JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.35.129.28

34.35.129.28 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 86%: ?

86%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	28.129.35.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.35.129.28

Whois 34.35.129.28

IP Abuse Reports for 34.35.129.28:

This IP address has been reported a total of 15 times from 15 distinct sources. 34.35.129.28 was first reported on September 16th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 OiledAmoeba	2026-09-16 16:58:36 (11 hours ago)	2026/09/16 18:58:16 [error] 535#535: 1524135 "/usr/local/www/nginx/index.html" is not found (2: No ... show more 2026/09/16 18:58:16 [error] 535#535: 1524135 "/usr/local/www/nginx/index.html" is not found (2: No such file or directory), client: 34.35.129.28, server: mta-sts.ruhnke.cloud, request: "GET / HTTP/1.1", host: "mta-sts.ruhnke.cloud" 2026/09/16 18:58:16 [error] 535#535: *1524135 "/usr/local/www/nginx/index.html" is not found (2: No such file or directory), client: 34.35.129.28, server: mta-sts.ruhnke.cloud, request: "POST / HTTP/1.1", host: "mta-sts.ruhnke.cloud" ... show less	Brute-Force
🇩🇪 Marco711	2026-09-16 16:56:03 (11 hours ago)	port/URL scanning	Port Scan Web App Attack
Anonymous	2026-09-16 16:20:16 (12 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇵🇱 srebrakowski.com	2026-09-16 15:50:35 (12 hours ago)	crowdsec/crowdsecurity/appsec-vpatch	Brute-Force
🇩🇪 Melle	2026-09-16 15:46:38 (12 hours ago)	Blocked by CrowdSec \| Scenario: crowdsecurity/http-sensitive-files \| 34.35.129.28 triggered 5 events ... show more Blocked by CrowdSec \| Scenario: crowdsecurity/http-sensitive-files \| 34.35.129.28 triggered 5 events \| Detected: 2026-09-16T15:46:35.432167775Z show less	Web App Attack Hacking
🇩🇪 Hazzard	2026-09-16 15:45:34 (12 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇦🇺 Klaverstyn	2026-09-16 15:09:29 (13 hours ago)	Excessive HTTP request rate	Web App Attack
🇦🇺 Lazarus	2026-09-16 14:43:07 (13 hours ago)	HTTP probe.	Web App Attack
🇩🇪 NihiliousMonk	2026-09-16 14:13:28 (14 hours ago)	Fail2Ban report from jail npm-scanners	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-09-16 13:20:10 (15 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇷 phoenix1jl96	2026-09-16 13:13:51 (15 hours ago)	2026/09/16 15:13:51 [error] 1507858#1507858: 25116 open() "/home/user-data/www/default/mailer/.env" ... show more 2026/09/16 15:13:51 [error] 1507858#1507858: 25116 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.35.129.28, server: mta-sts.chat.ledemon.us, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.chat.ledemon.us" 2026/09/16 15:13:51 [error] 1507858#1507858: *25116 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.35.129.28, server: mta-sts.chat.ledemon.us, request: "GET /mail/.env HTTP/1.1", host: "mta-sts.chat.ledemon.us" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇺🇸 kosada.com	2026-09-16 13:07:14 (15 hours ago)	Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ... show more Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	Web App Attack
🇩🇪 Blexyel	2026-09-16 12:51:47 (15 hours ago)	34.35.129.28 - - [16/Sep/2026:14:51:46 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ( ... show more 34.35.129.28 - - [16/Sep/2026:14:51:46 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-16 12:51:05 (15 hours ago)	34.35.129.28 - - [16/Sep/2026:14:51:00 +0200] "GET /.git/config HTTP/1.1" 403 519 "-" "Mozilla/5.0 ( ... show more 34.35.129.28 - - [16/Sep/2026:14:51:00 +0200] "GET /.git/config HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.129.28 - - [16/Sep/2026:14:51:00 +0200] "GET /.env HTTP/1.1" 404 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.129.28 - - [16/Sep/2026:14:51:00 +0200] "GET /.env.local HTTP/1.1" 404 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.129.28 - - [16/Sep/2026:14:51:00 +0200] "GET /.env.production HTTP/1.1" 404 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.129.28 - - [16/Sep/2026:14:51:01 +0200] "GET /.env.staging HTTP/1.1" 404 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34. show less	Web App Attack Hacking
🇺🇸 abenage	2026-09-16 12:47:02 (15 hours ago)	34.35.129.28 - - [16/Sep/2026:06:47:01 -0600] "GET /phpinfo.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 ( ... show more 34.35.129.28 - - [16/Sep/2026:06:47:01 -0600] "GET /phpinfo.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇧🇪 198.235.24.175

🇷🇺 194.165.22.100

🇺🇸 192.169.226.3

🇩🇪 165.245.242.42

🇹🇭 118.175.90.152

🇻🇳 118.69.191.219

🇸🇬 114.119.154.229

🇸🇬 114.119.153.131

🇸🇬 114.119.145.7

🇲🇾 113.23.225.9

🇮🇳 103.47.15.110

🇩🇪 69.5.169.206

🇺🇸 50.209.135.114

🇺🇸 45.61.185.46

🇮🇶 37.77.49.104

🇨🇳 8.134.157.132

🇺🇸 216.25.89.67

🇺🇸 216.24.210.237

🇨🇳 202.46.62.76