JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.97.56.137

34.97.56.137 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	137.56.97.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.97.56.137

Whois 34.97.56.137

IP Abuse Reports for 34.97.56.137:

This IP address has been reported a total of 38 times from 27 distinct sources. 34.97.56.137 was first reported on September 15th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-17 06:00:05 (5 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇭 🇨🇭 Hosting	2026-09-17 05:10:32 (6 hours ago)	Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-09-17 04:34:26 (7 hours ago)	2026/09/17 05:34:13 [error] 2807822#2807822: 225184 access forbidden by rule, client: 34.97.56.137, ... show more 2026/09/17 05:34:13 [error] 2807822#2807822: 225184 access forbidden by rule, client: 34.97.56.137, server: apcoelho.pt, request: "GET /.env HTTP/2.0", host: "www.apcoelho.pt" 34.97.56.137 - - [17/Sep/2026:05:34:13 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2026/09/17 05:34:24 [error] 2807822#2807822: *225184 access forbidden by rule, client: 34.97.56.137, server: apcoelho.pt, request: "GET /app/.env HTTP/2.0", host: "www.apcoelho.pt" show less	Brute-Force Web App Attack
Anonymous	2026-09-17 04:05:05 (7 hours ago)	suspicious request in access.log	Web App Attack
🇳🇱 Site.eu	2026-09-17 03:18:30 (8 hours ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-09-17 02:20:49 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-16 17:14:53 (18 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-16 15:48:49 (20 hours ago)	Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ... show more Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	Web App Attack
🇳🇱 Alt255	2026-09-16 15:47:35 (20 hours ago)	[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.56.137 - - [16/Sep/2026:17:47:27 +0200] "GET /.git/config HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 23p02732	2026-09-16 15:20:13 (20 hours ago)	Automated web scanning and malicious probing	Brute-Force Bad Web Bot Web App Attack
🇫🇮 albionfreemarket.com	2026-09-16 14:55:40 (20 hours ago)	34.97.56.137 - - [16/Sep/2026:14:54:54 +0000] "GET /graphql/.env HTTP/2.0" 403 555 "-" "Mozilla/5.0 ... show more 34.97.56.137 - - [16/Sep/2026:14:54:54 +0000] "GET /graphql/.env HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "JP" 34.97.56.137 - - [16/Sep/2026:14:55:31 +0000] "GET /phpinfo.php HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "JP" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:44:33 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.56.137 (137.56.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.56.137 (137.56.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:44:27.250675 2026] [security2:error] [pid 326:tid 326] [client 34.97.56.137:58332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.albertmassaad.com.easternimport.com"] [uri "/.git/config"] [unique_id "aqqdO63355WsyqRlDb24OwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:11:47 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.56.137 (137.56.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.56.137 (137.56.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:11:39.828181 2026] [security2:error] [pid 7319:tid 7319] [client 34.97.56.137:39234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.albertacottagebuilder.com.weyoungrenovations.com"] [uri "/.git/config"] [unique_id "aqqVi0VDxtRQztRPUYlH6AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 dominioz	2026-09-16 13:07:37 (22 hours ago)	2026-09-16 13:06:50 GET /.env - - 34.97.56.137 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/ ... show more 2026-09-16 13:06:50 GET /.env - - 34.97.56.137 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 575 2026-09-16 13:06:52 GET /.env.local - - 34.97.56.137 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 587 2026-09-16 13:06:53 GET /.env.production - - 34.97.56.137 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 597 2026-09-16 13:06:54 GET /.env.staging - - 34.97.56.137 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 591 2026-09-16 13:06:56 GET /.env.development - - 34.97.56.137 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 599 2026-09-16 13:06:57 GET /.env.test - - 34.97.56.137 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+lik ... show less	Web App Attack
🇮🇹 VHosting	2026-09-16 11:15:03 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.203

🇳🇱 85.17.145.65

🇸🇪 34.51.230.13

🇭🇰 199.45.154.190

🇫🇷 195.154.48.94

🇿🇦 165.73.163.75

🇧🇩 103.189.11.92

🇮🇳 103.68.11.235

🇩🇪 88.218.45.126

🇳🇱 45.148.10.157

🇻🇳 45.117.82.102

🇵🇰 39.49.49.83

🇻🇳 14.163.213.143

🇸🇪 2a02:6ea0:1508:2::d001

🇩🇪 213.209.159.238

🇧🇷 191.37.68.23

🇺🇸 184.105.247.195

🇨🇳 111.225.148.189

🇻🇳 103.154.63.88

🇧🇩 103.16.72.118