JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.175.0.11

34.175.0.11 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	11.0.175.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.175.0.11

Whois 34.175.0.11

IP Abuse Reports for 34.175.0.11:

This IP address has been reported a total of 46 times from 32 distinct sources. 34.175.0.11 was first reported on July 18th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sdos.es	2026-07-19 01:41:49 (4 minutes ago)	"Restricted File Access Attempt - Matched Data: .ssh/id_dsa found within REQUEST_FILENAME: /.ssh/id_ ... show more "Restricted File Access Attempt - Matched Data: .ssh/id_dsa found within REQUEST_FILENAME: /.ssh/id_dsa" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 01:26:53 (19 minutes ago)	(mod_security) mod_security (id:210730) triggered by 34.175.0.11 (11.0.175.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210730) triggered by 34.175.0.11 (11.0.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 21:26:48.697945 2026] [security2:error] [pid 28619:tid 28713] [client 34.175.0.11:56458] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|venezuelaguia.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "venezuelaguia.com"] [uri "/z9x8c7v6b5-debug-trigger-venezuelaguia.com"] [unique_id "alwn2Iaj3Vvt5f4CJbc_wQAAAFg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 antihack.anarchista.xyz	2026-07-19 01:12:49 (33 minutes ago)	404 burst: 20 hits in 5 min, URI /privatekey.key, Ref , UA Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ... show more 404 burst: 20 hits in 5 min, URI /privatekey.key, Ref , UA Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] show less	Brute-Force Web App Attack Bad Web Bot
🇩🇪 LRob	2026-07-19 01:01:37 (44 minutes ago)	CrowdSec: crowdsecurity/http-probing \| req: / \| 11 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0 ... show more CrowdSec: crowdsecurity/http-probing \| req: / \| 11 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇮🇪 Jim Keir	2026-07-19 00:50:44 (55 minutes ago)	2026-07-19 00:50:44 34.175.0.11 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇳🇱 Savvii	2026-07-19 00:45:11 (1 hour ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇺🇸 billfor	2026-07-19 00:43:12 (1 hour ago)	34.175.0.11 - - [18/Jul/2026:20:43:05 -0400] "GET /.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit ... show more 34.175.0.11 - - [18/Jul/2026:20:43:05 -0400] "GET /.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" show less	Web App Attack
🇧🇷 vfAcceloReporter	2026-07-18 23:22:58 (2 hours ago)	34.175.0.11 - - [18/Jul/2026:20:22:57 -0300] "GET /.env HTTP/2.0" 301 169 "-" "Mozilla/5.0 AppleWebK ... show more 34.175.0.11 - - [18/Jul/2026:20:22:57 -0300] "GET /.env HTTP/2.0" 301 169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" ... show less	Brute-Force Web App Attack Exploited Host
🇺🇸 Victor López	2026-07-18 23:17:39 (2 hours ago)	videoprenatal.com 34.175.0.11 - - [18/Jul/2026:18:17:38 -0500] "GET /.git/HEAD HTTP/2.0" 404 18869 " ... show more videoprenatal.com 34.175.0.11 - - [18/Jul/2026:18:17:38 -0500] "GET /.git/HEAD HTTP/2.0" 404 18869 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" - videoprenatal.com 34.175.0.11 - - [18/Jul/2026:18:17:39 -0500] "GET /.git/config HTTP/2.0" 404 18867 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" - videoprenatal.com 34.175.0.11 - - [18/Jul/2026:18:17:39 -0500] "GET /.git-credentials HTTP/2.0" 404 18870 "-" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)" - ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 23:17:33 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.175.0.11 (11.0.175.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.175.0.11 (11.0.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 19:17:30.460068 2026] [security2:error] [pid 7247:tid 7247] [client 34.175.0.11:59942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vffv.com"] [uri "/web.config"] [unique_id "alwJirLIbSeNCihXTalLZAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 23:06:03 (2 hours ago)	Detected by CrowdSec: crowdsecurity/http-sensitive-files	Web App Attack
Anonymous	2026-07-18 22:58:50 (2 hours ago)	34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /webpack-stats.json HTTP/1.1" 404 60361 34.175.0.1 ... show more 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /webpack-stats.json HTTP/1.1" 404 60361 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /_next/static/buildManifest.js HTTP/1.1" 404 65230 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /build-manifest.json HTTP/1.1" 404 65198 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /_next/build-manifest.json HTTP/1.1" 404 65217 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /manifest.json HTTP/1.1" 404 65180 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /asset-manifest.json HTTP/1.1" 404 65198 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /__env.js HTTP/1.1" 404 65165 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /service-worker.js HTTP/1.1" 404 65192 34.175.0.11 - - [19/Jul/2026:00:58:49 +0200] "GET /sw.js HTTP/1.1" 404 65156 34.175.0.11 - - [19/Jul/2026:00:58:50 +0200] "GET /graphql HTTP/1.1" 404 60328 ... show less	Web Spam Web App Attack
🇺🇸 SiliSoftware	2026-07-18 22:32:08 (3 hours ago)	/.gitconfig	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 22:25:07 (3 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.175.0.11 (11.0.175.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210730) triggered by 34.175.0.11 (11.0.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 18:24:59.762019 2026] [security2:error] [pid 8254:tid 8254] [client 34.175.0.11:48604] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vigants.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vigants.com"] [uri "/z9x8c7v6b5-debug-trigger-vigants.com"] [unique_id "alv9O2kXxB1OPFVTWjW0cgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-07-18 21:49:53 (3 hours ago)	2026-07-18 21:49:52 34.175.0.11 File scanning, blocking 34.175.0.11 for 5 minutes	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.28.13.252

🇺🇸 162.216.150.9

🇸🇬 152.32.218.149

🇺🇸 69.124.32.101

🇺🇸 65.49.1.112

🇮🇪 54.171.170.82

🇺🇸 50.244.216.181

🇳🇱 45.148.10.141

🇮🇳 2400:6180:100:d0:0:1:5c3d:4001

🇺🇸 162.216.149.225

🇱🇹 77.90.185.135

🇧🇬 77.76.140.113

🇺🇸 73.104.199.171

🇺🇸 45.79.132.41

🇨🇳 14.103.117.173

🇺🇦 194.44.140.131

🇨🇴 179.1.233.43

🇩🇪 167.172.108.77

🇺🇸 159.65.255.7

🇺🇸 143.198.27.86