JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.116.182.20

34.116.182.20 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	20.182.116.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.116.182.20

Whois 34.116.182.20

IP Abuse Reports for 34.116.182.20:

This IP address has been reported a total of 35 times from 27 distinct sources. 34.116.182.20 was first reported on June 9th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-12 22:01:54 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-11. show less	Web App Attack SSH Hacking
🇩🇪 rh24	2026-06-12 03:38:15 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.116.182.20 (PL/Poland/20.182.116.34. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.116.182.20 (PL/Poland/20.182.116.34.bc.googleusercontent.com) show less	SQL Injection
🇧🇷 dominioz	2026-06-12 03:15:19 (1 week ago)	2026-06-12 03:15:16 GET /.aws/config - - 34.116.182.20 HTTP/1.1 Mozilla/5.0+(Linux;+Android+9;+Mi+A2 ... show more 2026-06-12 03:15:16 GET /.aws/config - - 34.116.182.20 HTTP/1.1 Mozilla/5.0+(Linux;+Android+9;+Mi+A2+Lite)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/75.0.3770.101+Mobile+Safari/537.36 - 301 621 2026-06-12 03:15:16 GET /backup.sql - - 34.116.182.20 HTTP/1.1 Mozilla/5.0+(Linux;+Android+5.1;+Lenovo+P70-A)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/76.0.3809.111+Mobile+Safari/537.36 - 301 619 2026-06-12 03:15:16 GET /dump.sql - - 34.116.182.20 HTTP/1.1 Nokia6230i/2.0+(03.80)+Profile/MIDP-2.0+Configuration/CLDC-1.1 - 301 615 2026-06-12 03:15:16 GET /mysqldump.sql - - 34.116.182.20 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_14_6)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/12.1.2+Safari/605.1.15 - 301 625 ... show less	Web App Attack
🇬🇧 andypiper	2026-06-12 01:01:58 (1 week ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 Hazzard	2026-06-11 14:43:59 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇩🇪 Kreapptivo	2026-06-11 14:35:45 (1 week ago)	34.116.182.20 - [2026-06-11T16:35:41+02:00] "GET /actuator/sessions HTTP/1.1" 400 "code=400, messag ... show more 34.116.182.20 - [2026-06-11T16:35:41+02:00] "GET /actuator/sessions HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.42 Safari/537.36" "" 10570 34.116.182.20 - [2026-06-11T16:35:41+02:00] "GET /api/env HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (Linux; Android 9; PH-1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "" 10369 34.116.182.20 - [2026-06-11T16:35:41+02:00] "GET /app/actuator/configprops HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Gecko/2009060309 Ubuntu/9.10 (karmic) Firefox/3.0.11" "" 17223 34.116.182.20 - [2026-06-11T16:35:41+02:00] "GET /threaddump HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (X11; U; Linux i686; en-US; r show less	Bad Web Bot Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-11 12:39:04 (1 week ago)	categories: DDoS Attack	DDoS Attack
🇫🇮 inlink.ltd	2026-06-11 08:05:03 (2 weeks ago)	Known malicious PHP file or CMS probe	Web App Attack
🇬🇧 consul.to	2026-06-11 06:30:34 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Matthew Ping	2026-06-11 02:30:01 (2 weeks ago)	ModSecurity rule 949110 triggered on wp1. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇫🇷 masterguru	2026-06-11 01:43:33 (2 weeks ago)	Restricted File Access Attempt. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. (930130 ... show more Restricted File Access Attempt. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. (930130-195) show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-06-11 01:34:01 (2 weeks ago)	278 requests with url.path config.json 212 requests with url.path config.yml 174 requests with ... show more 278 requests with url.path config.json 212 requests with url.path config.yml 174 requests with url.path secrets.json 141 requests with url.path compose.yml 118 requests with url.path *database.yml show less	Brute-Force Bad Web Bot
🇩🇪 updown.io	2026-06-10 23:09:53 (2 weeks ago)	{"level":"info","ts":1781132992.7476726,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781132992.7476726,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.116.182.20","remote_port":"40542","client_ip":"34.116.182.20","proto":"HTTP/1.1","method":"GET","host":"tsrqpwww.srqponmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/actuator/heapdump","headers":{"User-Agent":["DoCoMo/2.0 N905i(c100;TB;W24H16) (compatible; Googlebot-Mobile/2.1; http://www.google.com/bot.html)"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000071406,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://tsrqpwww.srqponmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/actuator/heapdump"],"Content-Type":[]}} {"level":"info","ts":1781132992.7670116,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.116.182.20","remote_port":"40544","client_ip":"34. ... show less	DDoS Attack Web App Attack
Anonymous	2026-06-10 18:15:43 (2 weeks ago)	Aggressive web scan	Web App Attack
🇳🇱 Site.eu	2026-06-10 17:58:41 (2 weeks ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 172.253.11.22

🇨🇳 111.42.132.19

🇺🇸 64.62.156.19

🇺🇸 45.33.113.96

🇨🇳 14.103.46.177

🇭🇰 199.45.154.137

🇬🇧 193.163.125.232

🇺🇸 192.159.99.144

🇺🇸 147.185.132.247

🇺🇸 145.132.101.177

🇸🇬 112.140.184.197

🇳🇬 102.90.79.200

🇺🇸 45.33.96.41

🇺🇸 45.33.16.187

🇳🇱 159.223.10.56

🇺🇸 147.182.183.153

🇳🇱 91.92.40.240

🇫🇷 85.217.140.44

🇮🇷 85.198.19.251

🇺🇸 65.110.40.240