JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.95.189.96

34.95.189.96 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 42%: ?

42%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	96.189.95.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.95.189.96

Whois 34.95.189.96

IP Abuse Reports for 34.95.189.96:

This IP address has been reported a total of 6 times from 6 distinct sources. 34.95.189.96 was first reported on August 29th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-31 22:00:36 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-30 10:04:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.95.189.96 (96.189.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.189.96 (96.189.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 06:04:54.742230 2026] [security2:error] [pid 7761:tid 7761] [client 34.95.189.96:36098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.checkmyhomevalueca.kunzteam.com"] [uri "/.git/config"] [unique_id "apQARi1LKECJKV4yw0wrNwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2026-08-30 05:33:09 (3 days ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇮🇹 VHosting	2026-08-30 05:25:03 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-30 04:06:40 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇧🇷 Black_Brazil	2026-08-29 23:40:00 (3 days ago)	Automated high-speed web application scanning and cloud credential harvesting attack against richard ... show more Automated high-speed web application scanning and cloud credential harvesting attack against richardsonserra.com on 2026-08-29 (19:04 BRT). 279 malicious requests blocked by Cloudflare WAF in 6 seconds. Target paths include GCP/Firebase credentials (/google-key.json, /gcp-sa.json, /firebase-adminsdk.json, /google-credentials.json), environment files (/.env.yaml, /.env.backup, /react/.env, /config/app/.env), Git config (/.git/config), and PHP info disclosure (/core/phpinfo.php, /wp-admin/phpinfo.php, /_profiler/phpinfo). Originating IP: 34.95.189.96 (Google LLC - AS396982).; “/google-key.json” “/firebase-adminsdk.json” “/application_default_credentials.json” “/google-credentials.json” “/gcp-sa.json” show less	Bad Web Bot Web App Attack Hacking

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.226

🇺🇸 63.41.16.4

🇺🇸 3.81.222.123

🇷🇴 2.57.121.112

🇨🇳 223.199.179.54

🇬🇧 213.166.84.49

🇮🇳 182.95.150.106

🇦🇷 181.92.245.128

🇸🇬 84.75.155.24

🇱🇹 62.60.130.253

🇬🇧 35.203.210.97

🇨🇳 223.167.169.81

🇸🇪 217.60.78.71

🇰🇷 211.46.188.16

🇧🇪 198.235.24.131

🇵🇱 176.53.159.198

🇺🇸 165.154.173.215

🇩🇪 139.59.143.102

🇫🇷 104.23.229.20

🇮🇳 103.109.13.50