JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.64.135.237

34.64.135.237 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	237.135.64.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.64.135.237

Whois 34.64.135.237

IP Abuse Reports for 34.64.135.237:

This IP address has been reported a total of 38 times from 28 distinct sources. 34.64.135.237 was first reported on June 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-11 20:50:08 (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇮 inlink.ltd	2026-06-11 16:38:20 (1 week ago)	dot file probe	Web App Attack
🇫🇷 masterguru	2026-06-11 09:16:55 (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇷🇴 gtheo99	2026-06-11 08:40:33 (1 week ago)	(CT) IP 34.64.135.237 (KR/South Korea/237.135.64.34.bc.googleusercontent.com) found to have 136 conn ... show more (CT) IP 34.64.135.237 (KR/South Korea/237.135.64.34.bc.googleusercontent.com) found to have 136 connections show less	Port Scan
🇳🇱 Site.eu	2026-06-11 06:52:17 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 🇨🇭 Hosting	2026-06-11 05:10:22 (1 week ago)	Automated WAF report: 100-125 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-11 04:05:24 (1 week ago)	[ThuJun1106:05:21.1484152026][security2:error][pid1417000:tid1417988][client34.64.135.237:0]ModSecur ... show more [ThuJun1106:05:21.1484152026][security2:error][pid1417000:tid1417988][client34.64.135.237:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"reddragonrecords.ch.81-17-25-250.cpanel.site\"][uri\"/api/.env.backup\"][unique_id\"aio0AUYqRZ1pdpnHBem9EwAAAQ8\"] show less	Hacking Web App Attack
🇷🇴 iulianh	2026-06-11 03:18:46 (1 week ago)	*	Brute-Force SSH
🇳🇱 Cloud86 B.V.	2026-06-10 17:39:04 (1 week ago)	categories: DDoS Attack	DDoS Attack
🇳🇱 wlt-blocker	2026-06-10 16:34:30 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 08:52:30 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.64.135.237 (237.135.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.135.237 (237.135.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:52:24.299087 2026] [security2:error] [pid 31649:tid 31649] [client 34.64.135.237:49062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thechildrenscharity.net"] [uri "/.env.backup.txt"] [unique_id "aiklyADyLDyZX_wZNJLIpQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-10 03:04:10 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 updown.io	2026-06-10 01:19:04 (1 week ago)	{"level":"info","ts":1781054343.422106,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1781054343.422106,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.64.135.237","remote_port":"32848","client_ip":"34.64.135.237","proto":"HTTP/1.1","method":"GET","host":"xwvutsrqpowww.jihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/api/.env","headers":{"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3730.0 Safari/537.36"],"Accept-Charset":["utf-8"]}},"bytes_read":0,"user_id":"","duration":0.000078711,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://xwvutsrqpowww.jihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/api/.env"]}} {"level":"info","ts":1781054343.4266257,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.64.135.237","remote_port":"32876","client_ip":"34.64. ... show less	DDoS Attack Web App Attack
🇫🇷 RootOPSOVH	2026-06-09 23:54:52 (1 week ago)	GET /admin/.env.local \| UA: Xenu Link Sleuth/1.3.8	Web Spam Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-09 18:01:03 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.182

🇨🇳 117.72.44.104

🇨🇳 116.228.82.58

🇻🇳 115.73.208.73

🇳🇱 109.236.50.3

🇳🇱 45.156.87.253

🇺🇸 23.92.25.114

🇺🇸 3.144.44.57

🇨🇳 1.197.102.62

🇨🇳 112.124.51.174

🇻🇳 103.186.101.231

🇮🇳 103.70.207.61

🇲🇦 102.53.15.180

🇨🇦 85.217.149.29

🇮🇳 64.227.146.163

🇳🇱 45.148.10.183

🇳🇱 2a03:b0c0:2:d0::1403:9001

🇮🇳 190.92.174.31

🇺🇸 172.237.155.29

🇺🇸 162.216.149.193