JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.96.238.232

34.96.238.232 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	232.238.96.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.96.238.232

Whois 34.96.238.232

IP Abuse Reports for 34.96.238.232:

This IP address has been reported a total of 47 times from 33 distinct sources. 34.96.238.232 was first reported on September 16th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-09-19 13:23:03 (6 hours ago)	34.96.238.232 - - [19/Sep/2026:15:22:59 +0200] "GET /.git/config HTTP/1.1" 302 494 "-" "Mozilla/5.0 ... show more 34.96.238.232 - - [19/Sep/2026:15:22:59 +0200] "GET /.git/config HTTP/1.1" 302 494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 simpletech.si	2026-09-19 12:36:51 (7 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.96.238.232 (HK/Hong Kong/232.238.96. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.96.238.232 (HK/Hong Kong/232.238.96.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 AetherFox	2026-09-19 12:17:56 (7 hours ago)	AetherFox VoidGuard detected: [Sat Sep 19 14:17:55.745092 2026] [authz_core:error] [pid 471113:tid 4 ... show more AetherFox VoidGuard detected: [Sat Sep 19 14:17:55.745092 2026] [authz_core:error] [pid 471113:tid 471137] [client 34.96.238.232:50554] AH01630: client denied by server configuration: proxy:https://136.243.123.86/ [Sat Sep 19 14:17:55.746856 2026] [authz_core:error] [pid 471113:tid 471137] [client 34.96.238.232:50554] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html [Sat Sep 19 14:17:55.946110 2026] [authz_core:error] [pid 471113:tid 471121] [client 34.96.238.232:50554] AH01630: client denied by server configuration: proxy:https://136.243.123.86/ [Sat Sep 19 14:17:55.946345 2026] [authz_core:error] [pid 471113:tid 471121] [client 34.96.238.232:50554] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html [Sat Sep 19 14:17:56.175113 2026] [authz_core:error] [pid 471113:tid 471120] [client 34.96.238.232:50554] AH01630: client denied by server configuration: proxy:https://136.243.123.86/ ... show less	Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-09-19 12:01:27 (7 hours ago)	Wordpress hacking attempt	Web App Attack
🇳🇱 Site.eu	2026-09-19 11:39:43 (8 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-09-19 06:17:24 (13 hours ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /.git/config (+4 more) \| ua: Mo ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /.git/config (+4 more) \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| 2026-09-19 06:17 UTC show less	Port Scan Web App Attack
Anonymous	2026-09-19 04:56:38 (14 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.96.238.232 (HK/Hong Kong/232.238.96. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.96.238.232 (HK/Hong Kong/232.238.96.34.bc.googleusercontent.com) show less	SQL Injection
🇬🇧 oja	2026-09-19 02:58:56 (16 hours ago)	Aggressive web scanner	Web App Attack
🇫🇷 Octopuce	2026-09-18 23:19:04 (20 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 23:11:05 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.96.238.232 (232.238.96.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.96.238.232 (232.238.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:11:00.526613 2026] [security2:error] [pid 15647:tid 15647] [client 34.96.238.232:37396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nutandboltguy.com"] [uri "/.git/config"] [unique_id "aq3FBECjBSIzOX1b2Z_wewAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 tiwanetbr	2026-09-18 23:01:43 (20 hours ago)	Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: Web, failed attempts: 3) ... show more Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: Web, failed attempts: 3). show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-18 22:00:23 (21 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-17. show less	Web App Attack SSH Hacking
🇩🇪 SwinT	2026-09-18 22:00:07 (21 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇮🇹 VHosting	2026-09-18 20:45:03 (22 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 20:43:48 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.96.238.232 (232.238.96.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.96.238.232 (232.238.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:43:41.054055 2026] [security2:error] [pid 1032:tid 1032] [client 34.96.238.232:53794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.novobeads.com"] [uri "/.git/config"] [unique_id "aq2iffXGktAkLibJUX80WgAAADM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 212.92.104.214

🇩🇪 178.105.31.42

🇲🇾 60.50.209.238

🇺🇦 193.176.251.229

🇷🇴 193.32.162.84

🇳🇱 185.236.20.65

🇳🇱 185.190.25.168

🇨🇴 185.104.165.175

🇩🇪 157.230.18.133

🇫🇷 45.91.22.55

🇺🇸 35.163.174.236

🇬🇧 2a06:4884:5000::4f

🇺🇸 209.50.174.29

🇧🇷 186.248.197.77

🇳🇱 185.2.80.253

🇮🇳 172.69.86.234

🇺🇸 162.216.150.29

🇮🇳 122.15.129.26

🇮🇩 103.193.166.12

🇮🇳 103.123.53.88