JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.96.48.111

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

17 reports

13 reporters · latest 2 months ago

34.96.48.111 is on our whitelist as Google non-cloud IPs via the subnet 34.96.0.0/18.

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 111.48.96.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.96.48.111 has been reported 17 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

17 from 13 distinct reporters

First reported

August 21st 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 markawes	2026-09-07 10:40:03 UTC · (2 months ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 34.96.48.111 - - [07/Sep/2026:10:40:02 +0000] "GET /app/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 34.96.48.111 - - [07/Sep/2026:10:40:02 +0000] "GET /app/.env.local ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 34.96.48.111 - - [07/Sep/2026:10:40:02 +0000] "GET /app/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 34.96.48.111 - - [07/Sep/2026:10:40:02 +0000] "GET /app/.env.local HTTP/1.1" 404 134 "-" "Mozilla/5.0" show less	Web App Attack Port Scan
Anonymous	2026-09-03 07:32:59 UTC · (2 months ago)	apache-auth	Brute-Force Web App Attack
🇳🇿 Antinson	2026-09-03 01:08:27 UTC · (2 months ago)	Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇷🇺 russian-kurort.ru	2026-08-31 04:01:00 UTC · (2 months ago)	SYN flood	DDoS Attack Hacking
🇺🇸 TPI-Abuse	2026-08-29 17:34:55 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.96.48.111 (111.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 13:34:48.848217 2026] [security2:error] [pid 22004:tid 22 ... show more (mod_security) mod_security (id:210492) triggered by 34.96.48.111 (111.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 13:34:48.848217 2026] [security2:error] [pid 22004:tid 22004] [client 34.96.48.111:4388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tracytappan.net"] [uri "/wp-admin/.htaccess6915079c420f4335a328f130bb5d6264"] [unique_id "apMYOE7b2zwZn6MWHm4vIAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-08-29 11:57:31 UTC · (2 months ago)	20 attempts against mh-misbehave-ban on lime	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 20:32:45 UTC · (2 months ago)	[Wed Aug 26 22:32:44.520170 2026] [:error] [pid 1040161:tid 1040161] [client 34.96.48.111:61357] ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `scanners-user-agents.data' against variable `REQUEST_HEADERS:User-Agent' (Value: `fe ... show more [Wed Aug 26 22:32:44.520170 2026] [:error] [pid 1040161:tid 1040161] [client 34.96.48.111:61357] ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `scanners-user-agents.data' against variable `REQUEST_HEADERS:User-Agent' (Value: `feroxbuster/2.13.1' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "38"] [id "913100"] [rev ""] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: feroxbuster found within REQUEST_HEADERS:User-Agent: feroxbuster/2.13.1"] [severity "2"] [ver "OWASP_CRS/4.30.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [uri "/"] [unique_id "178777636429.413542"] [ref "o0,11v39,18"] ... show less	Web App Attack
🇧🇾 lns.bz	2026-08-26 14:10:21 UTC · (2 months ago)	Too many 404 requests [BY]	Web App Attack
🇦🇺 AWW-Admin	2026-08-26 10:33:27 UTC · (2 months ago)	(mod_security) mod_security triggered on hostname [redacted] 34.96.48.111 (SG/Singapore/111.48.96.34.bc.googleusercontent.com)	SQL Injection
🇳🇿 Antinson	2026-08-26 10:14:22 UTC · (2 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-25 19:59:25 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.96.48.111 (111.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:59:20.753570 2026] [security2:error] [pid 28409:tid 28 ... show more (mod_security) mod_security (id:210492) triggered by 34.96.48.111 (111.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:59:20.753570 2026] [security2:error] [pid 28409:tid 28409] [client 34.96.48.111:46699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.177"] [uri "/.htaccessef468b35f35d4205920bb752c5d8eeeb5860ea94bcf04ef087a4857c35919a7e4825df94a95f409199264271d02ef16c"] [unique_id "ao30GPhC30YAHb_VklKZEQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RidgeStar	2026-08-22 03:00:45 UTC · (2 months ago)		Hacking Web App Attack
🇩🇪 psauxit	2026-08-22 01:42:53 UTC · (2 months ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping	Web App Attack Hacking
🇺🇸 markawes	2026-08-21 20:47:07 UTC · (2 months ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 34.96.48.111 - - [21/Aug/2026:20:47:06 +0000] "GET /web/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 34.96.48.111 - - [21/Aug/2026:20:47:06 +0000] "GET /api/.env HTTP/ ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 34.96.48.111 - - [21/Aug/2026:20:47:06 +0000] "GET /web/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 34.96.48.111 - - [21/Aug/2026:20:47:06 +0000] "GET /api/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0" show less	Web App Attack Port Scan
🇳🇴 doofy	2026-08-21 18:19:43 UTC · (2 months ago)	[Fri Aug 21 20:19:37.230046 2026] [authz_core:error] [pid 465921:tid 466003] [client 34.96.48.111:36204] AH01630: client denied by server configuration: /www/airmedical.no/.htaccesse9c93b811a0a46d6992975d9c04752b36b717c03c31b403d91f7dd4e4232e67db29e2 ... show more [Fri Aug 21 20:19:37.230046 2026] [authz_core:error] [pid 465921:tid 466003] [client 34.96.48.111:36204] AH01630: client denied by server configuration: /www/airmedical.no/.htaccesse9c93b811a0a46d6992975d9c04752b36b717c03c31b403d91f7dd4e4232e67db29e20777d5e43ef81b40885b82e7dfa [Fri Aug 21 20:19:37.230681 2026] [authz_core:error] [pid 465921:tid 466020] [client 34.96.48.111:35312] AH01630: client denied by server configuration: /www/airmedical.no/.htaccess3714e260250547b8a46a2c11e46d6780 [Fri Aug 21 20:19:37.595420 2026] [authz_core:error] [pid 465921:tid 466021] [client 34.96.48.111:35312] AH01630: client denied by server configuration: /www/airmedical.no/wp-admin/.htaccess508937f1de4d40b5a146a7ee55132180 [Fri Aug 21 20:19:37.601815 2026] [authz_core:error] [pid 465921:tid 465995] [client 34.96.48.111:36204] AH01630: client denied by server configuration: /www/airmedical.no/wp-admin/.htaccess899362ff86ec48a18c9fbb3e57107e281eecb9d304b6429597234d215cff36d562f1110eba0a4060b36e327801b58a9 ... show less	Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇭 202.69.171.60

🇺🇸 98.92.224.205

🇷🇴 80.94.92.55

🇳🇱 213.209.159.236

🇳🇱 195.178.110.137

🇳🇱 192.42.116.93

🇫🇷 169.58.109.98

🇺🇸 162.216.149.46

🇦🇹 152.53.46.27

🇫🇷 91.231.89.120

🇦🇪 80.227.247.90

🇨🇴 38.236.224.239

🇨🇳 36.25.251.109

🇦🇺 170.64.149.92

🇺🇸 162.216.150.224

🇿🇦 105.246.241.2

🇳🇱 77.239.124.71

🇳🇱 77.67.26.186

🇺🇸 64.62.197.45

🇺🇸 40.124.84.194