JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.97.209.28

34.97.209.28 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	28.209.97.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.97.209.28

Whois 34.97.209.28

IP Abuse Reports for 34.97.209.28:

This IP address has been reported a total of 27 times from 20 distinct sources. 34.97.209.28 was first reported on August 27th 2026, and the most recent report was 55 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-28 19:07:09 (55 minutes ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+11 more) \| 2026-08-28 19:07 UTC show less	Hacking Web App Attack
Anonymous	2026-08-28 16:52:36 (3 hours ago)	34.97.209.28 - - [28/Aug/2026:18:52:26 +0200] "GET /app/.git/config HTTP/1.1" 403 146 "-" "crusader- ... show more 34.97.209.28 - - [28/Aug/2026:18:52:26 +0200] "GET /app/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0" 34.97.209.28 - - [28/Aug/2026:18:52:26 +0200] "GET /src/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0" 34.97.209.28 - - [28/Aug/2026:18:52:26 +0200] "GET /html/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇸 Vash7589	2026-08-28 13:34:13 (6 hours ago)	Gate: Unknown IP attempted access: 34.97.209.28	Brute-Force SSH
🇺🇸 conrad10781	2026-08-28 12:41:53 (7 hours ago)	nginx-4xx	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 12:37:05 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:36:57.640513 2026] [security2:error] [pid 21386:tid 21386] [client 34.97.209.28:50086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "klingandi.com.bridgital.com"] [uri "/.git/config"] [unique_id "apGA6e3E8OMkTrhweUdQOgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-28 12:10:01 (7 hours ago)	suspicious request in access.log	Web App Attack
🇳🇿 Antinson	2026-08-28 11:29:50 (8 hours ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇬🇧 consul.to	2026-08-28 11:00:19 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 openstrike.co.uk	2026-08-28 05:14:20 (14 hours ago)	12 attacks on VC URLs: GET /htdocs/.git/config HTTP/1.1	Hacking
Anonymous	2026-08-28 04:35:29 (15 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-08-27 17:15:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:15:18.646966 2026] [security2:error] [pid 22168:tid 22168] [client 34.97.209.28:35266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.landing.veneerdent.com"] [uri "/public/.git/config"] [unique_id "apBwpntsasKpT4BIe1kb-AAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-08-27 17:02:35 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇨🇦 TechnoSolutions CL	2026-08-27 16:22:39 (1 day ago)	34.97.209.28 - - [27/Aug/2026:16:22:38 +0000] "GET /api/.git/config HTTP/1.1" 444 0 "-" "crusader-wo ... show more 34.97.209.28 - - [27/Aug/2026:16:22:38 +0000] "GET /api/.git/config HTTP/1.1" 444 0 "-" "crusader-worker/1.0" 34.97.209.28 - - [27/Aug/2026:16:22:38 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "crusader-worker/1.0" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 16:10:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:09:59.779193 2026] [security2:error] [pid 32738:tid 32738] [client 34.97.209.28:52194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxwamworld.grayhost.net"] [uri "/html/.git/config"] [unique_id "apBhV-8sXj70vdvx8RbhtwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 15:51:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.209.28 (28.209.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:51:24.885389 2026] [security2:error] [pid 8326:tid 8326] [client 34.97.209.28:57402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jonnyonthespot.biz"] [uri "/html/.git/config"] [unique_id "apBc_Ll-F-LpP4iVK-4NUgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.180

🇺🇸 162.216.150.254

🇮🇹 5.99.196.202

🇺🇸 205.210.31.111

🇺🇸 205.210.31.109

🇨🇳 116.179.32.109

🇷🇺 95.52.92.11

🇧🇷 64.69.119.107

🇺🇸 54.147.52.191

🇫🇷 54.38.180.48

🇺🇸 45.79.167.65

🇬🇧 35.203.210.67

🇺🇸 34.63.55.185

🇺🇸 4.155.111.50

🇷🇴 2.57.122.238

🇺🇸 205.210.31.102

🇳🇱 203.55.131.5

🇦🇷 190.175.59.166

🇺🇸 172.191.132.202

🇻🇳 171.244.39.95