JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.64.76.28

Recent Activity

Abuse Confidence Score

84% Critical

20 reports

15 reporters · latest 29 minutes ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 28.76.64.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 15 distinct reporters

First reported

November 12th 2026

Most recent report

29 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇳🇱 Netherlands 4 🇧🇪 Belgium 2

Most common categories Web App Attack 18 Brute-Force 9 Bad Web Bot 9

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 dineshskt4all	2026-11-15 19:52:45 UTC · (29 minutes ago)	[Sun Nov 15 19:52:42.874017 2026] [proxy_fcgi:error] [pid 2290270:tid 139881053390528] [client 34.64.76.28:0] AH01071: Got error 'Primary script unknown' ...	Brute-Force
🇺🇸 TPI-Abuse	2026-11-15 19:51:23 UTC · (31 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:51:17.865386 2026] [security2:error] [pid 26570:tid 2658 ... show more (mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:51:17.865386 2026] [security2:error] [pid 26570:tid 26584] [client 34.64.76.28:59852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ptinct.com"] [uri "/.git/config"] [unique_id "avoNNReXFwdN3TQdogLpswAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 19:11:01 UTC · (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:10:54.647132 2026] [security2:error] [pid 1428:tid 1428] ... show more (mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:10:54.647132 2026] [security2:error] [pid 1428:tid 1428] [client 34.64.76.28:37444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ptfea.aquascapes.net"] [uri "/.git/config"] [unique_id "avoDvuSxsgctcl9eGqIEuAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-15 18:50:05 UTC · (1 hour ago)	BlockScope: CrowdSec: crowdsecurity/http-probing.	Web App Attack
🇫🇷 COMAITE	2026-11-15 17:31:01 UTC · (2 hours ago)	Suspicious URL access.	Web App Attack
🇵🇱 gandaflux	2026-11-15 05:04:39 UTC · (15 hours ago)	34.64.76.28 [redacted-domain] - [15/Nov/2026:06:04:36 +0100] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.76.28 [redacted-domain] ... show more 34.64.76.28 [redacted-domain] - [15/Nov/2026:06:04:36 +0100] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.76.28 [redacted-domain] - [15/Nov/2026:06:04:37 +0100] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.76.28 [redacted-domain] - [15/Nov/2026:06:04:37 +0100] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 FD-IX	2026-11-15 03:23:01 UTC · (16 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇦🇺 artful	2026-11-15 03:05:00 UTC · (17 hours ago)	Excessive errors, high load and multiple hits per second	Web App Attack
🇫🇮 stinpriza	2026-11-15 03:02:05 UTC · (17 hours ago)	Web App Attack	Web App Attack
🇧🇪 cmbplf	2026-11-15 02:30:07 UTC · (17 hours ago)	1.305 requests with url.path *.env	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-15 02:23:52 UTC · (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:23:47.936647 2026] [security2:error] [pid 32420:tid 3242 ... show more (mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:23:47.936647 2026] [security2:error] [pid 32420:tid 32420] [client 34.64.76.28:44416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psychologists-omega.com"] [uri "/.git/config"] [unique_id "avkXs8e_MiIMECXl3X-CNQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-11-15 02:03:25 UTC · (18 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-11-15 01:40:08 UTC · (18 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 00:52:30 UTC · (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:52:24.532953 2026] [security2:error] [pid 15491:tid 1551 ... show more (mod_security) mod_security (id:210492) triggered by 34.64.76.28 (28.76.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:52:24.532953 2026] [security2:error] [pid 15491:tid 15510] [client 34.64.76.28:43290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psychclinicforchange.com"] [uri "/.git/config"] [unique_id "avkCSNNTWQdV4wRupsYvvAAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-11-14 23:58:21 UTC · (20 hours ago)	plesk-modsecurity - IP: 34.64.76.28 - [15/Nov/2026:00:58:19.360871 +0100] avj1m8LuEZ47v-quKQnnIQAAAEU 34.64.76.28 59300 127.0.0.1 7081 [15/Nov/2026:00:58:20.363425 +0100] avj1nBSqOHAg3VFk6hpsdAAAAAU 34.64.76.28 59326 127.0.0.1 7081 [15/Nov/2026:00:5 ... show more plesk-modsecurity - IP: 34.64.76.28 - [15/Nov/2026:00:58:19.360871 +0100] avj1m8LuEZ47v-quKQnnIQAAAEU 34.64.76.28 59300 127.0.0.1 7081 [15/Nov/2026:00:58:20.363425 +0100] avj1nBSqOHAg3VFk6hpsdAAAAAU 34.64.76.28 59326 127.0.0.1 7081 [15/Nov/2026:00:58:20.587245 +0100] avj1nMLuEZ47v-quKQnnJAAAAFM 34.64.76.28 59358 127.0.0.1 7081 [15/Nov/2026:00:58:20.810798 +0100] avj1nNs57iA2b0Zux7z9KQAAAIo 34.64.76.28 59374 127.0.0.1 7081 show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 139.28.123.7

🇩🇪 109.160.32.142

🇳🇱 45.148.10.141

🇺🇸 45.80.105.65

🇮🇷 2.179.187.110

🇨🇳 220.171.59.46

🇫🇷 185.177.72.29

🇨🇳 183.224.97.83

🇰🇷 182.210.76.170

🇩🇪 167.94.146.56

🇷🇺 94.190.15.13

🇫🇷 88.188.161.64

🇫🇮 35.228.81.82

🇸🇪 213.64.163.27

🇸🇳 154.125.228.145

🇫🇷 104.28.42.20

🇨🇳 101.126.129.127

🇳🇱 45.140.222.171

🇸🇬 199.235.129.79

🇨🇳 180.153.236.44