JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.97.114.76

34.97.114.76 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	76.114.97.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.97.114.76

Whois 34.97.114.76

IP Abuse Reports for 34.97.114.76:

This IP address has been reported a total of 37 times from 24 distinct sources. 34.97.114.76 was first reported on August 31st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-09-01 11:11:33 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇺🇸 TPI-Abuse	2026-09-01 11:08:00 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:07:53.079633 2026] [security2:error] [pid 25968:tid 25968] [client 34.97.114.76:58884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.natursac.com"] [uri "/.env.old"] [unique_id "apayCaNxrdjTzuoieskMYAAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-09-01 11:03:47 (3 hours ago)	Try to access /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 10:05:54 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:05:49.088699 2026] [security2:error] [pid 29738:tid 29895] [client 34.97.114.76:34906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "universeinternational.org.annastasiamason.com"] [uri "/.env.backup"] [unique_id "apajfQPlJnWS0sb9P1-pFwAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 09:56:42 (4 hours ago)	34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env HTTP/1.1" 403 199 "-" "crusader-worker/1.0" ... show more 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.97.114.76 34.97.114.76 - - [01/Sep/2026:04:56:41 -0500 ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-01 09:50:30 (4 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.97.114.76 (JP/Japan/76.114.97.34.b ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.97.114.76 (JP/Japan/76.114.97.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-01 09:33:32 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:33:25.279465 2026] [security2:error] [pid 16969:tid 16969] [client 34.97.114.76:34654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solutiongroove.com"] [uri "/.env.old"] [unique_id "apab5Q6lRLA8_CAm2XC_9QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-01 08:44:48 (5 hours ago)	[TueSep0110:44:45.9857452026][security2:error][pid3916078:tid3916193][client34.97.114.76:0]ModSecuri ... show more [TueSep0110:44:45.9857452026][security2:error][pid3916078:tid3916193][client34.97.114.76:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"serversvizzera.ch\"][uri\"/wp-config.php~\"][unique_id\"apaQfdEPQgfUPf6MwOoMOgAAANM\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 consul.to	2026-09-01 08:30:57 (5 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-09-01 07:41:10 (6 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 07:18:19 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:18:15.524637 2026] [security2:error] [pid 32751:tid 32751] [client 34.97.114.76:45022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mountararattrek.com.amybeam.com"] [uri "/.env.save"] [unique_id "apZ8N7T9nfwJdMNDro6BiQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-09-01 06:30:37 (7 hours ago)	34.97.114.76 - - [01/Sep/2026:08:30:36 +0200] "GET /.env.example HTTP/1.1" 403 5022 "-" "crusader-wo ... show more 34.97.114.76 - - [01/Sep/2026:08:30:36 +0200] "GET /.env.example HTTP/1.1" 403 5022 "-" "crusader-worker/1.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 06:29:42 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:29:34.920965 2026] [security2:error] [pid 10604:tid 10604] [client 34.97.114.76:38974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stukabird.com"] [uri "/.env.bak"] [unique_id "apZwzryTqZ-10c1YYQb-igAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-09-01 06:09:28 (7 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 06:03:17 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.114.76 (76.114.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:03:09.803348 2026] [security2:error] [pid 3263:tid 3263] [client 34.97.114.76:51044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolwebsites.org"] [uri "/wp-config.php~"] [unique_id "apZqnbDyA2wG8MKAJhHltwAAACM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:727:1000:9e16:cbc1:ac0d:f0e3

🇫🇷 213.32.22.166

🇵🇪 161.132.52.57

🇺🇸 159.89.131.219

🇻🇳 103.97.125.138

🇸🇬 84.75.150.102

🇩🇪 83.135.160.249

🇺🇸 47.13.15.68

🇻🇳 14.224.238.73

🇺🇸 203.88.119.100

🇫🇷 185.177.72.12

🇮🇩 103.90.27.83

🇿🇦 102.214.145.160

🇸🇬 97.74.87.152

🇷🇴 92.118.39.171

🇮🇳 49.204.74.149

🇺🇸 23.234.82.46

🇩🇪 18.184.78.147

🇧🇷 205.210.31.221

🇺🇸 172.208.154.27