JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.76.228.132

Recent Activity

Abuse Confidence Score

100% Critical

1,067 reports

542 reporters · latest 5 minutes ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 132.228.76.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,067 from 542 distinct reporters

First reported

November 7th 2026

Most recent report

5 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 288 🇺🇸 United States of America 158 🇳🇱 Netherlands 110

Most common categories Web App Attack 867 Bad Web Bot 288 Brute-Force 282 Hacking 242 Port Scan 74

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Gwyneth Llewelyn	2026-11-13 14:04:34 UTC · (5 minutes ago)	2026/11/13 14:04:32 [error] 3020#3020: 648441 access forbidden by rule, client: 34.76.228.132, server: vp-arc.org, request: "GET /api/.env HTTP/2.0", host: "pilfershire.vp-arc.org" 2026/11/13 14:04:32 [error] 3023#3023: 648447 access forbidden by r ... show more 2026/11/13 14:04:32 [error] 3020#3020: 648441 access forbidden by rule, client: 34.76.228.132, server: vp-arc.org, request: "GET /api/.env HTTP/2.0", host: "pilfershire.vp-arc.org" 2026/11/13 14:04:32 [error] 3023#3023: 648447 access forbidden by rule, client: 34.76.228.132, server: vp-arc.org, request: "GET /src/.env HTTP/2.0", host: "pilfershire.vp-arc.org" 2026/11/13 14:04:32 [error] 3025#3025: *648450 access forbidden by rule, client: 34.76.228.132, server: vp-arc.org, request: "GET /.env HTTP/2.0", host: "pilfershire.vp-arc.org" show less	Brute-Force Web App Attack
🇷🇺 Mga Admin	2026-11-13 14:04:14 UTC · (5 minutes ago)	34.76.228.132 - - [13/Nov/2026:21:04:14 +0700] "GET /.env.local HTTP/1.1" 404 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ...	Web App Attack
🇹🇷 pashait	2026-11-13 13:44:09 UTC · (25 minutes ago)	Auto-blocked by Seczar SecureOps — Threat Intel IOC Match (2 events in 5min) at 2026-11-13 13:44	Exploited Host
🇮🇪 AutosOnShow	2026-11-13 13:39:05 UTC · (31 minutes ago)	blocked for webapp attack \| path requested: /metrics \| seen at 2026-11-13 13:38:15.289 \|	Web App Attack
🇩🇪 AetherFox	2026-11-13 13:28:42 UTC · (41 minutes ago)	AetherFox VoidGuard detected: [Fri Nov 13 13:28:41.340701 2026] [security2:error] [pid 3424644:tid 3424660] [client 34.76.228.132:51000] [client 34.76.228.132] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 66.249.64.0/19,40.77 ... show more AetherFox VoidGuard detected: [Fri Nov 13 13:28:41.340701 2026] [security2:error] [pid 3424644:tid 3424660] [client 34.76.228.132:51000] [client 34.76.228.132] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 66.249.64.0/19,40.77.167.0/24,157.55.39.0/24,207.46.13.0/24,5.255.253.0/24,100.43.81.0/24,213.180.203.0/24" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "300"] [id "100090"] [msg "spoofed search engine bot UA from non-official IP blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "hqstats.draconigen.net"] [uri "/"] [unique_id "avcQiSb8NsqKHSpxSj_OqgAAAAc"] [Fri Nov 13 13:28:41.941191 2026] [security2:error] [pid 3424645:tid 3424656] [client 34.76.228.132:51014] [client 34.76.228.132] ModSecurity: Access denied with code 403 (phase 1). String match "/.env" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "99"] [id "100067"] [msg ".env access blocked by AetherF ... show less	Hacking Bad Web Bot
🇺🇸 agaesteves	2026-11-13 13:27:38 UTC · (42 minutes ago)	[SISHIPISMO 360] TipoAtaque.PATH_PROBE \| Acesso a path suspeito: /src/.env \| Paths: /src/.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36	Web App Attack
🇺🇸 EvilTurkey	2026-11-13 13:24:15 UTC · (45 minutes ago)	Web app attack against financial institution website.	Web App Attack Hacking
🇳🇱 Savvii	2026-11-13 13:23:40 UTC · (46 minutes ago)	20 attempts against mh-misbehave-ban on mars	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-13 13:21:55 UTC · (48 minutes ago)	2026/11/13 15:21:55 [error] 2520675#2520675: 7758 access forbidden by rule, client: 34.76.228.132, server: freeflight.org.za, request: "GET /.env HTTP/2.0", host: "freeflight.org.za" 2026/11/13 15:21:55 [error] 2520675#2520675: 7758 access forbidde ... show more 2026/11/13 15:21:55 [error] 2520675#2520675: 7758 access forbidden by rule, client: 34.76.228.132, server: freeflight.org.za, request: "GET /.env HTTP/2.0", host: "freeflight.org.za" 2026/11/13 15:21:55 [error] 2520675#2520675: 7758 access forbidden by rule, client: 34.76.228.132, server: freeflight.org.za, request: "GET /.env.local HTTP/2.0", host: "freeflight.org.za" 2026/11/13 15:21:55 [error] 2520675#2520675: *7758 access forbidden by rule, client: 34.76.228.132, server: freeflight.org.za, request: "GET /.env.production HTTP/2.0", host: "freeflight.org.za" ... show less	Hacking Web App Attack
🇵🇱 Budyn	2026-11-13 13:21:28 UTC · (48 minutes ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: forum.goblinpot.tech \| Path: /.env.local \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: forum.goblinpot.tech \| Path: /.env.local \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
Anonymous	2026-11-13 13:20:41 UTC · (49 minutes ago)	34.76.228.132 - - [13/Nov/2026:14:20:40 +0100] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"	Web App Attack
🇳🇱 Brict IT	2026-11-13 13:16:29 UTC · (53 minutes ago)		Bad Web Bot Web App Attack
🇬🇧 D3monite	2026-11-13 13:14:58 UTC · (55 minutes ago)	Attempted Brute Force (APIService)	Brute-Force
🇧🇪 Saec	2026-11-13 13:09:21 UTC · (1 hour ago)	Honeypot caught: /actuator/configprops via develop.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36.	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇦🇺 Klaverstyn	2026-11-13 12:53:04 UTC · (1 hour ago)	Excessive HTTP request rate	Web App Attack

Showing 1 to 15 of 1067 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 2a01:4020:1:1:101::242

🇰🇷 218.149.235.152

🇹🇼 198.235.24.24

🇧🇷 179.181.187.214

🇩🇪 167.94.146.73

🇮🇹 151.44.203.151

🇫🇮 147.185.133.130

🇫🇮 147.185.133.110

🇺🇿 144.124.196.58

🇰🇷 121.155.28.231

🇹🇼 111.70.49.181

🇩🇪 104.22.123.72

🇳🇵 103.232.154.2

🇷🇺 94.28.237.169

🇺🇸 89.39.242.100

🇮🇶 65.20.230.220

🇮🇳 49.36.232.225

🇵🇾 38.52.132.50

🇬🇪 37.230.247.213

🇫🇷 34.155.77.181