JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.28.236.180

34.28.236.180 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	180.236.28.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.28.236.180

Whois 34.28.236.180

IP Abuse Reports for 34.28.236.180:

This IP address has been reported a total of 57 times from 50 distinct sources. 34.28.236.180 was first reported on September 15th 2026, and the most recent report was 21 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 oja	2026-09-16 04:48:58 (21 seconds ago)	Aggressive web scanner	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-09-16 04:24:21 (24 minutes ago)	Blocked by YFC Security on https://1904.brixzly.com — type: rapid_scan_attempts	Web App Attack
🇹🇭 MWA SOC	2026-09-16 04:20:50 (28 minutes ago)		Hacking
🇫🇮 NoaQT	2026-09-16 03:55:01 (54 minutes ago)	2026-09-16T03:55:00.364876+00:00 ingress-1 haproxy[16887]: 34.28.236.180:59326 [16/Sep/2026:03:55:00 ... show more 2026-09-16T03:55:00.364876+00:00 ingress-1 haproxy[16887]: 34.28.236.180:59326 [16/Sep/2026:03:55:00.364] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 56/56/0/0/0 0/0 "GET https://mentis.si/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/2.0" 2026-09-16T03:55:00.464305+00:00 ingress-1 haproxy[16887]: 34.28.236.180:59326 [16/Sep/2026:03:55:00.463] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 57/57/0/0/0 0/0 "POST https://mentis.si/v1/graphql HTTP/2.0" 2026-09-16T03:55:00.557116+00:00 ingress-1 haproxy[16887]: 34.28.236.180:59326 [16/Sep/2026:03:55:00.556] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 57/57/0/0/0 0/0 "GET https://mentis.si/.dockerenv HTTP/2.0" 2026-09-16T03:55:00.563261+00:00 ingress-1 haproxy[16887]: 34.28.236.180:59326 [16/Sep/2026:03:55:00.563] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 57/57/0/0/0 0/0 "GET https://mentis.si/.env?import&raw HTTP/2.0" 2026-09-16T03:55:00.563776+00:00 ingress-1 haproxy[16887]: 34.28.23 ... show less	DDoS Attack
🇺🇸 factor1	2026-09-16 03:50:02 (59 minutes ago)	CrowdSec at churndash Reports Abuse	Web App Attack
🇫🇷 Cuteminded	2026-09-16 03:31:55 (1 hour ago)	Highly suspect IP	Web Spam Bad Web Bot
🇬🇧 venus.launch.bz	2026-09-16 03:23:07 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 34.28.236.180 (US/United States/180.236 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.28.236.180 (US/United States/180.236.28.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 MarkGGN	2026-09-16 03:13:23 (1 hour ago)	Web attack. 34.28.236.180 - - [16/Sep/2026:05:13:22 +0200] "GET /api/v1/settings HTTP/2.0" 302 138 " ... show more Web attack. 34.28.236.180 - - [16/Sep/2026:05:13:22 +0200] "GET /api/v1/settings HTTP/2.0" 302 138 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.28.236.180 - - [16/Sep/2026:05:13:22 +0200] "GET / HTTP/2.0" 200 6622 "https://*/api/v1/settings" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" show less	Web App Attack
🇺🇸 kosada.com	2026-09-16 03:11:55 (1 hour ago)	Repeated exploit attempts, for example: /api/graphql {x22queryx22:x22{ __schema { types { name field ... show more Repeated exploit attempts, for example: /api/graphql {x22queryx22:x22{ __schema { types { name fields { name args { name defaultValue } } } } }x22} (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36") show less	Web App Attack
🇳🇱 BlueWire Hosting	2026-09-16 03:02:40 (1 hour ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇯🇵 ki3	2026-09-16 02:57:42 (1 hour ago)	Fail2Ban: Web App Attacks and Forum Spam 34.28.236.180 1789527462.0(JST)	Web Spam Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-16 02:26:28 (2 hours ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.28.236.180 - - [16/Sep/2026:04:26:17 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 7381 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" ... show less	Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-16 02:19:58 (2 hours ago)	[WedSep1604:19:54.6269342026][security2:error][pid2341066:tid2341200][client34.28.236.180:0]ModSecur ... show more [WedSep1604:19:54.6269342026][security2:error][pid2341066:tid2341200][client34.28.236.180:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hostingedominio.com\"][uri\"/media../.env\"][unique_id\"aqn8yuUX-Lu0GfJkgj1lgQAAABE\"] show less	Hacking Web App Attack
🇫🇷 mrcrassi	2026-09-16 01:45:36 (3 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (POST metho ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /api UA: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-09-16 01:28:05 (3 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.104.82.61

🇺🇦 193.107.171.170

🇩🇪 185.215.244.161

🇭🇰 154.198.162.234

🇷🇴 2.57.121.25

🇰🇷 222.111.88.124

🇺🇸 205.210.31.93

🇨🇴 191.97.12.90

🇮🇳 152.59.177.94

🇨🇳 120.55.250.123

🇨🇳 117.72.184.198

🇷🇴 89.137.197.20

🇺🇸 85.239.151.10

🇫🇷 85.217.140.36

🇩🇪 69.5.169.61

🇨🇭 34.65.63.255

🇮🇳 223.181.121.126

🇺🇸 192.3.116.169

🇫🇮 147.185.133.123

🇧🇩 103.189.158.118