JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.165.72.1

34.165.72.1 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	1.72.165.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.165.72.1

Whois 34.165.72.1

IP Abuse Reports for 34.165.72.1:

This IP address has been reported a total of 36 times from 26 distinct sources. 34.165.72.1 was first reported on September 15th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-09-17 16:57:05 (11 hours ago)	Domain : comunicados-cgt.es Rule : env 2026-09-17 16:56:21 *hidden-privacy* GET /.env.local - 44 ... show more Domain : comunicados-cgt.es Rule : env 2026-09-17 16:56:21 *hidden-privacy* GET /.env.local - 443 - 34.165.72.1 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - comunicados-cgt.es 301 0 0 559 285 70 - - show less	Hacking SQL Injection
🇷🇴 iulianh	2026-09-17 14:18:59 (14 hours ago)	80,443	Brute-Force SSH
Anonymous	2026-09-17 13:21:13 (15 hours ago)	fail2ban jail apache-secrets-probe: 34.165.72.1 - - [15/Sep/2026:18:00:39 -0700] "GET /.git/config H ... show more fail2ban jail apache-secrets-probe: 34.165.72.1 - - [15/Sep/2026:18:00:39 -0700] "GET /.git/config HTTP/1.1" 403 526 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 WellSpring	2026-09-17 13:07:39 (15 hours ago)	env leak on comrepute.org/backend/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇬🇧 consul.to	2026-09-17 12:42:40 (16 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-17 12:28:12 (16 hours ago)	Bot / seems abusive / Apache connections: 21	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 12:27:03 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:26:58.799240 2026] [security2:error] [pid 19060:tid 19060] [client 34.165.72.1:53634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computersraleigh.com"] [uri "/.git/config"] [unique_id "aqvckgJ7vPzMxCRPBhMS0QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-09-17 12:14:04 (16 hours ago)	tcp/443 (4 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-09-17 11:39:09 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:39:03.587476 2026] [security2:error] [pid 25865:tid 25865] [client 34.165.72.1:52724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computergeek.us"] [uri "/.git/config"] [unique_id "aqvRVwv2Y9zALqaD142bhgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-17 11:17:44 (17 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 netclix.gr	2026-09-17 10:58:42 (17 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.165.72.1 (IL/Israel/1.72.165.34.bc.g ... show more (mod_security) mod_security triggered on hostname [redacted] 34.165.72.1 (IL/Israel/1.72.165.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-17 10:53:16 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:53:11.118735 2026] [security2:error] [pid 6144:tid 6156] [client 34.165.72.1:51360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computeinitiative.org"] [uri "/.git/config"] [unique_id "aqvGl2KNlz0pffqq2xIv8AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-17 10:06:26 (18 hours ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.165.72.1 - - [17/Sep/2026:12:06:05 +0200] "GET /.git/config HTTP/1.1" 302 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 09:51:03 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.165.72.1 (1.72.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:50:55.958741 2026] [security2:error] [pid 2614:tid 2614] [client 34.165.72.1:43388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "compu-web.net"] [uri "/.git/config"] [unique_id "aqu3_1WkOffPHRVb6SGWXAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-17 08:21:30 (20 hours ago)	Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\$(?:\\\\(.\\\\ ... show more Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.\\\$\|.)\\\\)\|\\\\{.\\\\})\| (932130-131) show less	Hacking

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇾 128.65.59.152

🇨🇳 121.46.239.204

🇨🇳 111.221.239.170

🇳🇱 45.148.10.26

🇬🇧 194.50.235.139

🇸🇬 188.166.222.68

🇧🇷 187.91.201.20

🇲🇽 177.249.175.227

🇩🇪 167.94.146.32

🇦🇷 148.222.194.247

🇫🇮 147.185.133.126

🇵🇱 109.205.211.23

🇺🇸 100.29.192.90

🇺🇦 95.158.16.92

🇫🇷 85.217.140.7

🇵🇰 72.255.32.163

🇱🇹 62.60.130.253

🇺🇸 20.84.73.229

🇻🇳 14.225.218.99

🇨🇦 192.175.111.246