JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.32.56.148

34.32.56.148 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	148.56.32.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.32.56.148

Whois 34.32.56.148

IP Abuse Reports for 34.32.56.148:

This IP address has been reported a total of 31 times from 22 distinct sources. 34.32.56.148 was first reported on September 15th 2026, and the most recent report was 17 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 16:14:49 (17 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.32.56.148 (148.56.32.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.32.56.148 (148.56.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:14:46.317095 2026] [security2:error] [pid 58077:tid 58077] [client 34.32.56.148:58350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maryrosevaro.com"] [uri "/.git/config"] [unique_id "aqrAdufEdaLxpVfhaiySNgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-16 14:59:01 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
Anonymous	2026-09-16 14:44:02 (1 hour ago)	Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env HTTP/1.1, POST / HTTP/1.1, GET /.env.development HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.staging HTTP/1.1 show less	Hacking Web App Attack
🇮🇩 Burayot	2026-09-16 14:23:27 (2 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.32.56.148 (DE/Germany/148.56.32. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.32.56.148 (DE/Germany/148.56.32.34.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 12:46:41 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.32.56.148 (148.56.32.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.32.56.148 (148.56.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:46:34.602069 2026] [security2:error] [pid 26802:tid 26802] [client 34.32.56.148:41306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martinez-morera.com"] [uri "/.git/config"] [unique_id "aqqPqkJ1QfMf20E5EY5c7wAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-09-16 09:57:16 (6 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-sensitive-files.	Bad Web Bot Web App Attack
🇺🇸 gamabe	2026-09-16 07:59:06 (8 hours ago)	Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.	Hacking
🇺🇸 TPI-Abuse	2026-09-16 06:37:37 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.32.56.148 (148.56.32.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.32.56.148 (148.56.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:37:32.332930 2026] [security2:error] [pid 27962:tid 27971] [client 34.32.56.148:48786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcp.fnaandpartners.com"] [uri "/.git/config"] [unique_id "aqo5LHeP9FourQEkKXXpiwAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 et-a_network	2026-09-16 06:31:46 (10 hours ago)	34.32.56.148 - - [16/Sep/2026:06:31:43 +0000] "GET /phpinfo.php HTTP/2.0" 404 143 "-" "Mozilla/5.0 ( ... show more 34.32.56.148 - - [16/Sep/2026:06:31:43 +0000] "GET /phpinfo.php HTTP/2.0" 404 143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host=mcp.et-a.eu via=172.64.198.9 rt=0.001 34.32.56.148 - - [16/Sep/2026:06:31:45 +0000] "GET /admin/phpinfo.php HTTP/2.0" 404 147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host=mcp.et-a.eu via=172.64.198.138 rt=0.001 ... show less	Bad Web Bot Web App Attack
🇩🇪 dave	2026-09-16 06:09:26 (10 hours ago)	threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ... show more threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-CVE-2025-55182,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config,custom/traefik-sensitive-path-probe observed_by=1_hosts hit_count=19 first_seen=2026-09-16T06:09:21Z last_seen=2026-09-16T06:09:26Z show less	Web App Attack
🇩🇪 Dominik Lysiak	2026-09-16 05:51:48 (10 hours ago)	34.32.56.148 - - [16/Sep/2026:07:51:47 +0200] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 ( ... show more 34.32.56.148 - - [16/Sep/2026:07:51:47 +0200] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.56.148 - - [16/Sep/2026:07:51:48 +0200] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.56.148 - - [16/Sep/2026:07:51:48 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 WellSpring	2026-09-16 05:18:33 (11 hours ago)	env leak on mcp.425.today/public/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
Anonymous	2026-09-16 05:07:03 (11 hours ago)	Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-09-16 04:34:18.	Web App Attack
Anonymous	2026-09-16 04:32:23 (11 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
Anonymous	2026-09-16 01:26:45 (15 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.26

🇧🇷 189.90.33.195

🇮🇳 103.139.191.62

🇫🇷 51.254.103.32

🇫🇷 212.83.147.193

🇦🇹 188.21.93.53

🇺🇸 164.90.135.205

🇮🇩 160.22.240.235

🇮🇪 54.74.187.127

🇺🇸 44.250.214.250

🇹🇼 35.194.174.136

🇦🇷 200.59.72.239

🇮🇳 117.247.17.88

🇵🇱 109.205.211.27

🇹🇷 95.173.181.67

🇺🇸 71.6.146.186

🇹🇭 49.231.192.36

🇩🇪 34.89.154.242

🇮🇷 5.121.154.55

🇰🇷 2406:da12:c4c:af00:c1eb:a43:250f:49c3