JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.34.253.255

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

13 reports

10 reporters · latest 3 days ago

34.34.253.255 is on our whitelist as Google non-cloud IPs via the subnet 34.34.224.0/19.

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

13 from 10 distinct reporters

First reported

April 14th 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 2 🇪🇸 Spain 1 🇫🇮 Finland 1

Most common categories Web App Attack 3 Brute-Force 3 Hacking 1 SSH 1 Bad Web Bot 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Google non-cloud IPs. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 hablaxdev	2026-11-09 13:53:23 UTC · (3 days ago)	Probing of our web app with numbered test markers as part of an attack campaign.	Web App Attack
🇺🇸 sanyiqin	2026-11-08 15:33:57 UTC · (4 days ago)	Targeted web application attack on 2026-11-08, 15:31-23:40 UTC, from 133 rotating Google Cloud addresses in 34.34.253.0/24 and 34.96.52.0/24, one automated client using about one request per address. It continued an attack from 163.47.42.38 after we ... show more Targeted web application attack on 2026-11-08, 15:31-23:40 UTC, from 133 rotating Google Cloud addresses in 34.34.253.0/24 and 34.96.52.0/24, one automated client using about one request per address. It continued an attack from 163.47.42.38 after we blocked that address. The client guessed credential, key and config file paths (credentials, .aliyun/credentials, deploy_key, ssh_key, .env.local, config backups), probed admin and version paths, sent scripted account registrations, requested an internal-only hostname and used a spoofed facebookexternalhit user agent. This address: 1 request at 15:33:57 UTC. show less	Web App Attack Hacking Bad Web Bot
🇵🇱 MatStef132	2026-10-22 12:30:14 UTC · (3 weeks ago)	MatShield L7: blocked on imagelk.pro (automation-ua)	DDoS Attack
🇫🇮 jonahtebaa	2026-10-09 15:30:04 UTC · (1 month ago)	SSH tarpit (endlessh) capture on jonahtebaa infra	Port Scan Brute-Force SSH
🇬🇧 Bytemark	2026-10-09 04:56:20 UTC · (1 month ago)	34.34.253.255 - - [09/Oct/2026:05:56:19 +0100] "GET / HTTP/1.1" 301 6827 "-" "Python/3.11 aiohttp/3.13.5"	Brute-Force Web App Attack
🇪🇸 librebit	2026-10-06 04:41:28 UTC · (1 month ago)	Brute force	Brute-Force
🇺🇦 URAN Publishing Service	2026-09-04 14:15:44 UTC · (2 months ago)	[04/Sep/2026:17:15:43 +0300] -- 34.34.253.255 Ban reason: User-Agent python-httpx	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-09-04 07:49:22 UTC · (2 months ago)	Brute force	Brute-Force
🇮🇩 sockominfo	2026-09-03 23:00:53 UTC · (2 months ago)	Suspicious user agent detected python-httpx/0.28.1 (SumbleBot/1.0), Active Response: IP 34.34.253.255 Blocked via Firewall Drop. Threat Score: 4.7/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N ... show more Suspicious user agent detected python-httpx/0.28.1 (SumbleBot/1.0), Active Response: IP 34.34.253.255 Blocked via Firewall Drop. Threat Score: 4.7/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 88%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-03 22:00:53 UTC · (2 months ago)	Suspicious user agent detected python-httpx/0.28.1 (SumbleBot/1.0), Active Response: IP 34.34.253.255 Blocked via Firewall Drop. Threat Score: 4.8/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N ... show more Suspicious user agent detected python-httpx/0.28.1 (SumbleBot/1.0), Active Response: IP 34.34.253.255 Blocked via Firewall Drop. Threat Score: 4.8/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 86%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇪🇸 librebit	2026-08-26 01:40:15 UTC · (2 months ago)	Brute force	Brute-Force
🇬🇧 CrystalMaker	2026-06-28 09:36:14 UTC · (4 months ago)	PHP vulnerability scan - GET /tutorials/cu3au.php HTTP/2.0	Web App Attack
🇫🇷 GabrielJST	2026-04-14 09:53:37 UTC · (6 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.34.253.255 (US/United States/-)	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 209.141.46.171

🇨🇱 200.123.63.24

🇬🇧 193.163.125.4

🇦🇿 158.181.46.60

🇳🇱 138.226.239.233

🇺🇸 66.132.186.172

🇳🇱 51.158.205.203

🇷🇺 31.131.129.158

🇩🇪 207.154.212.47

🇧🇷 205.210.31.198

🇸🇬 157.245.204.205

🇨🇳 106.75.153.103

🇲🇦 105.159.117.99

🇨🇮 102.209.222.228

🇫🇷 54.38.241.200

🇳🇱 45.148.10.157

🇺🇸 34.48.38.125

🇸🇬 240d:c000:f020:8900:b464:fd58:1694:0

🇸🇬 129.221.224.34

🇨🇳 103.36.223.30