JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.40.28.204

Recent Activity

Abuse confidence score ?

100% Critical

68 reports

47 reporters · latest 30 minutes ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	204.28.40.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.40.28.204

Export CSV

This IP address has been reported a total of 68 times from 47 distinct sources. 34.40.28.204 was first reported on October 15th 2026, and the most recent report was 30 minutes ago. In the last 60 days, the top reporter locations were: Germany with 18 reports; United States of America with 15 reports; Netherlands with 9 reports. The most common categories in these recent reports were: Web App Attack 44 times; Brute-Force 28 times; Bad Web Bot 20 times; Web Spam 6 times; Hacking 4 times; Other 15 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 robotstxt	2026-10-16 08:28:07 (30 minutes ago)	34.40.28.204 - - [16/Oct/2026:08:28:05 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f ... show more 34.40.28.204 - - [16/Oct/2026:08:28:05 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.40.28.204" 34.40.28.204 - - [16/Oct/2026:08:28:05 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.40.28.204" 34.40.28.204 - - [16/Oct/2026:08:28:05 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.40.28.204" 34.40.28.204 - - [16/Oct/2026:08:28:05 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.40.28.204" 34.40.28.204 - - [16/Oct/2026:08:28:05 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.40.28.204" ... show less	Web Spam Web App Attack
🇧🇾 lns.bz	2026-10-16 07:51:51 (1 hour ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-10-16 07:46:58 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 34.40.28.204 (DE/Germany/204.28.40.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.40.28.204 (DE/Germany/204.28.40.34.bc.googleusercontent.com) show less	SQL Injection
🇬🇧 Greg Poulson	2026-10-16 07:05:09 (1 hour ago)	Our website was hit by this DDOS at a rate of 866 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇪🇸 robotstxt	2026-10-16 07:00:22 (1 hour ago)	34.40.28.204 - - [16/Oct/2026:07:00:14 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:07:0 ... show more 34.40.28.204 - - [16/Oct/2026:07:00:14 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:07:00:14 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:07:00:14 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:07:00:14 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:07:00:14 +0000] "-" 400 193 "-" "-" ... show less	Web Spam Web App Attack
🇬🇧 Mendip_Defender	2026-10-16 06:59:49 (1 hour ago)	34.40.28.204 - - [16/Oct/2026:07:59:50 +0100] "GET /robots.txt HTTP/1.1" 404 6331 "-" "Mozilla/5.0 ( ... show more 34.40.28.204 - - [16/Oct/2026:07:59:50 +0100] "GET /robots.txt HTTP/1.1" 404 6331 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.40.28.204 - - [16/Oct/2026:07:59:50 +0100] "GET /2u4y9o4s3xfmogbcc4px HTTP/1.1" 404 6331 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.40.28.204 - - [16/Oct/2026:07:59:50 +0100] "POST /lib/terminal-xhr.php HTTP/1.1" 404 6331 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" ... show less	Hacking Web App Attack
🇹🇷 hostopya.com	2026-10-16 06:31:24 (2 hours ago)	[plesk-apache] 6 failed attempt(s). Log: [Fri Oct 16 09:31:24.025857 2026] [authz_core:error] [pid 1 ... show more [plesk-apache] 6 failed attempt(s). Log: [Fri Oct 16 09:31:24.025857 2026] [authz_core:error] [pid 1114361] [client 34.40.28.204:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.dev\|[Fri Oct 16 09:31:24.034899 2026] [authz_core:error] [pid 4102496] [client 34.40.28.204:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.local\|[Fri Oct 16 09:31:24.038374 2026] [authz_core:error] [pid 1408967] [client 34.40.28.204:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.production\|[Fri Oct 16 09:31:24.040128 2026] [authz_core:error] [pid 1408867] [client 34.40.28.204:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/environment.json\|[Fri