JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.35.66.217

Recent Activity

Abuse Confidence Score

100% Critical

21 reports

20 reporters · latest 3 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 217.66.35.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇿🇦 South Africa
City: Johannesburg, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

21 from 20 distinct reporters

First reported

November 9th 2026

Most recent report

3 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇳🇱 Netherlands 3 🇨🇿 Czechia 2

Most common categories Web App Attack 17 Brute-Force 7 Bad Web Bot 7 Hacking 3 Phishing 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 McClay	2026-11-10 12:24:49 UTC · (3 hours ago)	HTTP-404 spam:34.35.66.217 - - [10/Nov/2026:13:24:48 +0100] "GET /static/js/main.js HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026 ... show more HTTP-404 spam:34.35.66.217 - - [10/Nov/2026:13:24:48 +0100] "GET /static/js/main.js HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:13:24:48 +0100] "GET /asset-manifest.json HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:13:24:48 +0100] "GET /main.js.map HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:13:24:48 +0100] "GET /bundle.js.map HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:13:24:48 +0100] "GET /.git/HEAD HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0. ... show less	Web App Attack
🇿🇦 conure.sh	2026-11-10 12:04:03 UTC · (3 hours ago)	csagent: score 20.0: wp-config backup grab x2; 2 domain(s) in 18s	Web App Attack
🇩🇪 rh24	2026-11-10 10:22:32 UTC · (5 hours ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.35.66.217 (ZA/South Africa/217.66.35.34.bc.googleusercontent.com)	Hacking
🇳🇱 ParaBug	2026-11-10 10:13:23 UTC · (5 hours ago)	34.35.66.217 - - [10/Nov/2026:11:13:22 +0100] "GET /.vite/manifest.json HTTP/1.1" 301 4708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ...	Phishing Brute-Force Web App Attack
🇲🇾 Rizzy	2026-11-10 10:07:18 UTC · (5 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-11-10 10:05:05 UTC · (5 hours ago)	Repeated requests for suspicious nonexistent URLs, for example: /.vite/manifest.json (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")	Web App Attack
🇫🇷 suble.org	2026-11-10 09:36:22 UTC · (6 hours ago)	[Tue Nov 10 10:36:21.577754 2026] [ssl:error] [pid 1088685:tid 1088685] [client 34.35.66.217:9270] AH02032: Hostname schirmer.rocks provided via SNI and hostname no-such-host-8f3a1b.invalid provided via HTTP have no compatible SSL setup for policy 's ... show more [Tue Nov 10 10:36:21.577754 2026] [ssl:error] [pid 1088685:tid 1088685] [client 34.35.66.217:9270] AH02032: Hostname schirmer.rocks provided via SNI and hostname no-such-host-8f3a1b.invalid provided via HTTP have no compatible SSL setup for policy 'secure' [Tue Nov 10 10:36:21.793598 2026] [ssl:error] [pid 643193:tid 643193] [client 34.35.66.217:9188] AH02032: Hostname schirmer.rocks provided via SNI and hostname staging.schirmer.rocks provided via HTTP have no compatible SSL setup for policy 'secure' [Tue Nov 10 10:36:21.799401 2026] [ssl:error] [pid 1088689:tid 1088689] [client 34.35.66.217:9322] AH02032: Hostname schirmer.rocks provided via SNI and hostname api.schirmer.rocks provided via HTTP have no compatible SSL setup for policy 'secure' [Tue Nov 10 10:36:21.801024 2026] [ssl:error] [pid 1088628:tid 1088628] [client 34.35.66.217:9200] AH02032: Hostname schirmer.rocks provided via SNI and hostname dev.schirmer.rocks provided via HTTP have no compatible SSL setup for policy 'secur ... show less	Web App Attack
🇬🇧 consul.to	2026-11-10 09:20:36 UTC · (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Alt255	2026-11-10 08:08:38 UTC · (7 hours ago)	[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.35.66.217 - - [10/Nov/2026:09:08:23 +0100] "GET /.git/HEAD HTTP/1.1" 301 6453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ... show more [ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.35.66.217 - - [10/Nov/2026:09:08:23 +0100] "GET /.git/HEAD HTTP/1.1" 301 6453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 EmilGH	2026-11-10 07:36:29 UTC · (8 hours ago)	34.35.66.217 - - [10/Nov/2026:07:36:20 +0000] "GET /.git/HEAD HTTP/1.1" 403 4512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:07:36:21 +0000] "GET ... show more 34.35.66.217 - - [10/Nov/2026:07:36:20 +0000] "GET /.git/HEAD HTTP/1.1" 403 4512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:07:36:21 +0000] "GET /tdc-logo.jpg%3E; HTTP/1.1" 404 538 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:07:36:23 +0000] "GET /stats.json HTTP/1.1" 404 4510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:07:36:23 +0000] "GET /webpack.json HTTP/1.1" 404 4509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.66.217 - - [10/Nov/2026:07:36:23 +0000] "GET /.vite/manifest.json HTTP/1.1" 403 4512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 ... show less	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-11-10 02:35:51 UTC · (13 hours ago)	Triggered Cloudflare WAF (firewallCustom) from ZA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: g ... show more Triggered Cloudflare WAF (firewallCustom) from ZA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-11-10 00:19:11 UTC · (15 hours ago)	IP matched detection query Detection of too many failed responses.	Brute-Force Bad Web Bot Hacking
🇵🇱 lns.bz	2026-11-09 23:58:45 UTC · (15 hours ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-11-09 22:20:33 UTC · (17 hours ago)	Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.	Web App Attack Bad Web Bot
🇧🇪 cmbplf	2026-11-09 21:40:13 UTC · (18 hours ago)	105 requests with url.path .aws/	Brute-Force Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.242.226.16

🇳🇱 45.148.10.141

🇺🇸 31.105.14.183

🇳🇱 200.138.46.207

🇳🇱 193.47.62.69

🇵🇾 181.124.62.110

🇩🇪 85.28.58.113

🇺🇸 136.108.134.133

🇨🇳 115.190.211.57

🇫🇷 104.253.134.203

🇸🇮 102.220.161.85

🇺🇸 91.230.168.248

🇩🇪 85.28.58.247

🇷🇺 80.253.22.34

🇺🇸 66.132.172.219

🇺🇸 31.105.253.106

🇺🇸 161.123.251.94

🇺🇸 161.77.47.26

🇨🇳 120.48.112.221

🇦🇴 102.208.151.139