JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.28.170.64

34.28.170.64 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 26%: ?

26%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	64.170.28.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.28.170.64

Whois 34.28.170.64

IP Abuse Reports for 34.28.170.64:

This IP address has been reported a total of 14 times from 11 distinct sources. 34.28.170.64 was first reported on September 7th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-08 22:00:49 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-07. show less	Web App Attack SSH Hacking
🇺🇸 IndigoRidge	2026-09-07 20:22:47 (1 month ago)	[Mon Sep 07 16:22:00.589840 2026] [authz_core:error] [pid 4020:tid 140581594461952] [client 34.28.17 ... show more [Mon Sep 07 16:22:00.589840 2026] [authz_core:error] [pid 4020:tid 140581594461952] [client 34.28.170.64:0] AH01630: client denied by server configuration: /var/www/vhosts/default/htdocs/laravel [Mon Sep 07 16:22:00.646415 2026] [authz_core:error] [pid 4016:tid 140582307284736] [client 34.28.170.64:0] AH01630: client denied by server configuration: /var/www/vhosts/default/htdocs/web [Mon Sep 07 16:22:19.549195 2026] [authz_core:error] [pid 4322:tid 140581040805632] [client 34.28.170.64:0] AH01630: client denied by server configuration: /var/www/vhosts/default/htdocs/wp-config.php.bak [Mon Sep 07 16:22:19.575193 2026] [authz_core:error] [pid 4322:tid 140581049198336] [client 34.28.170.64:0] AH01630: client denied by server configuration: /var/www/vhosts/default/htdocs/config [Mon Sep 07 16:22:47.053277 2026] [authz_core:error] [pid 4322:tid 140582156478208] [client 34.28.170.64:0] AH01630: client denied by server configuration: /var/www/vhosts/default/htdocs/client ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 20:20:01 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:19:54.134328 2026] [security2:error] [pid 7818:tid 7818] [client 34.28.170.64:63640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prospects.caribbeancoders.com"] [uri "/@fs/root/.env"] [unique_id "ap8cag9kfSh1Q7mbptlBQAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 19:40:41 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:40:34.021927 2026] [security2:error] [pid 19793:tid 19809] [client 34.28.170.64:37370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plasticsurgeonsandiego.com.aafm.us"] [uri "/@fs/root/.env"] [unique_id "ap8TMoMT5RobvYSQfLGsnQAAAM0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Catalin Negru	2026-09-07 19:36:36 (1 month ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇩🇪 Petros Stefanakis	2026-09-07 19:32:54 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 34.28.170.64 (US/United States/64.170.2 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.28.170.64 (US/United States/64.170.28.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-07 19:02:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:02:01.919831 2026] [security2:error] [pid 18978:tid 18978] [client 34.28.170.64:33474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "godplusus.com"] [uri "/@fs/.env.production"] [unique_id "ap8KKRR3UhStXQFfgYlhnAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 18:28:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.28.170.64 (64.170.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:27:57.628908 2026] [security2:error] [pid 16153:tid 16153] [client 34.28.170.64:53216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.moontouchmassage.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "ap8CLalSZou-pS9CF6W-NAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-07 17:41:18 (1 month ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇮🇹 VHosting	2026-09-07 17:25:02 (1 month ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-09-07 17:21:09 (1 month ago)	Attempted access to sensitive endpoint (/@fs/../.env?raw??) detected. Automated scan or unauthorized ... show more Attempted access to sensitive endpoint (/@fs/../.env?raw??) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇫🇷 Octopuce	2026-09-07 16:47:33 (1 month ago)	Aggressive web search of vulnerable pages: /.docker/.env /v2/.env /.env.local /images../.env /v1/.en ... show more Aggressive web search of vulnerable pages: /.docker/.env /v2/.env /.env.local /images../.env /v1/.env ... show less	Web App Attack
🇩🇪 filstal.org	2026-09-07 16:18:01 (1 month ago)	Web exploit or injection attempt blocked by ModSecurity WAF.	SQL Injection Web App Attack
🇳🇱 Site.eu	2026-09-07 15:29:59 (1 month ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 160.191.115.179

🇺🇸 74.249.195.114

🇺🇸 45.92.229.202

🇳🇱 204.76.203.222

🇷🇴 193.32.162.42

🇧🇷 187.73.183.12

🇦🇷 181.25.151.145

🇺🇸 167.172.136.155

🇩🇴 152.167.139.197

🇰🇷 125.142.37.91

🇧🇷 104.28.230.106

🇳🇱 104.23.170.63

🇻🇳 103.110.87.193

🇳🇱 77.67.26.197

🇭🇰 49.213.6.30

🇺🇸 34.197.70.90

🇧🇪 34.78.64.142

🇺🇸 216.180.246.202

🇩🇪 194.88.98.123

🇳🇱 188.166.30.51