JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.20.235.147

34.20.235.147 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	147.235.20.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.20.235.147

Whois 34.20.235.147

IP Abuse Reports for 34.20.235.147:

This IP address has been reported a total of 32 times from 24 distinct sources. 34.20.235.147 was first reported on August 30th 2026, and the most recent report was 34 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Sonoflet	2026-09-01 18:44:47 (34 minutes ago)	CrowdSec detection \| scenario: appsec-vpatch	Web App Attack
🇺🇸 infra-monitor	2026-09-01 02:00:10 (17 hours ago)	Automated ban via infra-monitor: suspicious-probe, crowdsecurity/http-sensitive-files	Port Scan Web App Attack
Anonymous	2026-09-01 00:02:37 (19 hours ago)	Scenarios: http-probing, http-sensitive-files Total requests: 16	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-31 22:01:01 (21 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-31 15:30:39 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.20.235.147 (147.235.20.34.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 34.20.235.147 (147.235.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:30:28.032118 2026] [security2:error] [pid 12563:tid 12563] [client 34.20.235.147:37398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "justinpenney.com"] [uri "/.git/config"] [unique_id "apWeE-dtb-KdE4C2wniDLgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 12:55:57 (1 day ago)	2026/08/31 12:55:56 [error] 2115102#2115102: 116241 [client 34.20.235.147] ModSecurity: Access deni ... show more 2026/08/31 12:55:56 [error] 2115102#2115102: 116241 [client 34.20.235.147] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.29.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "justabhospital.org"] [uri "/"] [unique_id "17881809566.579292"] [ref ""], client: 34.20.235.147, server: srv.ingeltechgh.com, request: "POST / HTTP/1.1", host: "justabhospital.org" 2026/08/31 12:55:56 [error] 2115102#2115102: *116241 [client 34.20.235.147] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/usr/local/owasp-mods ... show less	Brute-Force
Anonymous	2026-08-31 12:17:28 (1 day ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-31 11:50:43 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
Anonymous	2026-08-31 11:45:02 (1 day ago)	suspicious request in access.log	Web App Attack
🇸🇪 vaia.cloud	2026-08-31 11:45:02 (1 day ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:55:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.20.235.147 (147.235.20.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.20.235.147 (147.235.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:55:17.793248 2026] [security2:error] [pid 24970:tid 25114] [client 34.20.235.147:58992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jupitermaturin.com"] [uri "/.git/config"] [unique_id "apVdlaiXcJIfl7jWcqMRKgAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:02:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.20.235.147 (147.235.20.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.20.235.147 (147.235.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:02:27.499504 2026] [security2:error] [pid 30658:tid 30658] [client 34.20.235.147:51328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "junobug.info"] [uri "/.git/config"] [unique_id "apVRM_4_1qn6QGoqG_GWBQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 09:26:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.20.235.147 (147.235.20.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.20.235.147 (147.235.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 05:26:05.312042 2026] [security2:error] [pid 3360:tid 3360] [client 34.20.235.147:54160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juniperhills.net"] [uri "/.git/config"] [unique_id "apVIrZSQuN6VLuy5k7furAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 09:16:25 (1 day ago)	34.20.235.147 - - [31/Aug/2026:11:16:04 +0200] "GET /.git/config HTTP/1.1" 403 618 "-" "Mozilla/5.0 ... show more 34.20.235.147 - - [31/Aug/2026:11:16:04 +0200] "GET /.git/config HTTP/1.1" 403 618 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.235.147 - - [31/Aug/2026:11:16:04 +0200] "GET /.env HTTP/1.1" 403 618 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.235.147 - - [31/Aug/2026:11:16:04 +0200] "GET /.env.local HTTP/1.1" 403 618 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.235.147 - - [31/Aug/2026:11:16:05 +0200] "GET /.env.production HTTP/1.1" 403 618 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.20.235.147 - - [31/Aug/2026:11:16:05 +0200] "GET /.env.staging HTTP/1.1" 403 618 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	DDoS Attack
🇬🇧 consul.to	2026-08-31 09:08:11 (1 day ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 101.13.5.39

🇵🇰 39.34.133.252

🇺🇸 2601:14d:5383:1840:ece3:b866:5a39:30ec

🇺🇸 213.137.88.61

🇹🇷 146.19.125.121

🇹🇼 104.199.132.60

🇪🇸 88.11.149.242

🇸🇬 47.79.202.41

🇲🇼 41.216.228.244

🇺🇸 34.148.2.86

🇰🇷 210.182.73.140

🇭🇰 152.32.189.59

🇺🇸 147.185.132.70

🇨🇳 140.205.208.159

🇺🇸 136.119.48.182

🇮🇳 110.173.190.221

🇺🇸 76.87.164.167

🇺🇸 74.0.97.157

🇳🇱 45.148.10.157

🇺🇿 213.230.86.4