JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.79.12.228

34.79.12.228 was found in our database!

This IP was reported 1,087 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	228.12.79.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.79.12.228

Whois 34.79.12.228

IP Abuse Reports for 34.79.12.228:

This IP address has been reported a total of 1,087 times from 501 distinct sources. 34.79.12.228 was first reported on October 4th 2026, and the most recent report was 6 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jbcrn	2026-10-17 02:21:05 (6 seconds ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇹🇷 ycoskun41	2026-10-17 02:14:56 (6 minutes ago)	Web attack blocked by WAF: GET /.aws/.env, GET /.docker/laravel/app/.env, GET /.env (Direct access t ... show more Web attack blocked by WAF: GET /.aws/.env, GET /.docker/laravel/app/.env, GET /.env (Direct access to sensitive file or dotfile; Direct access to AI-CLI tool credential or config file). [17/Oct/2026:05:14:55 +0300] "GET /.env.example HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" -> Hidden file access [17/Oct/2026:05:14:55 +0300] "GET /.env.old HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" -> Direct access to sensitive file or dotfile [17/Oct/2026:05:14:55 +0300] "GET /.env.openai HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" -> Hidden file access [17/Oct/2026:05:14:55 +0300] "GET /.env.php HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" -> [RBL] Dirb like fuzzing; Hidden file access show less	Web App Attack
🇦🇹 penguin-solutions.at	2026-10-17 02:10:47 (10 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-10-17 02:03:12 (17 minutes ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-10-17 01:58:38 (22 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 verlon	2026-10-17 01:52:53 (28 minutes ago)	2026/10/17 03:52:49 [error] 1599320#1599320: 2094468 access forbidden by rule, client: 34.79.12.228 ... show more 2026/10/17 03:52:49 [error] 1599320#1599320: 2094468 access forbidden by rule, client: 34.79.12.228, server: verlon.hu, request: "GET /.env.save HTTP/2.0", host: "verlon.hu" 2026/10/17 03:52:49 [error] 1599320#1599320: 2094469 access forbidden by rule, client: 34.79.12.228, server: verlon.hu, request: "GET /.git-credentials HTTP/2.0", host: "verlon.hu" 2026/10/17 03:52:49 [error] 1599320#1599320: 2094481 access forbidden by rule, client: 34.79.12.228, server: verlon.hu, request: "GET /.gitlab-ci.yml HTTP/2.0", host: "verlon.hu" ... show less	Hacking Web App Attack
Anonymous	2026-10-17 01:52:47 (28 minutes ago)	Detected by CrowdSec: crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 H24	2026-10-17 01:41:31 (39 minutes ago)	/.git/index /.git/logs/HEAD /.git-credentials /.env.php /.aws/credentials.bak /.env.bak /.env /.env. ... show more /.git/index /.git/logs/HEAD /.git-credentials /.env.php /.aws/credentials.bak /.env.bak /.env /.env.aws /.aws/.env /.docker/.env show less	Web App Attack
Anonymous	2026-10-17 01:30:20 (50 minutes ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 jocurionline	2026-10-17 01:30:15 (50 minutes ago)	Auto-blocked by WAF: AUTO-BAN: Blocked request + AbuseIPDB 7 zile	Web App Attack
Anonymous	2026-10-17 01:28:12 (52 minutes ago)	34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.aws/.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Wi ... show more 34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.aws/.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.amplifyrc HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.aws/credentials HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.aws/config HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.env.anthropic HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.12.228 - - [17/Oct/2026:03:28:11 +0200] "GET /.claude/settings.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 ... show less	Bad Web Bot Web App Attack
🇺🇸 Shouddy Tarano	2026-10-17 01:25:03 (56 minutes ago)	[Fri Oct 16 19:25:01.842752 2026] [authz_core:error] [pid 5865:tid 139923910809344] [client 34.79.12 ... show more [Fri Oct 16 19:25:01.842752 2026] [authz_core:error] [pid 5865:tid 139923910809344] [client 34.79.12.228:41802] AH01630: client denied by server configuration: /var/www/vendors-stage.campestremty.com/public/ [Fri Oct 16 19:25:01.845331 2026] [authz_core:error] [pid 5865:tid 139923910809344] [client 34.79.12.228:41802] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html [Fri Oct 16 19:25:02.291628 2026] [authz_core:error] [pid 5865:tid 139923776526080] [client 34.79.12.228:41806] AH01630: client denied by server configuration: /var/www/vendors-stage.campestremty.com/public/, referer: https://www.google.com/ [Fri Oct 16 19:25:02.296827 2026] [authz_core:error] [pid 5865:tid 139923776526080] [client 34.79.12.228:41806] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html, referer: https://www.google.com/ [Fri Oct 16 19:25:02.442883 2026] [authz_core:error] [pid 5865:tid 139923751347968] [client 34.79.12.228:41806] AH01630: cli ... show less	DDoS Attack Web Spam Brute-Force Web App Attack
🇦🇺 AWW-Admin	2026-10-17 01:24:56 (56 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 34.79.12.228 (BE/Belgium/228.12.79.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.79.12.228 (BE/Belgium/228.12.79.34.bc.googleusercontent.com) show less	SQL Injection
🇫🇷 venar	2026-10-17 01:20:47 (1 hour ago)	PrestaShop Security Module: suspicious probe path detected (/.env)	Web App Attack
🇰🇷 doll.gl	2026-10-17 01:20:35 (1 hour ago)	CrowdSec: Ip 34.79.12.228 performed 'crowdsecurity/http-sensitive-files' (5 events over 25.105905ms) ... show more CrowdSec: Ip 34.79.12.228 performed 'crowdsecurity/http-sensitive-files' (5 events over 25.105905ms) at 2026-10-17 01:20:34.620828443 +0000 UTC (scenario: crowdsecurity/http-sensitive-files) show less	Port Scan Web App Attack

Showing 1 to 15 of 1087 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.23.118.33

🇩🇪 172.70.243.22

🇩🇪 172.70.243.21

🇮🇩 160.25.119.110

🇺🇸 147.90.234.19

🇨🇳 117.71.54.107

🇱🇺 92.38.172.10

🇩🇪 91.92.41.130

🇺🇸 82.117.93.69

🇬🇧 81.97.108.152

🇳🇱 77.91.71.11

🇬🇧 35.203.211.199

🇮🇱 5.29.9.83

🇦🇪 2.50.136.160

🇺🇿 213.230.127.104

🇺🇸 199.165.159.20

🇨🇳 183.23.189.209

🇨🇳 117.149.11.38

🇳🇱 109.160.32.135

🇨🇳 61.180.34.234