JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.20.164.61

Recent Activity

Abuse Confidence Score

100% Critical

103 reports

80 reporters · latest 3 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 61.164.20.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

103 from 80 distinct reporters

First reported

October 30th 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 27 🇳🇱 Netherlands 18 🇺🇸 United States of America 13

Most common categories Web App Attack 85 Bad Web Bot 27 Hacking 25 Brute-Force 21 Port Scan 7

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 Denis Saamiev	2026-11-12 01:23:23 UTC · (3 days ago)	Web scanner: requested /.git/config	Web App Attack Bad Web Bot
🇨🇭 dalslab ltd	2026-11-12 01:17:27 UTC · (3 days ago)	[12/Nov/2026:02:17:17 +0100] - 404 404 - POST https immich.dalslab.com "/" [Client 34.20.164.61] [Length 140] [Gzip 1.09] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa ... show more [12/Nov/2026:02:17:17 +0100] - 404 404 - POST https immich.dalslab.com "/" [Client 34.20.164.61] [Length 140] [Gzip 1.09] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [12/Nov/2026:02:17:17 +0100] - 404 404 - POST https immich.dalslab.com "/" [Client 34.20.164.61] [Length 140] [Gzip 1.09] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [12/Nov/2026:02:17:17 +0100] - 404 404 - POST https immich.dalslab.com "/" [Client 34.20.164.61] [Length 140] [Gzip 1.09] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [12/Nov/2026:02:17:18 +0100] - 404 404 - POST https immich.dalslab.com "/" [Client 34.20.164.61] [Length 140] [Gzip 1.09] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWe ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 dot.mg	2026-11-12 00:51:01 UTC · (3 days ago)	Bad behaviour	Web Spam
🇩🇪 FeG Deutschland	2026-11-12 00:11:41 UTC · (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇳🇱 Alt255	2026-11-12 00:11:37 UTC · (3 days ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.20.164.61 - - [12/Nov/2026:01:11:28 +0100] "GET /.git/config HTTP/1.1" 301 524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.20.164.61 - - [12/Nov/2026:01:11:28 +0100] "GET /.git/config HTTP/1.1" 301 524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-11-12 00:00:29 UTC · (3 days ago)	[12/Nov/2026:02:00:26 +0200] -- 34.20.164.61 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /service-account.json HTTP/1.1	Bad Web Bot Web App Attack
🇺🇸 Lea	2026-11-11 23:29:44 UTC · (3 days ago)	Malicious web probe on bearstool.com: 34.20.164.61 - - [11/Nov/2026:18:29:43 -0500] "GET /.git/config HTTP/1.1" 404 555 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"	Bad Web Bot Web App Attack
🇩🇪 Hary74656	2026-11-11 22:22:20 UTC · (3 days ago)	Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3. [earlier text truncated] anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score ... show more Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3. [earlier text truncated] anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "imgsearch.aschi.at"] [uri "/"] [unique_id "avTqnNGBXm--tt1zyI3obwAAAIU"] [Wed Nov 11 23:22:20.310083 2026] [vhost imgsearch.aschi.at] [security2:error] [pid 361776:tid 140424047994560] [client 34.20.164.61:45660] [realclient 34.20.164.61:45660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "imgsearch.aschi.at"] [uri "/"] [unique_id "avTqnNGBXm--tt1zyI3ocAAAAJQ"] show less	Web App Attack
🇺🇸 gamabe	2026-11-11 22:01:55 UTC · (3 days ago)	Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.	Hacking
🇩🇪 mr.joecat	2026-11-10 03:26:04 UTC · (5 days ago)	34.20.164.61 - - [10/Nov/2026:04:26:02 +0100] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.164.61 - - [10/Nov/2026:04:26:03 +0100] "GET /.env HTT ... show more 34.20.164.61 - - [10/Nov/2026:04:26:02 +0100] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.164.61 - - [10/Nov/2026:04:26:03 +0100] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.164.61 - - [10/Nov/2026:04:26:03 +0100] "GET /.env.local HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.164.61 - - [10/Nov/2026:04:26:03 +0100] "GET /.env.production HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.164.61 - - [10/Nov/2026:04:26:03 +0100] "GET /.env.staging HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-11-09 12:02:18 UTC · (6 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-11-08 19:22:54 UTC · (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 middelkoopcc	2026-11-08 04:58:00 UTC · (1 week ago)	2026-11-08 05:55:58 GET /.git/config [301] && 2026-11-08 05:55:58 GET /.env [301] && 2026-11-08 05:55:59 GET /.env.bak [301] && 239 more within 20 minutes	Web App Attack
Anonymous	2026-11-08 04:28:09 UTC · (1 week ago)	Web probing (270 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.	Web App Attack
🇩🇪 svr	2026-11-08 04:23:22 UTC · (1 week ago)	Abusive Automated Web Scanner	Web App Attack

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 173.23.37.9

🇺🇸 172.96.181.191

🇩🇪 167.94.145.17

🇸🇬 104.22.222.65

🇺🇸 103.102.246.214

🇨🇦 85.217.149.60

🇺🇸 79.127.222.215

🇸🇬 47.236.137.240

🇺🇸 23.234.116.33

🇺🇸 23.234.101.247

🇺🇸 23.234.76.97

🇺🇸 23.165.8.187

🇸🇬 8.219.222.66

🇬🇧 193.176.29.29

🇩🇰 185.129.61.2

🇺🇸 172.239.62.109

🇺🇸 167.99.237.246

🇹🇭 165.154.120.29

🇺🇸 162.216.149.32

🇺🇸 159.223.123.96