JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.34.28.161

Recent Activity

Abuse confidence score ?

100% Critical

31 reports

29 reporters · latest 6 hours ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	161.28.34.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.34.28.161

Export CSV

This IP address has been reported a total of 31 times from 29 distinct sources. 34.34.28.161 was first reported on February 23rd 2026, and the most recent report was 6 hours ago. In the last 60 days, the top reporter locations were: Germany with 9 reports; Czechia with 3 reports; United Kingdom of Great Britain and Northern Ireland with 3 reports. The most common categories in these recent reports were: Web App Attack 22 times; Brute-Force 8 times; Hacking 6 times; Bad Web Bot 5 times; SQL Injection 2 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mscode.pl	2026-10-21 07:40:22 (6 hours ago)	Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: BLOCK ASN: 396982 (Google LLC) Pro ... show more Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (POST method) Zone: analytics.mscode.pl Endpoint: /settings UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) show less	Bad Web Bot
🇧🇪 cmbplf	2026-10-21 07:16:21 (6 hours ago)	314 requests with url.path credentials.json 288 requests with url.path .aws/*	Brute-Force Bad Web Bot
🇩🇪 konseptit	2026-10-21 07:14:42 (6 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.34.28.161 (161.28.34.34.bc.googleuse ... show more (mod_security) mod_security triggered on hostname [redacted] 34.34.28.161 (161.28.34.34.bc.googleusercontent.com) show less	SQL Injection
🇫🇷 solution.it	2026-10-21 07:07:17 (6 hours ago)	[Wed Oct 21 09:07:17.163144 2026] [authz_core:error] [pid 3822309:tid 3822309] [client 34.34.28.161: ... show more [Wed Oct 21 09:07:17.163144 2026] [authz_core:error] [pid 3822309:tid 3822309] [client 34.34.28.161:58316] AH01630: client denied by server configuration: /var/www/html/blog.solution.it/.htpasswd show less	Brute-Force
🇩🇪 mbch	2026-10-21 06:50:51 (7 hours ago)	Observed automated probing of web application/configuration paths over completed HTTP requests. UTC ... show more Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-10-21T06:50:51.426000+00:00 to 2026-10-21T06:50:51.751000+00:00: 10 distinct paths in 0.325s, denied HTTP 404. Trusted client-IP processing; forwarding headers accepted only from official configured Cloudflare networks. No successful compromise established. Examples: /graphql, /dist/manifest.json, /Dockerfile, /firebase-service-account.json, /serviceAccountKey.json, /key.json, /compose.yml, /.gitlab-ci.yml, /.github/workflows/deploy.yml, /compose.yaml. show less	Web App Attack
🇳🇱 Alt255	2026-10-21 06:49:14 (7 hours ago)	[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.34.28.161 - - [21/Oct/2026:08:49:13 +0200] "GET /secure HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34.34.28.161 - - [21/Oct/2026:08:49:13 +0200] "GET /auth HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34.34.28.161 - - [21/Oct/2026:08:49:13 +0200] "GET /reset-password HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34.34.28.161 - - [21/Oct/2026:08:49:13 +0200] "GET /admin HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) A ... show less	Bad Web Bot Web App Attack
🇹🇷 Jova	2026-10-21 06:36:03 (7 hours ago)	Probing a web server for sensitive files (.env, backups, configs): 3 requests.	Web App Attack
Anonymous	2026-10-21 06:35:15 (7 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-10-21 06:25:02 (7 hours ago)	suspicious request in access.log	Web App Attack
🇩🇪 maxpower	2026-10-21 06:17:07 (7 hours ago)	(junkbot) REGOLA 8 - Junk Bot Blocked 34.34.28.161 (161.28.34.34.bc.googleusercontent.com): 1 in the ... show more (junkbot) REGOLA 8 - Junk Bot Blocked 34.34.28.161 (161.28.34.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.34.28.161 - - [21/Oct/2026:08:17:06 +0200] "GET /u8ut5ehi426638m7urk9 HTTP/2.0" 200 11961 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" host=ninodifrancesco.it show less	Port Scan
🇩🇪 LRob	2026-10-21 05:45:38 (8 hours ago)	Secret file probe \| method: GET \| path: /.env.supabase, /.config/gcloud/credentials.db, /.env.prod.l ... show more Secret file probe \| method: GET \| path: /.env.supabase, /.config/gcloud/credentials.db, /.env.prod.local (+4 more) \| ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user), Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/) (+3 more) show less	Hacking Web App Attack
🇬🇧 poundawebsiteltd	2026-10-21 05:28:15 (8 hours ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.34.28.1 ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.34.28.161 (NL/The Netherlands/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 34.34.28.161 (NL/The Netherlands/161.28.34.34.bc.googleusercontent.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2026-10-21 05:15:12 (8 hours ago)	251 attacks on config grabbing URLs (type 2), env grabbing URLs, VC URLs, env grabbing URLs (type 2) ... show more 251 attacks on config grabbing URLs (type 2), env grabbing URLs, VC URLs, env grabbing URLs (type 2), password/key grabbing URLs, directory traversals, PHP URLs: GET /secrets.yml HTTP/1.1 GET /agent/.env HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 POST /icecoder/lib/file-control.php HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-10-21 05:03:45 (9 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248	Exploited Host Web App Attack
🇧🇷 Halux	2026-10-21 03:05:47 (11 hours ago)	34.34.28.161 Probing protected path or service	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.170.192.251

🇵🇱 185.102.189.26

🇨🇳 106.59.139.168

🇺🇸 72.253.251.7

🇰🇷 61.76.112.4

🇳🇱 195.178.110.132

🇷🇴 193.32.162.84

🇧🇷 179.176.210.17

🇰🇷 175.198.62.180

🇮🇩 157.15.67.253

🇨🇳 112.86.225.36

🇩🇪 109.160.32.119

🇺🇦 109.104.183.35

🇰🇪 102.210.148.41

🇺🇸 46.253.131.35

🇳🇱 45.148.10.151

🇺🇸 40.112.183.29

🇸🇬 34.126.145.141

🇧🇪 34.22.168.4

🇨🇳 27.215.141.245