JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.96.211.80

34.96.211.80 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	80.211.96.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.96.211.80

Whois 34.96.211.80

IP Abuse Reports for 34.96.211.80:

This IP address has been reported a total of 75 times from 41 distinct sources. 34.96.211.80 was first reported on September 19th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-23 12:14:00 (1 hour ago)	2026-09-23 00:03:57,795 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.96.211.80 ...	Bad Web Bot
🇪🇸 robotstxt	2026-09-23 10:50:14 (2 hours ago)	34.96.211.80 - - [23/Sep/2026:10:49:14 +0000] "GET /Grupo/Obra-civil/FOCICAS/.git/config HTTP/1.1" 4 ... show more 34.96.211.80 - - [23/Sep/2026:10:49:14 +0000] "GET /Grupo/Obra-civil/FOCICAS/.git/config HTTP/1.1" 403 73003 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="34.96.211.80" 34.96.211.80 - - [23/Sep/2026:10:49:15 +0000] "GET /Grupo/Obra-civil/FOCICAS/.env HTTP/1.1" 403 72998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.96.211.80" 34.96.211.80 - - [23/Sep/2026:10:49:17 +0000] "GET /Grupo/Obra-civil/FOCICAS/.env HTTP/1.1" 403 72994 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" "-" edge="34.96.211.80" 34.96.211.80 - - [23/Sep/2026:10:49:19 +0000] "GET /Grupo/Obra-civil/FOCICAS/.env.local HTTP/1.1" 403 72994 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" "-" edge="34.96.211.80" 34.96.211.80 - - [23/Se ... show less	Web App Attack
🇬🇧 consul.to	2026-09-23 08:55:30 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-09-23 02:09:01 (11 hours ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇵🇱 Budyn	2026-09-22 16:59:31 (20 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.goblinpot.store \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-22 16:37:16 (20 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
Anonymous	2026-09-22 11:54:39 (1 day ago)	Aggressive web scan	Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 11:07:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.96.211.80 (80.211.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.211.80 (80.211.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:07:08.972252 2026] [security2:error] [pid 22325:tid 22325] [client 34.96.211.80:54992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vittariadesign.com"] [uri "/.git/config"] [unique_id "arJhXC66q92RzdIa8l5NDQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-22 10:41:42 (1 day ago)	Blocked by web application firewall: automated malicious HTTP requests (WordPress xmlrpc.php / wp-lo ... show more Blocked by web application firewall: automated malicious HTTP requests (WordPress xmlrpc.php / wp-login brute-force and admin-panel scanning). Distributed botnet / automated tooling. No legitimate use. show less	Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2026-09-22 10:15:06 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
🇵🇱 Budyn	2026-09-22 09:55:06 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.astropot.tech \| URI: /.git/config \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-22 08:24:57 (1 day ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.211.80 - - [22/Sep/2026:10:24:39 +0200] "GET /.git/config HTTP/1.1" 403 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 08:23:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.96.211.80 (80.211.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.211.80 (80.211.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:23:07.957259 2026] [security2:error] [pid 14586:tid 14586] [client 34.96.211.80:36232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stable-vitals.com"] [uri "/.git/config"] [unique_id "arI66_YNZ9efDWnlVQXfhwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 swalluw	2026-09-22 07:52:55 (1 day ago)	Web vulnerability scanning: request for /.git/config (HTTP 404, GET) at 2026-09-22T07:52:55+00:00 - ... show more Web vulnerability scanning: request for /.git/config (HTTP 404, GET) at 2026-09-22T07:52:55+00:00 - exploit probe, no legitimate use show less	Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-09-22 07:43:19 (1 day ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 206.189.118.69

🇷🇺 185.91.179.29

🇨🇳 182.242.169.99

🇵🇰 175.107.214.186

🇳🇱 164.92.153.117

🇬🇧 159.65.82.174

🇳🇱 138.226.239.34

🇨🇳 112.94.252.228

🇬🇧 2a06:4880:2000::47

🇺🇸 154.58.229.12

🇿🇦 102.182.6.246

🇺🇸 65.49.20.115

🇱🇹 62.60.130.242

🇹🇼 61.220.235.10

🇳🇱 45.198.224.127

🇺🇸 34.171.5.249

🇺🇸 216.218.206.121

🇳🇱 185.218.86.5

🇭🇰 165.154.225.20

🇧🇷 164.152.250.192