JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.209.96

34.154.209.96 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	96.209.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.209.96

Whois 34.154.209.96

IP Abuse Reports for 34.154.209.96:

This IP address has been reported a total of 29 times from 21 distinct sources. 34.154.209.96 was first reported on September 15th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 thezelijah	2026-09-16 16:04:25 (5 hours ago)	[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 34.154.209.96 generated 2 local hits ... show more [AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 34.154.209.96 generated 2 local hits against api.majikah.solutions targeting GET / and POST / with a rate-limit trigger. While VirusTotal reports zero malicious engine detections across 89 scanners, AbuseIPDB shows 28 external reports with a 100% confidence score. Furthermore, CrowdSec CTI independently classifies the IP as malicious with high confidence, noting aggressive behaviors including http:scan, http:crawl, http:exploit, http:bruteforce, and http:dos. Likely motive: Automated web application scanning, exploitation attempts, and brute-force attacks. show less	Web App Attack Bad Web Bot Brute-Force
🇦🇺 2000cn.com.au	2026-09-16 11:19:35 (10 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇫🇷 regishoussin	2026-09-16 09:22:18 (11 hours ago)	Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ... show more Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-16 09:22 UTC. show less	Bad Web Bot Web App Attack
Anonymous	2026-09-16 08:02:58 (13 hours ago)	Fail2ban jail=webexploits banned IP=34.154.209.96 after 1 hits. Reason=web probing.	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-16 07:26:03 (13 hours ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 beatsnet.com	2026-09-16 07:11:03 (14 hours ago)	[Wed Sep 16 09:11:02.300843 2026] [proxy_fcgi:error] [pid 57421:tid 15978342215696] [client 34.154.2 ... show more [Wed Sep 16 09:11:02.300843 2026] [proxy_fcgi:error] [pid 57421:tid 15978342215696] [client 34.154.209.96:42286] AH01071: Got error 'Primary script unknown' [Wed Sep 16 09:11:02.430375 2026] [proxy_fcgi:error] [pid 57421:tid 15978342215696] [client 34.154.209.96:42286] AH01071: Got error 'Primary script unknown' [Wed Sep 16 09:11:02.450357 2026] [proxy_fcgi:error] [pid 57421:tid 15978342215696] [client 34.154.209.96:42286] AH01071: Got error 'Primary script unknown' [Wed Sep 16 09:11:02.522351 2026] [proxy_fcgi:error] [pid 57421:tid 15978342213648] [client 34.154.209.96:42286] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇫🇮 YF	2026-09-16 06:00:28 (15 hours ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇳🇱 Mangelot Hosting	2026-09-16 05:45:39 (15 hours ago)	(modsecurity) srv103 ModSecurity 34.154.209.96 (IT/Italy/96.209.154.34.bc.googleusercontent.com): 30 ... show more (modsecurity) srv103 ModSecurity 34.154.209.96 (IT/Italy/96.209.154.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇸🇪 vaia.cloud	2026-09-16 04:45:03 (16 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 04:17:12 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.209.96 (96.209.154.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.154.209.96 (96.209.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:17:07.445719 2026] [security2:error] [pid 30205:tid 30205] [client 34.154.209.96:35072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlwarehouse.net"] [uri "/.git/config"] [unique_id "aqoYQ2i8e3HNKhAE1cD6vAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-09-16 01:25:55 (19 hours ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/96.209.154.34.bc.googleuserconten ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/96.209.154.34.bc.googleusercontent.com show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 01:19:00 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.209.96 (96.209.154.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.154.209.96 (96.209.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:18:52.772256 2026] [security2:error] [pid 24845:tid 24845] [client 34.154.209.96:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlascoombs.com"] [uri "/.git/config"] [unique_id "aqnufE817kFW_zbc2T9u8gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-16 00:52:13 (20 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-16 00:31:52 (20 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇨🇭 m_vlasov	2026-09-16 00:07:40 (21 hours ago)	SSH/Telnet honeypot: 0 login attempts, 0 sessions, 0 shell commands.	Hacking

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 35.240.159.97

🇳🇱 195.178.110.231

🇮🇹 185.55.211.135

🇻🇳 171.249.191.107

🇨🇦 85.217.149.61

🇸🇬 85.203.21.55

🇸🇬 85.203.21.49

🇸🇬 85.203.21.13

🇦🇷 45.238.223.111

🇹🇼 34.81.192.192

🇹🇼 34.81.123.142

🇺🇸 24.38.251.175

🇺🇸 20.106.19.56

🇧🇷 201.63.223.138

🇩🇪 167.172.176.118

🇸🇬 85.203.21.27

🇺🇸 70.184.96.147

🇸🇬 8.222.235.11

🇬🇧 195.206.182.199

🇰🇭 175.100.126.158