JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.97.168.95

Recent Activity

Abuse Confidence Score

100% Critical

180 reports

106 reporters · latest 1 hour ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 95.168.97.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇯🇵 Japan
City: Osaka, Osaka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

180 from 106 distinct reporters

First reported

October 30th 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇩🇪 Germany 56 🇳🇱 Netherlands 22 🇺🇸 United States of America 21

Most common categories Web App Attack 143 Bad Web Bot 50 Brute-Force 44 Hacking 35 SQL Injection 13

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-11-11 22:25:45 UTC · (1 hour ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: url.budyn.wtf \| Path: /.git/config \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_1 ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: url.budyn.wtf \| Path: /.git/config \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] \| [Budyn Fail2ban] \| What happened: This address repeatedly probed sensitive paths often targeted by exploit scanners. Our web jail recognized the pattern and shut it out. show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-11-10 14:14:22 UTC · (1 day ago)	[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.97.168.95 - - \[10/Nov/2026:15:14:11 +0100\] "GET /.git/config HTTP/1.1" 301 572 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, l ... show more [ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.97.168.95 - - \[10/Nov/2026:15:14:11 +0100\] "GET /.git/config HTTP/1.1" 301 572 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-11-10 13:58:34 UTC · (1 day ago)	2026/11/10 13:58:17 [error] 361491#361491: 156669 access forbidden by rule, client: 34.97.168.95, server: webshop.gwynethllewelyn.net, request: "GET /.env HTTP/2.0", host: "webshop.gwynethllewelyn.net" 34.97.168.95 - - [10/Nov/2026:13:58:17 +0000] " ... show more 2026/11/10 13:58:17 [error] 361491#361491: 156669 access forbidden by rule, client: 34.97.168.95, server: webshop.gwynethllewelyn.net, request: "GET /.env HTTP/2.0", host: "webshop.gwynethllewelyn.net" 34.97.168.95 - - [10/Nov/2026:13:58:17 +0000] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2026/11/10 13:58:32 [error] 361491#361491: *156650 access forbidden by rule, client: 34.97.168.95, server: webshop.gwynethllewelyn.net, request: "GET /app/.env HTTP/2.0", host: "webshop.gwynethllewelyn.net" show less	Brute-Force Web App Attack
🇩🇪 todix	2026-11-10 12:49:18 UTC · (1 day ago)	"GET /.git/config HTTP/1.1" 403 6530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"	Web App Attack
🇳🇱 Alt255	2026-11-10 12:20:13 UTC · (1 day ago)	[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.97.168.95 - - [10/Nov/2026:13:20:05 +0100] "GET /.git/config HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ ... show more [ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.97.168.95 - - [10/Nov/2026:13:20:05 +0100] "GET /.git/config HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.168.95 - - [10/Nov/2026:13:20:06 +0100] "GET /.env HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.168.95 - - [10/Nov/2026:13:20:06 +0100] "GET /.env.local HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.168.95 - - [10/Nov/2026:13:20:06 +0100] "GET /.env.production HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Macintosh; Intel Mac O ... show less	Bad Web Bot Web App Attack
Anonymous	2026-11-10 12:16:36 UTC · (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 tsZero	2026-11-10 10:55:09 UTC · (1 day ago)	Scan example: path=/.git/config status=404	Hacking
Anonymous	2026-11-10 10:20:32 UTC · (1 day ago)	Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-sensitive-files	Brute-Force
🇳🇱 Alt255	2026-11-10 08:52:02 UTC · (1 day ago)	[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.168.95 - - [10/Nov/2026:09:51:47 +0100] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ... show more [ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.168.95 - - [10/Nov/2026:09:51:47 +0100] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇧🇪 madeit	2026-11-10 07:57:00 UTC · (1 day ago)		Web App Attack
🇦🇺 Bay13	2026-11-10 07:10:11 UTC · (1 day ago)	CrowdSec:custom/appsec	Web App Attack
🇮🇹 VHosting	2026-11-10 07:05:04 UTC · (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-11-10 05:23:47 UTC · (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14	Exploited Host Web App Attack
Anonymous	2026-11-10 05:13:32 UTC · (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇩🇪 Mr-Money	2026-11-10 04:17:56 UTC · (1 day ago)	scenario: crowdsecurity/http-sensitive-files - events: 5	Web App Attack Hacking

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 160.250.114.86

🇺🇸 156.232.10.218

🇮🇳 103.70.126.239

🇨🇳 27.221.49.34

🇳🇱 195.178.110.30

🇺🇸 150.107.36.236

🇨🇳 106.37.72.234

🇸🇦 82.167.223.57

🇫🇮 45.144.52.239

🇫🇷 194.163.143.248

🇳🇱 109.160.32.121

🇳🇱 103.47.145.17

🇵🇹 89.153.79.166

🇦🇷 38.51.31.10

🇹🇼 35.221.138.107

🇨🇳 175.153.221.109

🇸🇬 161.118.251.249

🇨🇳 124.88.113.149

🇱🇻 45.38.143.106

🇺🇸 37.19.65.161