JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.32.116.231

34.32.116.231 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	231.116.32.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.32.116.231

Whois 34.32.116.231

IP Abuse Reports for 34.32.116.231:

This IP address has been reported a total of 22 times from 18 distinct sources. 34.32.116.231 was first reported on August 30th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ger-stg-sifi1	2026-09-01 13:32:44 (15 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Nevermind	2026-09-01 13:30:43 (15 hours ago)	34.32.116.231 - - [01/Sep/2026:15:30:41 +0200] "GET /.git/config HTTP/1.1" 403 6278 "-" "Mozilla/5.0 ... show more 34.32.116.231 - - [01/Sep/2026:15:30:41 +0200] "GET /.git/config HTTP/1.1" 403 6278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.116.231 - - [01/Sep/2026:15:30:42 +0200] "GET /.env HTTP/1.1" 403 6278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.116.231 - - [01/Sep/2026:15:30:42 +0200] "GET /.env.local HTTP/1.1" 403 6278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.116.231 - - [01/Sep/2026:15:30:42 +0200] "GET /.env.production HTTP/1.1" 403 6278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-09-01 13:03:24 (16 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇫🇷 dynamix	2026-09-01 12:47:00 (16 hours ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-09-01 04:07:02 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇩🇪 LRob	2026-09-01 04:02:41 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+3 more) \| 2026-09-01 04:02 UTC show less	Hacking Web App Attack
🇫🇷 masterguru	2026-09-01 03:20:00 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-01 02:41:00 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Savvii	2026-09-01 02:38:11 (1 day ago)	20 attempts against mh-misbehave-ban on ceres	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-01 02:10:04 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 phoenix1jl96	2026-09-01 01:09:46 (1 day ago)	2026/09/01 03:09:45 [error] 3493617#3493617: 4966 open() "/home/user-data/www/lucasmaths.fr/mailer/ ... show more 2026/09/01 03:09:45 [error] 3493617#3493617: 4966 open() "/home/user-data/www/lucasmaths.fr/mailer/.env" failed (2: No such file or directory), client: 34.32.116.231, server: lucasmaths.fr, request: "GET /mailer/.env HTTP/1.1", host: "lucasmaths.fr" 2026/09/01 03:09:45 [error] 3493617#3493617: *4966 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.32.116.231, server: lucasmaths.fr, request: "GET /mail/.env HTTP/1.1", host: "lucasmaths.fr" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 01:07:02 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-01 00:31:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.32.116.231 (231.116.32.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.32.116.231 (231.116.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:30:51.888033 2026] [security2:error] [pid 9109:tid 9109] [client 34.32.116.231:40742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucasabrahamsen.org"] [uri "/.git/config"] [unique_id "apYcuz3zfWvGwKrWLTpRUwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 07:07:17 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 11:13:45 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 34.32.116.231 (231.116.32.34.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 34.32.116.231 (231.116.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 07:13:39.296079 2026] [security2:error] [pid 2838:tid 2838] [client 34.32.116.231:57044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "gatewayacoustics.com"] [uri "/.git/config"] [unique_id "apQQY90atkmMwXXjj2eEEQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2404:6800:4003:c22::12d

🇺🇸 216.73.161.168

🇨🇾 212.108.143.220

🇭🇰 203.83.11.210

🇧🇷 190.89.234.43

🇺🇸 173.255.206.220

🇺🇸 173.44.62.244

🇸🇬 172.71.124.118

🇩🇪 167.94.146.40

🇨🇳 106.75.136.237

🇳🇱 93.123.109.21

🇱🇹 77.90.185.94

🇬🇧 35.203.211.194

🇧🇷 205.210.31.224

🇲🇲 202.165.90.109

🇸🇬 104.23.175.196

🇫🇷 91.231.89.228

🇨🇭 193.32.127.192

🇮🇳 110.173.190.221

🇯🇵 35.194.98.172