JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.97.161.11

34.97.161.11 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	11.161.97.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.97.161.11

Whois 34.97.161.11

IP Abuse Reports for 34.97.161.11:

This IP address has been reported a total of 41 times from 27 distinct sources. 34.97.161.11 was first reported on September 15th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-09-17 15:45:57 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.97.161.11 (JP/Japan/Osaka/Osaka/11.1 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.97.161.11 (JP/Japan/Osaka/Osaka/11.161.97.34.bc.googleusercontent.com) show less	SQL Injection
🇧🇷 Halux	2026-09-17 14:32:49 (3 hours ago)	34.97.161.11 Probing protected path or service	Web App Attack
🇺🇸 WellSpring	2026-09-17 14:18:50 (4 hours ago)	env leak on worldtrashday.org/public/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇳🇱 Site.eu	2026-09-17 14:01:22 (4 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-17 12:19:38 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:19:34.393047 2026] [security2:error] [pid 1483:tid 1483] [client 34.97.161.11:59646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "worldpeaceholidaycards.com"] [uri "/.git/config"] [unique_id "aqva1vvyWKDT384xaM3t5wAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 10:32:12 (7 hours ago)	Bot / seems abusive / Apache connections: 39	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-17 09:44:02 (8 hours ago)	[ThuSep1711:44:00.6677542026][security2:error][pid2004866:tid2004933][client34.97.161.11:0]ModSecuri ... show more [ThuSep1711:44:00.6677542026][security2:error][pid2004866:tid2004933][client34.97.161.11:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"worldgoldfundltd.com\"][uri\"/\"][unique_id\"aqu2YAdlLQBQTcFyyY3CcgAAAUE\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 noise.agency	2026-09-17 08:32:12 (9 hours ago)	34.97.161.11 (JP/Japan/11.161.97.34.bc.googleusercontent.com), more than 10 Apache 403 hits	Hacking
🇨🇭 🇨🇭 Hosting	2026-09-17 05:10:31 (13 hours ago)	Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 18:36:15 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:36:09.807207 2026] [security2:error] [pid 22768:tid 22768] [client 34.97.161.11:45390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willowcreekretreathouse.com"] [uri "/.git/config"] [unique_id "aqrhmT30YN7P638eC4-zfgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 18:07:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:07:29.821364 2026] [security2:error] [pid 27032:tid 27032] [client 34.97.161.11:56748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willieplaymoreband.com"] [uri "/.git/config"] [unique_id "aqra4Q-BIZk1xBah1CK4TwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 17:30:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:30:02.630501 2026] [security2:error] [pid 24570:tid 24586] [client 34.97.161.11:49604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "williampower.com"] [uri "/.git/config"] [unique_id "aqrSGknnR5EP9u_4_ZzFGgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 17:20:37 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-09-16 17:03:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.161.11 (11.161.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:03:06.108294 2026] [security2:error] [pid 1308:tid 1308] [client 34.97.161.11:52906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "worldofeconomics.com"] [uri "/.git/config"] [unique_id "aqrLyntK-RrMZlsf11pZNAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-09-16 16:44:57 (1 day ago)	(modsecurity) srv101 ModSecurity 34.97.161.11 (JP/Japan/11.161.97.34.bc.googleusercontent.com): 30 i ... show more (modsecurity) srv101 ModSecurity 34.97.161.11 (JP/Japan/11.161.97.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 196.203.228.78

🇺🇸 189.81.5.192

🇫🇮 147.185.133.1

🇱🇹 77.90.185.20

🇺🇸 2600:9000:25e8:f200:e:159e:9f80:93a1

🇮🇳 220.158.184.112

🇺🇸 172.237.150.22

🇸🇪 171.25.158.87

🇩🇪 69.5.169.35

🇺🇸 66.249.84.34

🇺🇸 44.213.202.136

🇮🇳 27.123.114.190

🇰🇷 223.62.225.134

🇺🇸 137.184.179.158

🇨🇳 111.175.88.6

🇸🇬 109.123.238.248

🇳🇱 45.148.10.141

🇧🇷 205.210.31.205

🇹🇼 198.235.24.52

🇺🇦 178.54.78.190