JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.187.157.228

Recent Activity

Abuse Confidence Score

100% Critical

69 reports

53 reporters · latest 15 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 228.157.187.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

69 from 53 distinct reporters

First reported

August 17th 2026

Most recent report

15 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 21 🇺🇸 United States of America 20 🇫🇮 Finland 7

Most common categories Web App Attack 58 Bad Web Bot 28 Brute-Force 20 Hacking 16 SSH 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-11-05 23:02:12 UTC · (15 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.	Web App Attack SSH Hacking
🇺🇸 TtlPst	2026-11-05 13:32:58 UTC · (1 day ago)	App probing / vulnerability scanning in path /.git/config	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-05 00:57:38 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.187.157.228 (228.157.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:57:33.564349 2026] [security2:error] [pid 16719:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.187.157.228 (228.157.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:57:33.564349 2026] [security2:error] [pid 16719:tid 16719] [client 34.187.157.228:34646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usagreenrecycling.com"] [uri "/.git/config"] [unique_id "auvUffYOtIhgCq2UDgK-ygAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-05 00:41:57 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: url.budyn.ovh \| Path: /.git/config \| User-Agent: Unknown User-Agent \| Request: [Empty / GET R ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: url.budyn.ovh \| Path: /.git/config \| User-Agent: Unknown User-Agent \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇩🇪 todix	2026-11-05 00:41:39 UTC · (1 day ago)	"GET /.git/config HTTP/1.1" 403 6505 "-" "-"	Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 00:39:13 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.187.157.228 (228.157.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:39:07.877399 2026] [security2:error] [pid 29859:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.187.157.228 (228.157.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:39:07.877399 2026] [security2:error] [pid 29859:tid 29859] [client 34.187.157.228:42980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "urie.to"] [uri "/.git/config"] [unique_id "auvQK30YEBE-KHGjhsmwBwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-11-05 00:31:39 UTC · (1 day ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇩🇪 thesimonmanuel	2026-11-05 00:13:28 UTC · (1 day ago)	34.187.157.228 - - [05/Nov/2026:05:43:27 +0530] "GET /.git/config HTTP/1.1" 200 618 "-" "-" "-"	Web App Attack
🇫🇮 pixiekat	2026-11-05 00:11:36 UTC · (1 day ago)	Banned by fail2ban (modsec-tripwire, 1 hits) [msg "no source code for you"]	Bad Web Bot Web App Attack
Anonymous	2026-11-05 00:02:38 UTC · (1 day ago)	Web application attack detected.	Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 00:01:23 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.187.157.228 (228.157.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:01:18.940465 2026] [security2:error] [pid 32683:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.187.157.228 (228.157.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:01:18.940465 2026] [security2:error] [pid 32683:tid 32683] [client 34.187.157.228:54868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uppendahl.net"] [uri "/.git/config"] [unique_id "auvHTilsz5cWPooGkufcPwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇳 unph	2026-11-04 23:35:34 UTC · (1 day ago)	Malicious probe detected: Repositorio Git expuesto (Method: GET, Probe: /.git/config, UA: )	Web App Attack Bad Web Bot
🇩🇪 IVski.com	2026-11-04 23:33:47 UTC · (1 day ago)	IVski WAF \| Sensitive file probe - looking for exposed .git/config	Hacking Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-11-04 23:31:46 UTC · (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14	Exploited Host Web App Attack
🇵🇱 MatStef132	2026-11-04 23:29:11 UTC · (1 day ago)	MatShield L7: blocked on unlocknow.cc (secret-path-probe)	DDoS Attack

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.236.102.195

100.103.206.195

100.103.67.171

100.75.64.56

100.72.205.36

🇺🇸 69.251.27.33

🇳🇱 45.148.10.141

🇨🇳 36.33.19.48

🇺🇸 35.245.185.104

🇪🇸 34.175.185.160

🇳🇱 185.218.86.20

🇲🇾 180.74.66.15

🇻🇳 171.225.193.43

🇲🇦 105.71.132.90

🇺🇸 97.212.165.121

🇩🇪 94.183.174.99

🇺🇸 65.49.1.175

🇳🇱 45.148.10.151

🇺🇸 199.165.159.116

🇸🇬 194.5.82.74