JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.28.125.61

Recent Activity

Abuse Confidence Score

100% Critical

45 reports

36 reporters · latest 4 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 61.125.28.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

45 from 36 distinct reporters

First reported

November 5th 2026

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 10 🇺🇸 United States of America 9 🇩🇪 Germany 6

Most common categories Web App Attack 37 Bad Web Bot 16 Brute-Force 16 Hacking 13 SSH 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Neoloop	2026-11-08 19:19:18 UTC · (4 days ago)	[Sun Nov 08 20:19:12.288259 2026] [ssl:error] [pid 2460890:tid 2460890] [client 34.28.125.61:16254] AH02032: Hostname pneuin.sk provided via SNI and hostname no-such-host-8f3a1b.invalid provided via HTTP have no compatible SSL setup [Sun Nov 08 20:19 ... show more [Sun Nov 08 20:19:12.288259 2026] [ssl:error] [pid 2460890:tid 2460890] [client 34.28.125.61:16254] AH02032: Hostname pneuin.sk provided via SNI and hostname no-such-host-8f3a1b.invalid provided via HTTP have no compatible SSL setup [Sun Nov 08 20:19:13.703658 2026] [ssl:error] [pid 2461290:tid 2461290] [client 34.28.125.61:27774] AH02032: Hostname pneuin.sk provided via SNI and hostname staging.pneuin.sk provided via HTTP have no compatible SSL setup [Sun Nov 08 20:19:15.206901 2026] [ssl:error] [pid 2460595:tid 2460595] [client 34.28.125.61:18436] AH02032: Hostname pneuin.sk provided via SNI and hostname dev.pneuin.sk provided via HTTP have no compatible SSL setup [Sun Nov 08 20:19:15.588729 2026] [ssl:error] [pid 2461231:tid 2461231] [client 34.28.125.61:18430] AH02032: Hostname pneuin.sk provided via SNI and hostname api.pneuin.sk provided via HTTP have no compatible SSL setup [Sun Nov 08 20:19:17.289015 2026] [ssl:error] [pid 2460990:tid 2460990] [client 34.28.125.61:18450] AH0203 ... show less	Brute-Force
🇨🇦 Dunham Support	2026-11-08 09:41:12 UTC · (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.28.125.61 (US/United States/61.125.28.34.bc.googleusercontent.com)	SQL Injection
🇺🇸 tdamg	2026-11-08 08:55:14 UTC · (4 days ago)	Automated probing for secret and config files (.env, cloud credential files): 8 refused requests to 7 distinct paths (HTTP 403/404), 2026-11-08 08:55 to 08:55 UTC. Blocked at firewall.	Web App Attack Hacking
🇩🇪 LRob	2026-11-08 03:36:14 UTC · (4 days ago)	Secret file probe \| method: GET, POST \| path: /.git/HEAD, /.vite/manifest.json, /_nuxt/manifest.json (+1 more) \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36, Mozilla/5.0 (compati ... show more Secret file probe \| method: GET, POST \| path: /.git/HEAD, /.vite/manifest.json, /_nuxt/manifest.json (+1 more) \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; scanner/1.0) show less	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-11-08 02:04:30 UTC · (4 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.	Hacking Exploited Host Web App Attack
Anonymous	2026-11-08 00:53:47 UTC · (5 days ago)	Probing for exposed secret / credential files	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-07 23:01:01 UTC · (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-06.	Web App Attack SSH Hacking
🇸🇪 vaia.cloud	2026-11-07 20:30:01 UTC · (5 days ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇳🇱 Alt255	2026-11-07 20:14:43 UTC · (5 days ago)	[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.28.125.61 - - [07/Nov/2026:21:14:21 +0100] "GET /.git/HEAD HTTP/1.1" 404 93424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ... show more [ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.28.125.61 - - [07/Nov/2026:21:14:21 +0100] "GET /.git/HEAD HTTP/1.1" 404 93424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-11-07 15:06:10 UTC · (5 days ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx	Hacking Brute-Force SSH
Anonymous	2026-11-07 13:54:14 UTC · (5 days ago)	PSCSERV WPSCAN 34.28.125.61	Bad Web Bot Web App Attack
Anonymous	2026-11-07 11:16:02 UTC · (5 days ago)	Bot / scanning and/or hacking attempts: GET /stats.json HTTP/1.1, GET /commons.js.map HTTP/1.1, GET /vendor.js.map HTTP/1.1, GET /.git/HEAD HTTP/1.1, GET /static/js/main.js HTTP/1.1, GET /asset-manifest.json HTTP/1.1, GET /main.js.map HTTP/1.1, GET / ... show more Bot / scanning and/or hacking attempts: GET /stats.json HTTP/1.1, GET /commons.js.map HTTP/1.1, GET /vendor.js.map HTTP/1.1, GET /.git/HEAD HTTP/1.1, GET /static/js/main.js HTTP/1.1, GET /asset-manifest.json HTTP/1.1, GET /main.js.map HTTP/1.1, GET /webpack.json HTTP/1.1, GET /_next/static/chunks/webpack.js HTTP/1.1, GET /_next/static/chunks/framework.js HTTP/1.1, GET /bundle.js.map HTTP/1.1, GET /vite.config.js HTTP/1.1, GET /_next/static/chunks/main.js HTTP/1.1, GET /.vite/manifest.json HTTP/1.1, GET /app.js.map HTTP/1.1, GET / HTTP/1.1, GET /runtime.js.map HTTP/1.1, GET /_next/static/chunks/pages/_app.js HTTP/1.1, GET /.env.production HTTP/1.1, GET /secrets/aws.json HTTP/1.1, GET /config/aws.json HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 debestelapp	2026-11-07 06:30:10 UTC · (5 days ago)		Web App Attack
🇬🇧 openstrike.co.uk	2026-11-07 06:16:29 UTC · (5 days ago)	10 attacks on config grabbing URLs (type 2), password/key grabbing URLs, VC URLs, site downloads (type 2), log4j probes: GET /config/firebase-adminsdk.json HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /v2/ HTTP/1.1 GET / HTTP/1 ... show more 10 attacks on config grabbing URLs (type 2), password/key grabbing URLs, VC URLs, site downloads (type 2), log4j probes: GET /config/firebase-adminsdk.json HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /v2/ HTTP/1.1 GET / HTTP/1.1 show less	Hacking
🇫🇷 masterguru	2026-11-07 06:03:21 UTC · (5 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 104.236.54.132

🇰🇷 210.206.95.162

🇬🇧 188.240.59.20

🇮🇹 185.15.170.78

🇺🇸 104.236.229.227

🇺🇸 91.230.168.213

🇩🇪 51.89.38.136

🇵🇾 45.235.122.11

🇯🇵 34.97.173.103

🇨🇳 14.103.118.153

🇳🇱 138.226.239.234

🇳🇱 138.226.239.233

🇧🇷 131.0.7.232

🇺🇸 107.152.44.215

🇿🇦 102.217.240.82

🇳🇱 64.205.72.225

🇸🇬 47.82.53.215

🇬🇧 35.203.210.117

🇹🇼 34.81.28.243

🇷🇴 2.57.122.168