JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.40.11.197

34.40.11.197 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	197.11.40.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.40.11.197

Whois 34.40.11.197

IP Abuse Reports for 34.40.11.197:

This IP address has been reported a total of 170 times from 110 distinct sources. 34.40.11.197 was first reported on October 15th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-22 22:02:07 (9 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-21. show less	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-10-22 14:26:27 (16 hours ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 demomodule	2026-10-22 13:56:44 (17 hours ago)	PrestaShop Security Module: suspicious probe path detected (/.env)	Web App Attack
Anonymous	2026-10-22 05:59:02 (1 day ago)	Attempted access to sensitive endpoint (/.env.supabase) detected. Automated scan or unauthorized pro ... show more Attempted access to sensitive endpoint (/.env.supabase) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-10-22 02:59:54 (1 day ago)	[RoutePulse \| 2026-10-22T02:59:54Z] ATTACK: Threat IP Active SOURCE: 34.40.11.197 (197.11.40.34.bc.g ... show more [RoutePulse \| 2026-10-22T02:59:54Z] ATTACK: Threat IP Active SOURCE: 34.40.11.197 (197.11.40.34.bc.googleusercontent.com) · AS396982 Google LLC · Germany EVIDENCE: severity=warning · 19 flows · 2.4 MB INTEL: AbuseIPDB 100% (144 reports) \| feeds: Wazuh SIEM — Kemp LoadMaster (2) \| RoutePulse score 72/100 24H PERSISTENCE: 4 events (SIEM Lb Alert×2, Threat IP Active×1, SIEM Firewall Scan×1) CONVICTION: Tier 3, LLR 4.22, 1.55 independent groups (multi-source SPRT) MITRE: T1071 Application Layer Protocol DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Hacking Exploited Host
Anonymous	2026-10-22 02:27:00 (1 day ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇳🇱 e.fierstra	2026-10-22 01:52:17 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-10-21 22:27:30 (1 day ago)	2026/10/21 22:27:29 [error] 29#29: 13642 limiting requests, excess: 200.680 by zone "perip_req", cl ... show more 2026/10/21 22:27:29 [error] 29#29: 13642 limiting requests, excess: 200.680 by zone "perip_req", client: 34.40.11.197, server: git.contec.de, request: "GET /users/sign_in HTTP/2.0", host: "git.contec.de", referrer: "https://git.contec.de/public/admin.json" 2026/10/21 22:27:29 [error] 29#29: 13642 limiting requests, excess: 200.590 by zone "perip_req", client: 34.40.11.197, server: git.contec.de, request: "GET /config/firebase-admin.json HTTP/2.0", host: "git.contec.de" 2026/10/21 22:27:29 [error] 29#29: 13642 limiting requests, excess: 200.490 by zone "perip_req", client: 34.40.11.197, server: git.contec.de, request: "GET /users/sign_in HTTP/2.0", host: "git.contec.de", referrer: "https://git.contec.de/google-credentials.json" 2026/10/21 22:27:29 [error] 29#29: 13642 limiting requests, excess: 200.490 by zone "perip_req", client: 34.40.11.197, server: git.contec.de, request: "GET /config/gcp-credentials.json HTTP/2.0", host: "git.contec.de" 2026/10/21 22:27:29 [error] 29#29: 13642 ... show less	Port Scan Brute-Force
🇬🇧 poundawebsiteltd	2026-10-21 22:09:02 (1 day ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.40.11.1 ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.40.11.197 (DE/Germany/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 34.40.11.197 (DE/Germany/197.11.40.34.bc.googleusercontent.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-10-21 21:12:50 (1 day ago)	[RoutePulse \| 2026-10-21T21:12:50Z \| RTBH-INJECTED] ATTACK CLASS: mail_correlation SOURCE: 34.40.11. ... show more [RoutePulse \| 2026-10-21T21:12:50Z \| RTBH-INJECTED] ATTACK CLASS: mail_correlation SOURCE: 34.40.11.197 (197.11.40.34.bc.googleusercontent.com) · AS396982 Google LLC · Germany EVIDENCE: Mail correlation auto: score 100, belief 0.83, behaviour + intent + identity, phases recon → exploit — Kemp defences: 10 IPS detections, probing for secrets (.env / .git / credentials); LoadMaster posture: attack 75/100 — hit-and-run, burst DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Hacking
