JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.141.223.128

Recent Activity

Abuse Confidence Score

100% Critical

75 reports

53 reporters · latest 1 day ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 128.223.141.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇳🇱 Netherlands
City: Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

75 from 53 distinct reporters

First reported

October 22nd 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 15 🇩🇪 Germany 14 🇺🇸 United States of America 10

Most common categories Web App Attack 54 Brute-Force 26 Bad Web Bot 23 Hacking 15 SQL Injection 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-27 04:32:36 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇳🇱 Alt255	2026-10-26 21:13:52 (2 days ago)	[ti-14al] Web exploit scanning: 36 suspicious requests detected by fail2ban jail <name>. Example: 34.141.223.128 - - [25/Oct/2026:07:56:25 +0100] "GET /.env?import&url&inline HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); ... show more [ti-14al] Web exploit scanning: 36 suspicious requests detected by fail2ban jail <name>. Example: 34.141.223.128 - - [25/Oct/2026:07:56:25 +0100] "GET /.env?import&url&inline HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.141.223.128 - - [25/Oct/2026:07:56:25 +0100] "GET /@fs/.env?raw?? HTTP/1.1" 404 3648 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.141.223.128 - - [25/Oct/2026:07:56:25 +0100] "GET /.env.local?.svg?.wasm?init HTTP/1.1" 404 3648 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.141.223.128 - - [25/Oct/2026:07:56:25 +0100] "GET ... show less	Bad Web Bot Web App Attack
🇨🇭 dalslab ltd	2026-10-26 09:58:36 (2 days ago)	2026/10/26 10:58:35 [error] 480#480: 622586 limiting requests, excess: 200.390 by zone "rl_per_ip", client: 34.141.223.128, server: jf.dalslab.com, request: "GET /server.key HTTP/2.0", host: "jf.dalslab.com" 2026/10/26 10:58:35 [error] 480#480: 622 ... show more 2026/10/26 10:58:35 [error] 480#480: 622586 limiting requests, excess: 200.390 by zone "rl_per_ip", client: 34.141.223.128, server: jf.dalslab.com, request: "GET /server.key HTTP/2.0", host: "jf.dalslab.com" 2026/10/26 10:58:35 [error] 480#480: 622586 limiting requests, excess: 200.380 by zone "rl_per_ip", client: 34.141.223.128, server: jf.dalslab.com, request: "GET /@fs/src/.env?raw?? HTTP/2.0", host: "jf.dalslab.com" 2026/10/26 10:58:35 [error] 480#480: 622586 limiting requests, excess: 200.380 by zone "rl_per_ip", client: 34.141.223.128, server: jf.dalslab.com, request: "GET /@fs/../.env?raw?? HTTP/2.0", host: "jf.dalslab.com" 2026/10/26 10:58:35 [error] 480#480: 622586 limiting requests, excess: 200.380 by zone "rl_per_ip", client: 34.141.223.128, server: jf.dalslab.com, request: "GET /@fs/src/.env?raw?? HTTP/2.0", host: "jf.dalslab.com" 2026/10/26 10:58:35 [error] 480#480: *622586 limiting requests, excess: 200.380 by zone "rl_per_ip", client: 34.141.223.128, server: jf.dalsl ... show less	Brute-Force SSH
🇨🇦 CentiDevOps	2026-10-26 03:56:31 (2 days ago)	Web app scan: 31 requests in 0 s across 2 domains (301). Paths: /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ, /api/w/default/jobs_u/get_log_file/../../../../proc/self/environ, /proc/self/cmdline. Sample: 2026-10-26T03:56:31Z "GET / ... show more Web app scan: 31 requests in 0 s across 2 domains (301). Paths: /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ, /api/w/default/jobs_u/get_log_file/../../../../proc/self/environ, /proc/self/cmdline. Sample: 2026-10-26T03:56:31Z "GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" 301 show less	Hacking Web App Attack
🇨🇭 dalslab ltd	2026-10-25 21:15:32 (3 days ago)	[25/Oct/2026:22:15:32 +0100] - 405 405 - POST https ai.dalslab.com "/" [Client 34.141.223.128] [Length 31] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-" [25/Oct/2026:22:15:32 +0100] - 404 404 - ... show more [25/Oct/2026:22:15:32 +0100] - 405 405 - POST https ai.dalslab.com "/" [Client 34.141.223.128] [Length 31] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-" [25/Oct/2026:22:15:32 +0100] - 404 404 - GET https ai.dalslab.com "/static/manifest.json" [Client 34.141.223.128] [Length 22] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" [25/Oct/2026:22:15:32 +0100] - 405 405 - POST https ai.dalslab.com "/" [Client 34.141.223.128] [Length 31] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" [25/Oct/2026:22:15:32 +0100] - 405 405 - POST https ai.dalslab.com "/_next" [Client 34.141.223.128] [Length 31] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" [25/Oct/2026:22:15:32 +0100] - 405 405 - POST https ai.dalslab.com "/graphql" [Client ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇸🇬 simpeg-adm.bandung.go.id	2026-10-25 11:09:53 (3 days ago)	25/Oct/2026:11:09:48 +0000;34.141.223.128;"/robots.txt" 25/Oct/2026:11:09:49 +0000;34.141.223.128;"/sitemap.xml" 25/Oct/2026:11:09:50 +0000;34.141.223.128;"/sitemap_index.xml" 25/Oct/2026:11:09:52 +0000;34.141.223.128;"/z9x8c7v6b5-debug-trigger-app.d ... show more 25/Oct/2026:11:09:48 +0000;34.141.223.128;"/robots.txt" 25/Oct/2026:11:09:49 +0000;34.141.223.128;"/sitemap.xml" 25/Oct/2026:11:09:50 +0000;34.141.223.128;"/sitemap_index.xml" 25/Oct/2026:11:09:52 +0000;34.141.223.128;"/z9x8c7v6b5-debug-trigger-app.denisevanduren.nl" 25/Oct/2026:11:09:52 +0000;34.141.223.128;"/n6npy6shgnhm1ii31hof" 25/Oct/2026:11:09:52 +0000;34.141.223.128;"/.vite/manifest.json" 25/Oct/2026:11:09:52 +0000;34.141.223.128;"/635o3m914s4q428249h6" ... show less	Web Spam Brute-Force Web App Attack