Oct 16 09:31:24.041066 2026] [authz_core:error] [pid 1405625] [client 34.40.28.204:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/database.json show less	Brute-Force Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-10-16 06:24:12 (2 hours ago)	2026/10/16 07:24:09 [error] 4060693#4060693: 3758299 access forbidden by rule, client: 34.40.28.204 ... show more 2026/10/16 07:24:09 [error] 4060693#4060693: 3758299 access forbidden by rule, client: 34.40.28.204, server: [redacted], request: "GET /logs/.env HTTP/2.0", host: "wiki.betatechnologies.info" 2026/10/16 07:24:11 [error] 4060693#4060693: 3758299 access forbidden by rule, client: 34.40.28.204, server: [redacted], request: "GET /_nuxt/../.env HTTP/2.0", host: "wiki.betatechnologies.info" 2026/10/16 07:24:11 [error] 4060693#4060693: 3758299 access forbidden by rule, client: 34.40.28.204, server: [redacted], request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "wiki.betatechnologies.info" show less	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-10-16 05:52:41 (3 hours ago)	(bot_kill_mega) Aggressive Bot Blocked: tencent 34.40.28.204 (DE/Germany/204.28.40.34.bc.googleuserc ... show more (bot_kill_mega) Aggressive Bot Blocked: tencent 34.40.28.204 (DE/Germany/204.28.40.34.bc.googleusercontent.com) show less	Hacking
🇺🇸 TPI-Abuse	2026-10-16 05:42:08 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.40.28.204 (204.28.40.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.40.28.204 (204.28.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:42:02.321733 2026] [security2:error] [pid 9444:tid 9444] [client 34.40.28.204:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.c2cservices.com"] [uri "/.env.prod.local"] [unique_id "atG5Kuh36jA75GI_zGYDaQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Greg Poulson	2026-10-16 03:57:58 (5 hours ago)	Our website was hit by this DDOS at a rate of 115 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇪🇸 robotstxt	2026-10-16 03:29:06 (5 hours ago)	34.40.28.204 - - [16/Oct/2026:03:28:09 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:03:2 ... show more 34.40.28.204 - - [16/Oct/2026:03:28:09 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:03:28:11 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:03:28:11 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:03:28:13 +0000] "-" 400 193 "-" "-" 34.40.28.204 - - [16/Oct/2026:03:28:13 +0000] "-" 400 193 "-" "-" ... show less	Web Spam Web App Attack
🇳🇱 Savvii	2026-10-16 03:17:29 (5 hours ago)	20 attempts against mh-misbehave-ban on kiwi	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-16 02:31:40 (6 hours ago)	[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.40.28.204 - - [16/Oct/2026:04:31:26 +0200] "GET /console HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.40.28.204 - - [16/Oct/2026:04:31:26 +0200] "GET /forgot-password HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.40.28.204 - - [16/Oct/2026:04:31:26 +0200] "GET /login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.40.28.204 - - [16/Oct/2026:04:31:26 +0200] "GET /settings HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 01:54:52 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.40.28.204 (204.28.40.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.40.28.204 (204.28.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 21:54:46.756481 2026] [security2:error] [pid 16700:tid 16700] [client 34.40.28.204:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.caspina.com"] [uri "/.env.supabase"] [unique_id "atGD5oCKgOvBXfn5Pdz-2wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.145

🇳🇱 109.160.32.172

🇳🇱 109.160.32.113

🇭🇰 43.240.14.35

🇺🇸 35.230.50.170

🇧🇷 200.181.217.93

🇧🇷 200.174.115.18

🇫🇷 185.2.102.127

🇺🇸 162.216.150.196

🇫🇷 161.97.170.247

🇨🇳 123.183.190.147

🇪🇸 113.30.149.218

🇨🇳 106.75.214.209

🇮🇳 103.248.73.45

🇷🇴 92.118.39.227

🇫🇷 91.231.89.145

🇮🇩 82.158.134.23

🇮🇳 74.225.168.179

🇧🇾 37.214.20.50

🇺🇸 34.185.100.219