17:05:37 +0200] "GET /z9x8c7v6b5-debug-trigger-auth.sthoyer.de HTTP/2" ... show more 34.11.81.227 - - [05/Oct/2026:17:05:37 +0200] "GET /z9x8c7v6b5-debug-trigger-auth.sthoyer.de HTTP/2" 302 495 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.11.81.227 - - [05/Oct/2026:17:05:37 +0200] "GET /users/login HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.11.81.227 - - [05/Oct/2026:17:05:37 +0200] "GET /login HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" ... show less	Web App Attack
🇩🇪 onlyops.app	2026-10-05 15:00:10 (4 days ago)	Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-mods ... show more Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-modsecurity jail) \| onlyops.app show less	Exploited Host
🇩🇪 janbro	2026-10-05 14:53:55 (4 days ago)	Automated attempt to access sensitive configuration files.	Port Scan Hacking Web App Attack
🇩🇪 Fahreddin Ergin	2026-10-05 12:46:23 (4 days ago)	Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)	Brute-Force SSH Port Scan
Anonymous	2026-10-05 11:06:35 (4 days ago)	Scan for .env Files at 2026-10-05T11:06:35+00:00	Web App Attack
🇩🇪 lolyay	2026-10-05 10:53:43 (4 days ago)	34.11.81.227 - - [05/Oct/2026:10:53:41 +0000] "GET /.ssh/id_rsa HTTP/1.1" 200 4 "-" "Mozilla/5.0 (co ... show more 34.11.81.227 - - [05/Oct/2026:10:53:41 +0000] "GET /.ssh/id_rsa HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" 34.11.81.227 - - [05/Oct/2026:10:53:41 +0000] "GET /.ssh/id_ed25519 HTTP/1.1" 200 4 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" ... show less	Web App Attack Bad Web Bot
🇩🇪 Manuel Braeuer	2026-10-05 10:33:04 (4 days ago)	34.11.81.227 - - [05/Oct/2026:12:33:03 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de H ... show more 34.11.81.227 - - [05/Oct/2026:12:33:03 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /google-services.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /gcp-service.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /.env.example HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" ... show less	Web App Attack
🇩🇪 Ano_Nym	2026-10-05 09:29:29 (4 days ago)	CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-probing	Web App Attack
🇩🇪 Hazzard	2026-10-05 07:10:14 (4 days ago)	(PERMBLOCK) 34.11.81.227 (US/United States/District of Columbia/Washington/227.81.11.34.bc.googleuse ... show more (PERMBLOCK) 34.11.81.227 (US/United States/District of Columbia/Washington/227.81.11.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks show less	Hacking

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.9.232.170

🇯🇵 160.251.202.248

🇮🇳 143.110.182.33

🇮🇩 103.164.57.37

🇺🇸 66.132.172.233

🇺🇸 34.231.153.85

🇯🇵 5.180.77.223

🇺🇸 174.58.87.108

🇧🇷 168.228.151.152

🇩🇪 157.230.100.57

🇺🇸 148.59.129.45

🇨🇳 124.239.129.2

🇯🇵 111.238.174.6

🇲🇲 103.215.192.53

🇮🇳 103.123.53.88

🇹🇷 78.189.238.43

🇨🇳 59.50.190.203

🇳🇱 213.152.161.105

🇺🇸 172.236.228.218

🇺🇸 162.253.174.145