JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.64.201.168

34.64.201.168 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 88%: ?

88%

ISP	Google Asia Pacific Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	168.201.64.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.64.201.168

Whois 34.64.201.168

IP Abuse Reports for 34.64.201.168:

This IP address has been reported a total of 21 times from 18 distinct sources. 34.64.201.168 was first reported on June 14th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-15 10:02:24 (6 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
Anonymous	2026-06-15 10:00:04 (6 days ago)	suspicious request in access.log	Web App Attack
🇫🇷 dynamix	2026-06-15 08:10:43 (6 days ago)	Multiple WAF Violations	Web App Attack
🇨🇭 Origon	2026-06-15 07:59:39 (6 days ago)	http-sensitive-files - IP: 34.64.201.168 - time="2026-06-15T09:59:38+02:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 34.64.201.168 - time="2026-06-15T09:59:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.64.201.168 (KR/396982) : 4h ban on Ip 34.64.201.168" module=db show less	Web App Attack
🇬🇧 consul.to	2026-06-15 07:55:26 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 cmbplf	2026-06-15 07:31:16 (6 days ago)	3.490 requests with url.path .git/	Brute-Force Bad Web Bot
🇩🇪 Viveronese	2026-06-15 07:14:17 (6 days ago)	HTTP vulnerability scanning	Web App Attack
🇪🇸 pipeline.es	2026-06-15 07:10:09 (6 days ago)	Web scanning / probing for vulnerable paths \| URL: /htdocs/.git/config \| Evidence: altovolta.es 34.6 ... show more Web scanning / probing for vulnerable paths \| URL: /htdocs/.git/config \| Evidence: altovolta.es 34.64.201.168 - - [15/Jun/2026:09:09:08 +0200] \"GET /htdocs/.git/config HTTP/1.1\" 404 216 \"-\" \"ELinks/0.12~pre5-4\" GEOIP_COUNTRY_CODE=KR \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: KR show less	Port Scan Web App Attack
🇫🇷 pm33	2026-06-15 06:37:32 (1 week ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 mnsf	2026-06-15 02:06:32 (1 week ago)	Scanning/Probing (30)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 01:45:52 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.64.201.168 (168.201.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.201.168 (168.201.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:45:47.631062 2026] [security2:error] [pid 31139:tid 31139] [client 34.64.201.168:59300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinareemagazine.thephysicsroom.com"] [uri "/api/.git/config"] [unique_id "ai9ZS7dL7qn5hZ-DukG3vwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-06-15 01:15:09 (1 week ago)		Web App Attack
🇫🇮 as211431.net	2026-06-15 00:44:12 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from KR. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from KR. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /site/.git/config UA: Mozilla/5.0 (Linux; U; Android 1.6; en-us; HTC_TATTOO_A3288 Build/DRC79) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-14 23:16:57 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.64.201.168 (168.201.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.201.168 (168.201.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:16:50.622621 2026] [security2:error] [pid 24787:tid 24787] [client 34.64.201.168:48998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toomuchcaffeine.net"] [uri "/src/.git/config"] [unique_id "ai82YrSYzIDsxoYL5SE8OwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-06-14 22:27:30 (1 week ago)	common Web Exploits being scanned	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.180.29.77

🇺🇸 195.184.76.59

🇭🇳 181.115.62.191

🇮🇩 139.255.254.163

🇫🇷 91.231.89.240

🇫🇷 91.231.89.84

🇫🇷 91.231.89.81

🇳🇱 89.248.168.36

🇲🇾 47.250.92.46

🇺🇸 31.220.50.227

🇺🇸 20.169.48.140

🇰🇷 221.167.21.148

🇺🇸 216.218.206.68

🇺🇸 195.184.76.167

🇺🇸 195.184.76.58

🇱🇧 178.135.14.198

🇳🇱 176.65.149.212

🇩🇪 167.94.146.64

🇷🇺 154.83.196.237

🇧🇷 138.255.110.125