JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.20.165.239

34.20.165.239 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	239.165.20.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.20.165.239

Whois 34.20.165.239

IP Abuse Reports for 34.20.165.239:

This IP address has been reported a total of 28 times from 27 distinct sources. 34.20.165.239 was first reported on July 24th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-07-25 07:23:27 (12 minutes ago)	Malformed or malicious web request 34.20.165.239 - - [25/Jul/2026:09:23:10 +0200] "POST /graphql HTT ... show more Malformed or malicious web request 34.20.165.239 - - [25/Jul/2026:09:23:10 +0200] "POST /graphql HTTP/2.0" 404 40034 "-" "Go-http-client/2.0" show less	Hacking Web App Attack
🇩🇪 grassau.com	2026-07-25 06:43:58 (52 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 34.20.165.239 (US/United States/Califor ... show more (mod_security) mod_security triggered on hostname [redacted] 34.20.165.239 (US/United States/California/Los Angeles/239.165.20.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 mygcode.de	2026-07-25 06:42:36 (53 minutes ago)	Scanning for Exploits	Bad Web Bot
Anonymous	2026-07-25 06:22:04 (1 hour ago)	Bot / scanning and/or hacking attempts: GET /_profiler/open HTTP/2.0, GET /.aws/credentials HTTP/2.0 ... show more Bot / scanning and/or hacking attempts: GET /_profiler/open HTTP/2.0, GET /.aws/credentials HTTP/2.0, GET /api/v2/config HTTP/2.0, GET /sw.js HTTP/2.0, GET /.env.production.bak HTTP/2.0, GET /info.php HTTP/2.0, GET /api/health HTTP/2.0, GET /.pypirc HTTP/2.0, GET /api/account HTTP/2.0, GET /config/prod.exs HTTP/2.0, GET /nginx_status HTTP/2.0, GET /config.json HTTP/2.0, GET /dashboard HTTP/2.0, GET /app_dev.php HTTP/2.0, GET /bootstrap.yml HTTP/2.0, GET /.gitlab-ci.yml HTTP/2.0, GET /_profiler/latest HTTP/2.0, GET /env.json HTTP/2.0, GET /.env.production HTTP/2.0, GET /api/settings HTTP/2.0, GET /amplifyconfiguration.json HTTP/2.0, GET /api/v1/settings HTTP/2.0, [151/150] done: stream 301, GET /api/graphql show less	Hacking Web App Attack
🇺🇸 jormaster3k	2026-07-25 05:59:14 (1 hour ago)	Attack against Apache (too many 404s)	Web App Attack
🇩🇪 big-cloud.nl	2026-07-25 05:50:27 (1 hour ago)	Try to access /.aws/config	Web App Attack
🇸🇪 vaia.cloud	2026-07-25 05:30:02 (2 hours ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
Anonymous	2026-07-25 05:25:30 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.20.165.239 (US/United States/239.165 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.20.165.239 (US/United States/239.165.20.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-07-25 05:19:07 (2 hours ago)	34.20.165.239 - - [25/Jul/2026:00:19:03 -0500] "GET /.env HTTP/1.1" 403 199 "-" "anthropic-ai" 34.20 ... show more 34.20.165.239 - - [25/Jul/2026:00:19:03 -0500] "GET /.env HTTP/1.1" 403 199 "-" "anthropic-ai" 34.20.165.239 34.20.165.239 - - [25/Jul/2026:00:19:04 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.20.165.239 34.20.165.239 - - [25/Jul/2026:00:19:04 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.20.165.239 34.20.165.239 - - [25/Jul/2026:00:19:04 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.20.165.239 34.20.165.239 - - [25/Jul/2026:00:19:04 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)" 34.20.165.239 34.20.165.239 - - [25/Jul/2026:00:19:04 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "meta-externalagent/1.1 (+https: ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-07-25 04:59:05 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇩🇪 kommunos	2026-07-25 03:54:10 (3 hours ago)	/config/application.properties	Web App Attack
🇩🇪 EGP Abuse Dept	2026-07-25 02:58:38 (4 hours ago)	Scanning for web/db/file exploits on www.jansenenjansenoogzorg.nl	SQL Injection Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-07-25 02:12:20 (5 hours ago)	Web scanning / probing for vulnerable paths \| URL: /private-key \| Evidence: microsites.grupoeuropa.c ... show more Web scanning / probing for vulnerable paths \| URL: /private-key \| Evidence: microsites.grupoeuropa.com 34.20.165.239 - - [25/Jul/2026:04:11:49 +0200] \"GET /private-key HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)\" GEOIP_COUNTRY_CODE=US \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: US show less	Port Scan Web App Attack
🇩🇪 Vegascosmetics	2026-07-25 01:56:31 (5 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-25 01:42:51 (5 hours ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇲 180.235.117.83

🇺🇸 104.22.93.53

🇺🇸 20.15.164.165

🇧🇷 189.11.143.177

🇫🇷 185.177.72.54

🇺🇸 162.216.150.237

🇩🇪 130.12.180.174

🇰🇷 121.184.144.232

🇳🇱 45.148.10.157

🇩🇪 45.135.141.8

🇺🇸 35.227.50.226

🇬🇧 35.203.210.11

🇺🇸 2001:470:1:fb5::26c

🇬🇧 195.206.182.216

🇲🇽 189.150.110.27

🇵🇱 176.53.159.197

🇦🇲 176.32.193.16

🇺🇸 162.216.149.45

🇭🇰 139.198.113.29

🇫🇷 91.231.89.231