JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.96.248.99

34.96.248.99 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	99.248.96.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.96.248.99

Whois 34.96.248.99

IP Abuse Reports for 34.96.248.99:

This IP address has been reported a total of 52 times from 30 distinct sources. 34.96.248.99 was first reported on September 16th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-19 12:33:47 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 08:33:43.347038 2026] [security2:error] [pid 26065:tid 26065] [client 34.96.248.99:40100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tubbesing.services"] [uri "/.git/config"] [unique_id "aq6BJ8ejhxxzgPUknsVQEgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 12:07:09 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 08:07:06.216824 2026] [security2:error] [pid 14667:tid 14667] [client 34.96.248.99:41976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisdomsco.com"] [uri "/.git/config"] [unique_id "aq566iR-CTF-K-NnORO43wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-19 11:32:20 (8 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-19 10:06:19 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 06:06:12.557375 2026] [security2:error] [pid 15707:tid 15707] [client 34.96.248.99:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.triplejrealty.com"] [uri "/.git/config"] [unique_id "aq5elNViWxee-x7roTuVNgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-09-19 10:02:38 (9 hours ago)	34.96.248.99 - - [19/Sep/2026:13:02:37 +0300] "GET /.git/config HTTP/1.1" 404 3424 "-" "Mozilla/5.0 ... show more 34.96.248.99 - - [19/Sep/2026:13:02:37 +0300] "GET /.git/config HTTP/1.1" 404 3424 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.248.99 - - [19/Sep/2026:13:02:37 +0300] "GET /.env.local HTTP/1.1" 404 3424 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 07:56:19 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:56:16.328716 2026] [security2:error] [pid 21463:tid 21494] [client 34.96.248.99:47856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.transiit.org"] [uri "/.git/config"] [unique_id "aq5AIMWugytOAUZS-y3OEgAAAZU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-09-19 06:57:52 (12 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.96.248.99 (HK/Hong Kong/99.248.96.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.96.248.99 (HK/Hong Kong/99.248.96.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 4server	2026-09-19 06:33:03 (13 hours ago)	[SatSep1908:32:58.9639002026][security2:error][pid438238:tid438295][client34.96.248.99:0]ModSecurity ... show more [SatSep1908:32:58.9639002026][security2:error][pid438238:tid438295][client34.96.248.99:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.tpgs.ch\"][uri\"/.env.bak\"][unique_id\"aq4smkQXVMZBG7jQC9wlMwAAAFE\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-19 06:20:03 (13 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 todix	2026-09-19 06:06:24 (13 hours ago)	Web App Attack Exploid from 34.96.248.99	Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 04:23:47 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.248.99 (99.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:23:40.336627 2026] [security2:error] [pid 22122:tid 22122] [client 34.96.248.99:50186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tonynvn.me"] [uri "/.git/config"] [unique_id "aq4OTDmnuWaEqituMB2w9AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-19 04:15:00 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.96.248.99 (HK/Hong Kong/99.248.96.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.96.248.99 (HK/Hong Kong/99.248.96.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-09-19 00:31:45 (19 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.96.248.99 (HK/Hong Kong/99.248.96.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.96.248.99 (HK/Hong Kong/99.248.96.34.bc.googleusercontent.com) show less	SQL Injection
🇿🇦 conure.sh	2026-09-19 00:04:29 (19 hours ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 2s	Web App Attack
🇩🇪 gadix	2026-09-18 22:29:42 (21 hours ago)	[19/Sep/2026:00:29:40.426646 +0200] aq27VAzbw83JX-9qFcTp7QAAAAU 34.96.248.99 60942 127.0.0.1 7081 [1 ... show more [19/Sep/2026:00:29:40.426646 +0200] aq27VAzbw83JX-9qFcTp7QAAAAU 34.96.248.99 60942 127.0.0.1 7081 [19/Sep/2026:00:29:40.843245 +0200] aq27VAM9kathjfbegB2wmQAAAAs 34.96.248.99 60966 127.0.0.1 7081 [19/Sep/2026:00:29:41.048619 +0200] aq27VRFpKT5rGJR4FocYcwAAAAc 34.96.248.99 60974 127.0.0.1 7081 ... show less	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 202.133.91.208

🇩🇪 130.12.182.196

🇹🇼 211.75.198.217

🇹🇼 211.22.123.63

🇲🇦 196.92.7.249

🇦🇷 191.85.13.123

🇸🇬 178.128.99.69

🇮🇳 68.233.116.124

🇧🇷 35.198.11.196

🇿🇦 4.221.186.70

🇺🇸 216.25.89.138

🇺🇸 216.25.89.130

🇹🇼 188.253.7.4

🇩🇪 167.94.146.37

🇸🇬 159.223.78.3

🇺🇸 158.94.187.101

🇭🇰 118.193.38.41

🇰🇷 118.37.214.187

🇨🇳 14.145.35.181

🇷🇴 2.57.122.238