JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.96.152.143

34.96.152.143 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	143.152.96.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.96.152.143

Whois 34.96.152.143

IP Abuse Reports for 34.96.152.143:

This IP address has been reported a total of 21 times from 21 distinct sources. 34.96.152.143 was first reported on July 21st 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-21 16:17:39 (16 hours ago)	Multiple, malicious web requests detected	Port Scan Hacking
Anonymous	2026-07-21 14:51:03 (18 hours ago)	Bot / scanning and/or hacking attempts: GET /admin/.env HTTP/2.0, GET /graphql HTTP/2.0, GET /ngsw.j ... show more Bot / scanning and/or hacking attempts: GET /admin/.env HTTP/2.0, GET /graphql HTTP/2.0, GET /ngsw.json HTTP/2.0, GET /id_dsa HTTP/2.0, POST /graphql HTTP/2.0, GET /.claude/settings.json HTTP/2.0, GET /v1/graphql HTTP/2.0, GET /wp-json HTTP/2.0, GET /.hermes/.env HTTP/2.0, GET /.git/config HTTP/2.0, GET /z9x8c7v6b5-debug-trigger-portal.hominco.nl HTTP/2.0, GET /rclone.conf HTTP/2.0, GET /api/settings HTTP/2.0, GET /local.settings.json HTTP/2.0, POST /api/graphql HTTP/2.0, GET / HTTP/2.0, GET /console HTTP/2.0, GET /webpack-stats.json HTTP/2.0, GET /.hermes/config.yaml HTTP/2.0, GET /api/graphql HTTP/2.0, GET /service-account.json HTTP/2.0, GET /.aws/config HTTP/2.0, GET /credentials.json HTTP/2.0, GET /.aws/credentials HTTP/2.0 show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-21 14:17:12 (18 hours ago)	Multiple WAF Violations	Web App Attack
🇭🇺 bcsaba	2026-07-21 14:06:00 (19 hours ago)	Looking for json file on web server 34.96.152.143 - - [21/Jul/2026:16:05:58 +0200] "GET /settings.js ... show more Looking for json file on web server 34.96.152.143 - - [21/Jul/2026:16:05:58 +0200] "GET /settings.json HTTP/2.0" 400 230 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" show less	Web App Attack
Anonymous	2026-07-21 12:57:55 (20 hours ago)	Automated report from Fail2Ban firewall ban	Brute-Force SSH IoT Targeted
🇳🇴 jad-abuse	2026-07-21 12:09:52 (21 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: actuator, ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: actuator, aws_creds, git_exposure, env_probe, source_backup, config_backup, server_status, ssh_keys. Observed by 1 sensor(s); 161 hits. show less	Hacking Web App Attack
🇩🇪 macrob	2026-07-21 11:28:02 (21 hours ago)	2026/07/21 11:28:01 [error] 2535538#2535538: 395914800 access forbidden by rule, client: 34.96.152. ... show more 2026/07/21 11:28:01 [error] 2535538#2535538: 395914800 access forbidden by rule, client: 34.96.152.143, server: fn.binixo.es, request: "GET /.aws/config HTTP/2.0", host: "app.fastcredit.net.ua" 2026/07/21 11:28:01 [error] 2535538#2535538: 395914761 access forbidden by rule, client: 34.96.152.143, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "app.fastcredit.net.ua" 2026/07/21 11:28:01 [error] 2535539#2535539: 395914763 access forbidden by rule, client: 34.96.152.143, server: fn.binixo.es, request: "GET /.aws/credentials HTTP/2.0", host: "app.fastcredit.net.ua" ... show less	Web App Attack
🇳🇱 informedclearly.com	2026-07-21 10:50:18 (22 hours ago)	WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.git/config? ua=Mozilla/5.0 AppleWebKit/537.36 ( ... show more WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.git/config? ua=Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot) show less	Hacking
🇨🇭 backslash	2026-07-21 10:42:00 (22 hours ago)	block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6	Bad Web Bot
🇦🇹 penguin-solutions.at	2026-07-21 10:30:48 (22 hours ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-07-21 10:25:51 (22 hours ago)	Web scanning / probing for vulnerable paths \| URL: /wp-config.php.old \| Evidence: microsites.grupoeu ... show more Web scanning / probing for vulnerable paths \| URL: /wp-config.php.old \| Evidence: microsites.grupoeuropa.com 34.96.152.143 - - [21/Jul/2026:12:24:15 +0200] \"GET /wp-config.php.old HTTP/1.1\" 403 219 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)\" GEOIP_COUNTRY_CODE=HK \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: HK show less	Port Scan Web App Attack
🇳🇱 BlueWire Hosting	2026-07-21 10:14:16 (22 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-07-21 10:09:59 (23 hours ago)	Sensitive file access attempt	Hacking
🇩🇪 Ano_Nym	2026-07-21 09:31:08 (23 hours ago)	CrowdSec IDS alert on VPS 85.215.198.123 (DE). Scenario: crowdsecurity/http-probing	Web App Attack
🇸🇪 vaia.cloud	2026-07-21 09:30:01 (23 hours ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.154

🇺🇸 147.185.132.52

🇸🇦 143.92.173.229

🇧🇬 78.128.114.174

🇺🇸 66.132.172.238

🇺🇸 20.169.161.126

🇨🇳 8.138.98.28

🇺🇸 199.47.82.20

🇬🇧 195.206.182.202

🇧🇷 177.67.98.94

🇺🇸 165.154.36.243

🇵🇰 154.57.213.93

🇺🇸 91.230.168.11

🇨🇦 85.217.149.54

🇲🇦 81.192.46.45

🇩🇪 213.209.159.236

🇧🇪 198.235.24.199

🇹🇼 198.235.24.97

🇧🇷 191.183.36.99

🇦🇷 181.192.7.168