JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.64.77.28

34.64.77.28 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 50%: ?

50%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	28.77.64.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.64.77.28

Whois 34.64.77.28

IP Abuse Reports for 34.64.77.28:

This IP address has been reported a total of 23 times from 21 distinct sources. 34.64.77.28 was first reported on September 20th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-14 22:04:21 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-13. show less	Web App Attack SSH Hacking
🇵🇱 Budyn	2026-10-14 08:53:44 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.astropot.online \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-10-14 02:45:02 (1 week ago)	suspicious request in access.log	Web App Attack
Anonymous	2026-09-21 07:48:59 (1 month ago)	34.64.77.28 - - [20/Sep/2026:18:29:52 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Lin ... show more 34.64.77.28 - - [20/Sep/2026:18:29:52 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 34.64.77.28 - - [20/Sep/2026:18:29:52 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 34.64.77.28 - - [20/Sep/2026:18:29:53 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 34.64.77.28 - - [20/Sep/2026:18:29:53 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 34.64.77.28 - - [20/Sep/2026:18:29:53 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64 ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-21 00:55:08 (1 month ago)	[21/Sep/2026:03:55:08 +0300] -- 34.64.77.28 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/c ... show more [21/Sep/2026:03:55:08 +0300] -- 34.64.77.28 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 Kraften	2026-09-21 00:42:29 (1 month ago)	GET Web noscript attack ...	Web Spam Web App Attack
🇨🇭 ALPHANET	2026-09-21 00:26:07 (1 month ago)	web exploits	Hacking Exploited Host Web App Attack
🇬🇧 pinguin	2026-09-20 21:53:20 (1 month ago)	Triggered Cloudflare WAF (linkMaze) from KR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from KR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇪 vaia.cloud	2026-09-20 21:45:03 (1 month ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇫🇷 Nop Nop	2026-09-20 19:20:13 (1 month ago)	CrowdSec ban: crowdsecurity/http-sensitive-files	Port Scan
🇺🇸 Sonoflet	2026-09-20 19:09:40 (1 month ago)	CrowdSec detection \| scenario: http-probing	Port Scan Web App Attack
🇩🇪 snhosting	2026-09-20 17:01:53 (1 month ago)	34.64.77.28 - - [20/Sep/2026:19:01:43 +0200] "GET /.git/config HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Mac ... show more 34.64.77.28 - - [20/Sep/2026:19:01:43 +0200] "GET /.git/config HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [20/Sep/2026:19:01:43 +0200] "GET /.env HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [20/Sep/2026:19:01:44 +0200] "GET /.env.local HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [20/Sep/2026:19:01:44 +0200] "GET /.env.production HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [20/Sep/2026:19:01:44 +0200] "GET /.env.staging HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Saf ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇫🇮 mnazibo	2026-09-20 17:01:25 (1 month ago)	Date: Sep 20 19:56:25 2026 EAT \| Reported IP: 34.64.77.28 mod_security \| id: 932130 932235 932260 93 ... show more Date: Sep 20 19:56:25 2026 EAT \| Reported IP: 34.64.77.28 mod_security \| id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 930130 920440 920500 \| KR/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Execution: Direct Unix Command Execution; PHP Injection Attack: Variable Access Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Prototype Pollution; SQL Injection Attack: SQL function name detected; JSON-Based SQL Injection; Inbound Anomaly Score Exceeded (Total Score: 55); Restricted File Access Attempt; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Exe show less	SQL Injection Brute-Force Bad Web Bot
🇦🇺 electronico	2026-09-20 16:55:09 (1 month ago)	34.64.77.28 - - [21/Sep/2026:03:55:07 +1100] "GET /.git/config HTTP/1.1" 404 241 "-" "Mozilla/5.0 (W ... show more 34.64.77.28 - - [21/Sep/2026:03:55:07 +1100] "GET /.git/config HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [21/Sep/2026:03:55:07 +1100] "GET /.env HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [21/Sep/2026:03:55:07 +1100] "GET /.env.local HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [21/Sep/2026:03:55:07 +1100] "GET /.env.production HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77.28 - - [21/Sep/2026:03:55:08 +1100] "GET /.env.staging HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.77 ... show less	Brute-Force Web App Attack
🇫🇮 Kimmo Rieskaniemi	2026-09-20 16:54:01 (1 month ago)	CrowdSec triggered crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.118.190.204

🇦🇺 210.0.90.82

🇨🇱 201.223.238.208

🇳🇱 195.178.110.30

🇮🇶 195.69.230.153

🇬🇧 193.163.125.108

🇨🇴 186.154.34.82

🇯🇴 176.29.226.79

🇺🇸 172.96.182.111

🇷🇴 141.98.83.48

🇷🇺 95.26.115.155

🇺🇸 93.180.231.245

🇮🇳 93.114.2.99

🇳🇱 86.38.187.188

🇹🇭 43.128.203.144

🇺🇸 43.110.31.0

🇧🇪 34.38.62.52

🇩🇪 207.241.172.73

🇳🇱 185.136.15.80

🇨🇴 179.12.68.79