JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.20.154.163

34.20.154.163 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	163.154.20.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.20.154.163

Whois 34.20.154.163

IP Abuse Reports for 34.20.154.163:

This IP address has been reported a total of 85 times from 61 distinct sources. 34.20.154.163 was first reported on August 26th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 e.fierstra	2026-08-31 15:54:21 (3 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-08-31 03:16:01 (3 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 34.20.154.163 - - [27/Aug/2026:03:45:36 -0300] "G ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 34.20.154.163 - - [27/Aug/2026:03:45:36 -0300] "GET /wp-config.php~ HTTP/1.1" 404 18193 show less	Bad Web Bot
🇮🇪 AutosOnShow	2026-08-30 03:53:04 (4 days ago)	blocked for webapp attack \| path requested: / \| seen at 2026-08-30 03:52:42.239 \|	Web App Attack
🇺🇸 Axel	2026-08-30 01:58:31 (4 days ago)	Blocked by UFW on LAXHH [9080/tcp] \| SPT: 42250 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [9080/tcp] \| SPT: 42250 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇬 Stoyko Stoykov	2026-08-30 01:27:29 (4 days ago)	34.20.154.163 - - [30/Aug/2026:04:27:29 +0300] "GET /.env.production HTTP/1.1" 404 0 "-" "crusader-w ... show more 34.20.154.163 - - [30/Aug/2026:04:27:29 +0300] "GET /.env.production HTTP/1.1" 404 0 "-" "crusader-worker/1.0" ... show less	Hacking Web App Attack
🇬🇧 Artelis	2026-08-30 00:58:45 (4 days ago)	34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /wp-config.php.swp HTTP/1.1" 404 146 "-" "crusad ... show more 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /wp-config.php.swp HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /.env.example HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /.env.production HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /crusader-404-probe HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /.env HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /actuator/configprops HTTP/1.1" 404 146 "-" "crusader-worker/1.0" 34.20.154.163 - - [30/Aug/2026:00:58:45 +0000] "GET /.env.bak HTTP/1.1" 404 146 "-" "crus ... show less	Web App Attack
🇺🇸 NXTwoThou	2026-08-30 00:23:00 (4 days ago)	/.env.example	Web App Attack
Anonymous	2026-08-29 04:05:08 (5 days ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇩🇪 Skyrider	2026-08-29 03:24:56 (5 days ago)	crowdsecurity/http-sensitive-files	Web App Attack
🇧🇷 Peregrine	2026-08-29 03:15:54 (5 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 34.20.154.163 - - [27/Aug/2026:03:45:36 -0300] "G ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 34.20.154.163 - - [27/Aug/2026:03:45:36 -0300] "GET /wp-config.php~ HTTP/1.1" 404 18193 show less	Bad Web Bot
🇩🇪 LRob	2026-08-29 03:13:44 (5 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env.production (+12 more) \| 2026-08-29 03:13 UTC show less	Hacking Web App Attack
Anonymous	2026-08-29 03:05:23 (5 days ago)	CrowdSec blocked IP for crowdsecurity/http-sensitive-files on localhost	Web App Attack
🇩🇪 4server	2026-08-29 02:02:24 (5 days ago)	[SatAug2904:02:18.4871922026][security2:error][pid3462014:tid3462107][client34.20.154.163:0]ModSecur ... show more [SatAug2904:02:18.4871922026][security2:error][pid3462014:tid3462107][client34.20.154.163:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"parrocchiaditesserete.ch.136-243-54-122.cpanel.site\"][uri\"/.env.production\"][unique_id\"apI9qtOtWUH7Vcd561m09gAAAMc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 maxpower	2026-08-29 01:37:09 (5 days ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.20.154.163 (US/United States/163.154.20.34. ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.20.154.163 (US/United States/163.154.20.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/29 03:37:08 [error] 1941209#1941209: 882554 access forbidden by rule, client: 34.20.154.163, server: fisacabruzzo.com, request: "GET /wp-config.php.bak HTTP/1.1", host: "51.89.2.98" 2026/08/29 03:37:08 [error] 1941214#1941214: 882557 access forbidden by rule, client: 34.20.154.163, server: fisacabruzzo.com, request: "GET /wp-config.php.swp HTTP/1.1", host: "51.89.2.98" 2026/08/29 03:37:08 [error] 1941213#1941213: 882556 access forbidden by rule, client: 34.20.154.163, server: fisacabruzzo.com, request: "GET /wp-config.php~ HTTP/1.1", host: "51.89.2.98" show less	Port Scan
🇩🇪 FD-IX	2026-08-29 01:25:39 (5 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 92.118.39.49

🇩🇰 212.60.125.177

🇧🇪 198.235.24.249

🇨🇳 153.35.192.98

🇮🇳 152.59.2.174

🇺🇸 54.166.204.138

🇸🇬 43.172.197.151

🇺🇸 43.153.67.21

🇬🇧 37.156.64.180

🇺🇸 34.94.104.138

🇺🇸 34.41.211.48

🇳🇱 185.242.226.126

🇨🇳 182.138.158.203

🇮🇩 114.141.59.195

🇲🇦 105.159.252.61

🇮🇪 104.28.232.40

🇮🇪 104.28.161.226

🇭🇰 94.74.104.250

🇨🇿 91.232.247.229

🇮🇹 80.211.74.27