🇺🇸 Epimetheus	2026-10-21 21:09:00 (1 day ago)	Zombie network / Bot scanner detected: [POST] /api/v1/validate/code [POST] /app [POST] /api [POST] ... show more Zombie network / Bot scanner detected: [POST] /api/v1/validate/code [POST] /app [POST] /api [POST] /admin [GET] /web/.env [GET] /.env.prod [GET] /public../.env [GET] /docker-compose.prod.yml [GET] /.env.bak [GET] /firebase-credentials.json [GET] /images../.env [GET] /terraform.tfvars [GET] /....//....//....//..../proc/self/environ [GET] /.env.sendgrid [GET] /firebaseConfig.js [GET] /api/.env/public/.env [GET] /config/.env.dev [GET] /ssl/localhost.key [GET] /docker-compose.dev.yml [GET] /config/gcp-credentials.json [GET] /cache/original/%2e%2e/.env [GET] /*.auto.tfvars [GET] /static../.env [GET] /.dev.vars.staging [GET] /assets../.env [GET] //.env [GET] /userfiles [GET] /img../.env [GET] /css../.env [GET] /settings%2F.env [GET] /static//home/user/.env [GET] /.docker/secrets.json [GET] /.//.env [GET] /config/.env.local [GET] /application/.env.sample [GET] /.aws/credentials [GET] /.boto [GET] /%2Fdashboard [GET] /conf/.env [GET] /auth/.env [GET] /private/.env [GET] /.azure ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack
🇺🇸 Epimetheus	2026-10-21 20:39:00 (1 day ago)	Zombie network / Bot scanner detected: [POST] /lib/file-control.php [GET] /api/v1/auto_login [POST] ... show more Zombie network / Bot scanner detected: [POST] /lib/file-control.php [GET] /api/v1/auto_login [POST] /api/v1/node-load-method/customMCP [POST] /icecoder/lib/terminal-xhr.php [POST] /flowise/api/v1/node-load-method/customMCP [POST] /api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow [GET] /samconfig.toml [GET] /api/v1/.env [GET] /portal/.env [GET] /pages/index.astro.mjs.map [GET] /.env.supabase [POST] /app [GET] /_image [GET] /dashboard/.env [POST] /app [POST] /api [GET] /services/.env [GET] /deploy/.env [POST] /api/auth [GET] /pipeline/.env [POST] /settings [GET] /prisma/.env [GET] /cmd/.env [GET] /terraform.tfvars [GET] /Dockerrun.aws.json [GET] /application/.env [GET] /@fs/app/.env [GET] /.config/gcloud/application_default_credentials.json [GET] /rev65p7zu7ugct9h4bhe [GET] /src/.env [GET] /terraform.tfstate [GET] /.ssh/id_dsa [GET] /docker-compose.prod.yml [GET] /key.pem [GET] /docker-compose.production.yml [GET] /app/..;/.env UA: Mozilla/5.0 AppleWebKi ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-10-21 15:48:07 (1 day ago)	Web application attack: grafana cve 2021 43798; Probing for exposed secret / credential files; Web a ... show more Web application attack: grafana cve 2021 43798; Probing for exposed secret / credential files; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files show less	Hacking Web App Attack
Anonymous	2026-10-21 14:07:02 (1 day ago)	Automated web scanner. Requested suspicious paths: /dist/manifest.json. UTC: 2026-10-21 13:08:51.	Web App Attack
🇵🇦 Luis Ortega	2026-10-21 13:33:00 (1 day ago)		DDoS Attack Port Scan

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.141

🇵🇱 45.138.12.6

🇨🇳 223.113.173.78

🇺🇸 216.180.246.247

🇰🇪 196.250.210.72

🇳🇱 195.178.110.26

🇷🇺 185.231.154.128

🇺🇸 178.156.238.15

🇺🇸 172.120.144.69

🇺🇸 162.216.149.72

🇺🇸 134.209.53.241

🇨🇿 109.81.31.25

🇧🇩 103.214.202.235

🇬🇧 86.160.207.109

🇬🇧 77.67.26.40

🇺🇸 23.230.0.188

🇺🇸 20.169.84.230

🇯🇵 8.216.7.91

🇲🇾 202.165.22.173

🇯🇵 194.5.48.159