JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.32.31.30

Neutral Activity

Abuse confidence score ?

0% Low Risk

82 reports

40 reporters · latest 5 months ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	30.31.32.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.32.31.30 has been reported 82 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 34.32.31.30

Export CSV

This IP address has been reported a total of 82 times from 40 distinct sources. 34.32.31.30 was first reported on May 10th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-05-15 11:08:26 (5 months ago)	⌨️ Probes for /.git/config everywhere	Hacking Web App Attack
🇮🇩 Burayot	2026-05-15 10:43:03 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.32.31.30 (DE/Germany/30.31.32.34 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.32.31.30 (DE/Germany/30.31.32.34.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 Charlesiv	2026-05-15 10:00:15 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-05-15T09:46:45Z Ray ID: 9fc1379f7d92ee42 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36 show less	Bad Web Bot
🇷🇴 INTEQ	2026-05-15 09:56:23 (5 months ago)	Web attack from 34.32.31.30	Web App Attack
🇳🇿 Antinson	2026-05-15 09:25:16 (5 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇺🇸 WellSpring	2026-05-15 06:45:36 (5 months ago)	git exposure on covenantcommerce.org/.git/config — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇧🇪 voormedia	2026-05-15 05:13:30 (5 months ago)	Accessed trap at '/.git/config'	Web App Attack
🇬🇧 Axel	2026-05-15 04:54:02 (5 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-05-15 04:52:49 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 34.32.31.30 (30.31.32.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.32.31.30 (30.31.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:52:41.751947 2026] [security2:error] [pid 14237:tid 14237] [client 34.32.31.30:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.empoweruamerica.org"] [uri "/.git/config"] [unique_id "agammR5kFS589nIl3jCAeAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-15 04:43:03 (5 months ago)	Banned by Fail2Ban on server	Bad Web Bot
🇫🇷 masterguru	2026-05-15 02:24:55 (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.32.31.30 (DE/Germany/30.31.32.34.b ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.32.31.30 (DE/Germany/30.31.32.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-05-15 02:14:33 (5 months ago)	(caddyscan) Scanner path probe from 34.32.31.30 (DE/Germany/30.31.32.34.bc.googleusercontent.com): 5 ... show more (caddyscan) Scanner path probe from 34.32.31.30 (DE/Germany/30.31.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:02:13:10 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:02:13:40 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:02:14:23 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:02:14:26 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:02:14:28 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
Anonymous	2026-05-15 01:44:56 (5 months ago)	(caddyscan) Scanner path probe from 34.32.31.30 (DE/Germany/30.31.32.34.bc.googleusercontent.com): 5 ... show more (caddyscan) Scanner path probe from 34.32.31.30 (DE/Germany/30.31.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:00:46:39 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:01:43:52 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:01:44:21 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:01:44:44 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.31.30 - - [15/May/2026:01:44:52 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
🇬🇧 andypiper	2026-05-15 01:00:38 (5 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 4server	2026-05-15 00:37:04 (5 months ago)	[FriMay1502:36:57.3856752026][security2:error][pid4106509:tid4106582][client34.32.31.30:0]ModSecurit ... show more [FriMay1502:36:57.3856752026][security2:error][pid4106509:tid4106582][client34.32.31.30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.modularss.mood4apps.com\"][uri\"/.git/config\"][unique_id\"agZqqV9YTPNOgg4Kuw71LQAAAIs\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.199.80.176

🇵🇱 194.180.49.76

🇵🇱 185.144.246.140

🇮🇹 185.87.243.132

🇺🇸 162.216.149.61

🇧🇷 131.196.136.31

🇵🇭 119.92.70.82

🇦🇹 109.70.100.14

🇮🇳 103.38.219.22

🇬🇧 35.203.211.91

🇧🇪 34.14.122.221

🇰🇷 20.196.193.222

🇵🇰 223.123.124.105

🇺🇸 216.211.240.164

🇳🇱 185.136.15.12

🇧🇷 177.136.224.34

🇫🇷 155.117.233.19

🇫🇮 147.185.133.25

🇺🇸 137.184.207.124

🇮🇳 103.155.140.237