🇩🇪 altenglaner	2026-10-25 08:08:06 (3 days ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-10-25 08:00:26 (3 days ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-25 06:56:45 (3 days ago)	[ti-14al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.141.223.128 - - \[25/Oct/2026:07:56:25 +0100\] "GET /.env\?import\&url\&inline HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Ge ... show more [ti-14al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.141.223.128 - - \[25/Oct/2026:07:56:25 +0100\] "GET /.env\?import\&url\&inline HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; ChatGPT-User/1.0\; +https://openai.com/bot" 34.141.223.128 - - \[25/Oct/2026:07:56:25 +0100\] "GET /@fs/.env\?raw\?\? HTTP/1.1" 404 3648 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalAgent/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)" 34.141.223.128 - - \[25/Oct/2026:07:56:25 +0100\] "GET /.env.local\?.svg\?.wasm\?init HTTP/1.1" 404 3648 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Claude-User/1.0\; [email protected]\)" ... show less	Bad Web Bot Web App Attack
🇺🇸 Blamdom	2026-10-25 04:32:15 (3 days ago)	Secret/config-file recon: requested /wp-admin/.env. 149 HTTP request(s), 2026-10-25 04:32:15 to 04:32:50 UTC (35s). Requests (method path -> status xcount): GET [site page] -> 404 x96 GET /wp-includes/... -> 200 x11 GET /wp-includes/... -> 404 ... show more Secret/config-file recon: requested /wp-admin/.env. 149 HTTP request(s), 2026-10-25 04:32:15 to 04:32:50 UTC (35s). Requests (method path -> status xcount): GET [site page] -> 404 x96 GET /wp-includes/... -> 200 x11 GET /wp-includes/... -> 404 x11 GET [site page] -> 200 x3 GET [site page] -> 302 x3 GET /wp-content/... -> 200 x3 GET /wp-sitemap.xml/... -> 200 x2 POST [site page] -> 404 x2 ...+16 more distinct requests UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 (+12 other UAs) show less	Hacking Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-10-25 04:02:13 (3 days ago)	34.141.223.128 - - [25/Oct/2026:04:01:54 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 23456 "http://tuforodebolsa.com/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safa ... show more 34.141.223.128 - - [25/Oct/2026:04:01:54 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 23456 "http://tuforodebolsa.com/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.141.223.128" 34.141.223.128 - - [25/Oct/2026:04:01:58 +0000] "GET /.env HTTP/2.0" 403 20 "http://tuforodebolsa.com/.env" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" edge="34.141.223.128" 34.141.223.128 - - [25/Oct/2026:04:02:01 +0000] "GET /.env.prod HTTP/2.0" 403 24336 "http://tuforodebolsa.com/.env.prod" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "-" edge="34.141.223.128" 34.141.223.128 - - [25/Oct/2026:04:02:02 +0000] "GET /.env.production HTTP/2.0" 403 24319 "http://tuforodebolsa.com/.env.production" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ... show less	Web App Attack
🇩🇪 maxpower	2026-10-25 03:46:07 (3 days ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.141.223.128 (128.223.141.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.141.223.128 - - [25/Oct/2026:04:46:01 +0100 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.141.223.128 (128.223.141.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.141.223.128 - - [25/Oct/2026:04:46:01 +0100] "GET /secrets.env HTTP/2.0" 429 41 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "34.141.223.128" host=tikitakaplanet.it show less	Port Scan
🇩🇪 maxpower	2026-10-25 03:04:23 (3 days ago)	(PERMBLOCK) 34.141.223.128 (128.223.141.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:	Port Scan
🇨🇦 Anytech	2026-10-25 01:37:06 (3 days ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇩🇪 Jarda_H	2026-10-25 00:35:34 (3 days ago)	http-probing	Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇹 213.47.155.244

🇲🇽 201.173.65.246

🇿🇦 197.82.164.156

🇸🇪 185.246.128.133

🇮🇩 182.8.178.198

🇨🇦 154.80.128.148

🇺🇸 147.185.132.117

🇳🇱 138.226.239.22

🇳🇵 103.191.131.53

🇺🇸 91.230.168.23

🇺🇸 40.112.183.29

🇬🇧 35.203.210.247

🇬🇧 2.101.196.241

🇰🇷 221.162.218.85

🇦🇷 200.59.92.170

🇧🇷 190.89.199.178

🇦🇹 188.64.212.164

🇧🇦 185.26.179.135

🇭🇰 183.179.202.46

🇮🇳 182.79.112.190