JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.28.23.207

34.28.23.207 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 59%: ?

59%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	207.23.28.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.28.23.207

Whois 34.28.23.207

IP Abuse Reports for 34.28.23.207:

This IP address has been reported a total of 11 times from 9 distinct sources. 34.28.23.207 was first reported on September 15th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dot.mg	2026-09-16 13:00:04 (11 hours ago)	Bad behaviour	Web Spam
🇺🇸 TPI-Abuse	2026-09-15 20:38:35 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.28.23.207 (207.23.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.28.23.207 (207.23.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:38:32.204965 2026] [security2:error] [pid 18795:tid 18795] [client 34.28.23.207:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.aslanhan.com"] [uri "/.git/config"] [unique_id "aqmsyHl97ZXZTXJ9ASTuzQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:02:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.28.23.207 (207.23.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.28.23.207 (207.23.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:02:19.261275 2026] [security2:error] [pid 23618:tid 23618] [client 34.28.23.207:57012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ashtangayogamelbourne.com"] [uri "/.git/config"] [unique_id "aqmkS-0vsEGNidfP80n7OAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-15 18:09:12 (1 day ago)	[TueSep1520:09:10.5732272026][security2:error][pid3612299:tid3612391][client34.28.23.207:0]ModSecuri ... show more [TueSep1520:09:10.5732272026][security2:error][pid3612299:tid3612391][client34.28.23.207:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"mail.artisteer-italia.org\"][uri\"/\"][unique_id\"aqmJxveUguKDTHDOjwieQQAAAMU\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 Artelis	2026-09-15 17:35:11 (1 day ago)	34.28.23.207 - - [15/Sep/2026:17:35:09 +0000] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 ( ... show more 34.28.23.207 - - [15/Sep/2026:17:35:09 +0000] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.28.23.207 - - [15/Sep/2026:17:35:09 +0000] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.28.23.207 - - [15/Sep/2026:17:35:09 +0000] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.28.23.207 - - [15/Sep/2026:17:35:09 +0000] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.28.23.207 - - [15/Sep/2026:17:35:09 +0000] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34. ... show less	Web App Attack
Anonymous	2026-09-15 17:18:26 (1 day ago)	[ns31.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.git/config \| /.env \| /.e ... show more [ns31.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇷🇴 clauss	2026-09-15 16:36:54 (1 day ago)	34.28.23.207 - - [15/Sep/2026:19:36:52 +0300] "GET /.git/config HTTP/1.1" 404 5734 "-" "Mozilla/5.0 ... show more 34.28.23.207 - - [15/Sep/2026:19:36:52 +0300] "GET /.git/config HTTP/1.1" 404 5734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.28.23.207 - - [15/Sep/2026:19:36:53 +0300] "GET /.env.local HTTP/1.1" 404 5734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 15:39:28 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 FD-IX	2026-09-15 14:58:33 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 14:54:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.28.23.207 (207.23.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.28.23.207 (207.23.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:54:42.413684 2026] [security2:error] [pid 14789:tid 14789] [client 34.28.23.207:58350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.argcreativegroup.com"] [uri "/.git/config"] [unique_id "aqlcMrDkRUKQ_AWS9i1TCwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-15 14:35:03 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.21

🇷🇺 212.19.17.100

🇭🇰 223.197.146.174

🇧🇩 203.202.242.45

🇧🇬 109.160.32.42

🇩🇪 104.207.56.161

🇨🇱 91.229.228.16

🇺🇸 87.232.154.75

🇨🇦 85.217.149.37

🇺🇸 64.62.197.150

🇺🇸 43.130.39.153

🇺🇸 162.216.150.58

🇨🇳 124.220.59.171

🇦🇺 106.70.0.181

🇫🇷 91.231.89.39

🇫🇷 91.231.89.31

🇮🇱 79.177.139.138

🇧🇬 79.124.56.142

🇱🇹 77.90.185.17

🇺🇸 40.119.27.158