JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.97.173.103

Recent Activity

Abuse Confidence Score

100% Critical

52 reports

34 reporters · latest 3 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 103.173.97.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇯🇵 Japan
City: Osaka, Osaka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

52 from 34 distinct reporters

First reported

November 12th 2026

Most recent report

3 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 12 🇺🇸 United States of America 12 🇳🇱 Netherlands 9

Most common categories Web App Attack 48 Bad Web Bot 23 Brute-Force 22 Hacking 16 SSH 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-11-14 10:47:27 UTC · (3 hours ago)	[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.173.103 - - [14/Nov/2026:11:47:08 +0100] "GET /.git/config HTTP/1.1" 301 624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ... show more [ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.173.103 - - [14/Nov/2026:11:47:08 +0100] "GET /.git/config HTTP/1.1" 301 624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-11-14 09:54:46 UTC · (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-13 23:00:35 UTC · (15 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.	Web App Attack SSH Hacking
🇸🇪 vaia.cloud	2026-11-13 21:10:02 UTC · (16 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-11-13 18:42:37 UTC · (19 hours ago)	287 requests with url.path *phpinfo.php	Brute-Force Bad Web Bot
🇧🇷 radardatelecom	2026-11-13 16:55:05 UTC · (21 hours ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-11-13 16:48:33 UTC · (21 hours ago)	Unauthorized access attempts: [GET] /test.php [GET] /mongodb/.env [GET] /redis/.env [GET] /docker/.env [GET] /brevo/.env [GET] /mailgun/.env [GET] /postmark/.env [GET] /vite/.env [GET] /administrator/.env [GET] /nuxt/.env [GET] /crm/.env [GET] /sbin ... show more Unauthorized access attempts: [GET] /test.php [GET] /mongodb/.env [GET] /redis/.env [GET] /docker/.env [GET] /brevo/.env [GET] /mailgun/.env [GET] /postmark/.env [GET] /vite/.env [GET] /administrator/.env [GET] /nuxt/.env [GET] /crm/.env [GET] /sbin/.env [GET] /vendor/.env [GET] /lib/.env [GET] /bin/.env [GET] /tools/.env [GET] /internal/.env [GET] /api/dev/.env [GET] /microservice/.env [GET] /yii/.env [GET] /zend/.env [GET] /prestashop/.env [GET] /cms/.env [GET] /drupal/.env [GET] /symfony/.env [GET] /laravel/.env [GET] /staging/.env [GET] /dev/.env [GET] /www/.env [GET] /htdocs/.env [GET] /shared/.env [GET] /storage/.env [GET] /release/.env [GET] /application/.env [GET] /admin/.env [GET] /core/.env [GET] /backend/.env [GET] /config/.env [GET] /src/.env [GET] /api/.env [GET] /apps/.env [GET] /.env.yml [GET] /site/.env [GET] /.env.json [GET] /.env.txt [GET] /.env.swp [GET] /.env.preprod [GET] /.env~ [GET] /.env.dist UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.3 ...(Truncated) show less	Web App Attack
🇩🇪 Hazzard	2026-11-13 16:45:53 UTC · (21 hours ago)	34.97.173.103 (JP/Japan/Osaka/Osaka/103.173.97.34.bc.googleusercontent.com/[redacted]), more than 60 Apache 403 hits	Hacking
🇨🇭 dalslab ltd	2026-11-13 16:41:34 UTC · (21 hours ago)	[13/Nov/2026:17:41:32 +0100] - 404 404 - POST https vault.dalslab.com "/" [Client 34.97.173.103] [Length 844] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" ... show more [13/Nov/2026:17:41:32 +0100] - 404 404 - POST https vault.dalslab.com "/" [Client 34.97.173.103] [Length 844] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [13/Nov/2026:17:41:32 +0100] - 404 404 - POST https vault.dalslab.com "/" [Client 34.97.173.103] [Length 844] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [13/Nov/2026:17:41:33 +0100] - 404 404 - POST https vault.dalslab.com "/" [Client 34.97.173.103] [Length 844] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [13/Nov/2026:17:41:33 +0100] - 422 422 - GET https vault.dalslab.com "/.git/config" [Client 34.97.173.103] [Length 496] [Gzip -] [Sent-to 10.1.1.248] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/5 ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-13 16:36:11 UTC · (21 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: vault.astropot.online \| Path: /.git/config \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) Appl ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: vault.astropot.online \| Path: /.git/config \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-11-13 15:26:54 UTC · (22 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇫🇷 Optimatiq (ThreatBite)	2026-11-13 14:23:37 UTC · (23 hours ago)	Probe for secrets or exploit paths (fail2ban)	Hacking Web App Attack
🇸🇪 vaia.cloud	2026-11-13 14:15:02 UTC · (23 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇮🇹 NukeDuke	2026-11-13 13:33:34 UTC · (1 day ago)	[Fri Nov 13 14:33:33.216277 2026] [php7:error] [pid 1904248:tid 1904248] [client 34.97.173.103:38566] script '/var/www/html/webauthn-test/phpinfo.php' not found or unable to stat [Fri Nov 13 14:33:33.640049 2026] [php7:error] [pid 1904248:tid 1904248 ... show more [Fri Nov 13 14:33:33.216277 2026] [php7:error] [pid 1904248:tid 1904248] [client 34.97.173.103:38566] script '/var/www/html/webauthn-test/phpinfo.php' not found or unable to stat [Fri Nov 13 14:33:33.640049 2026] [php7:error] [pid 1904248:tid 1904248] [client 34.97.173.103:38566] script '/var/www/html/webauthn-test/info.php' not found or unable to stat [Fri Nov 13 14:33:34.005620 2026] [php7:error] [pid 1904248:tid 1904248] [client 34.97.173.103:38566] script '/var/www/html/webauthn-test/php.php' not found or unable to stat ... show less	Web App Attack
🇳🇱 ConsulHosting	2026-11-13 11:49:01 UTC · (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇦 196.75.121.27

🇦🇷 179.51.247.102

🇺🇸 159.223.97.218

🇮🇳 139.59.30.133

🇮🇳 103.149.194.193

🇰🇷 14.35.209.208

🇩🇪 193.124.20.252

🇧🇩 114.130.92.37

🇳🇱 77.239.124.31

🇺🇸 45.3.50.231

🇬🇧 35.203.211.140

🇸🇬 165.22.254.227

🇨🇦 142.93.151.206

🇨🇳 116.172.93.48

🇳🇱 93.123.109.107

🇷🇴 92.118.39.71

🇱🇹 78.57.102.242

🇺🇸 40.124.82.201

🇧🇪 35.210.3.28

🇺🇸 34.121.46.63