JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.65.203.55

Neutral Activity

Abuse Confidence Score

0% Low Risk

41 reports

24 reporters · latest 5 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 55.203.65.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇨🇭 Switzerland
City: Zurich, Zurich

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.65.203.55 has been reported 41 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

41 from 24 distinct reporters

First reported

May 10th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 excill	2026-05-20 03:17:20 UTC · (5 months ago)	Honeypot mesh observed 321 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
Anonymous	2026-05-19 15:11:55 UTC · (5 months ago)	[Tue May 19 17:11:51.050942 2026] [access_compat:error] [pid 469426:tid 469426] [client 34.65.203.55:41760] AH01797: client denied by server configuration: /var/www/html/.git [Tue May 19 17:11:55.158937 2026] [access_compat:error] [pid 469426:tid 469 ... show more [Tue May 19 17:11:51.050942 2026] [access_compat:error] [pid 469426:tid 469426] [client 34.65.203.55:41760] AH01797: client denied by server configuration: /var/www/html/.git [Tue May 19 17:11:55.158937 2026] [access_compat:error] [pid 469426:tid 469426] [client 34.65.203.55:55276] AH01797: client denied by server configuration: /var/www/html/.git ... show less	Bad Web Bot Web App Attack
🇫🇷 Flo Flo	2026-05-19 15:11:18 UTC · (5 months ago)	34.65.203.55 - - - [19/May/2026:17:11:18 +0200] "82.66.117.16" "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows CE; IEMobile 7.11)" 0.000 ...	Web App Attack
🇺🇸 Starburst SysOp Team	2026-05-19 14:54:44 UTC · (5 months ago)	(mod_security-custom) mod_security (id:210492) triggered by 34.65.203.55 (CH/Switzerland/Zurich/Zurich/55.203.65.34.bc.googleusercontent.com/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 3600 secs (0-srv1)	Hacking
🇩🇪 FeG Deutschland	2026-05-15 06:29:41 UTC · (5 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇳🇱 Mangelot Hosting	2026-05-15 04:35:45 UTC · (6 months ago)	(modsecurity) srv104 ModSecurity 34.65.203.55 (CH/Switzerland/55.203.65.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇯🇵 beon	2026-05-14 22:36:29 UTC · (6 months ago)	[DateTime=>2026-05-14T22:36:29Z to 2026-05-14T22:44:45Z (UTC)] , [HoneyPot_Hits=>280 times] , [HoneyPots=>/backup.zip, /backup.tar.gz, /backup.tgz, /backup.tar, /backup.tar.bz2, /backup.tar.xz and others] , [404targets=>/api.tgz, /api.tar.gz, /api.zi ... show more [DateTime=>2026-05-14T22:36:29Z to 2026-05-14T22:44:45Z (UTC)] , [HoneyPot_Hits=>280 times] , [HoneyPots=>/backup.zip, /backup.tar.gz, /backup.tgz, /backup.tar, /backup.tar.bz2, /backup.tar.xz and others] , [404targets=>/api.tgz, /api.tar.gz, /api.zip, /api.tar, /api.tar.bz2, /api.tar.xz and others] , [total_Hits=>1050 times] , [Keyword=>WordPress] show less	Bad Web Bot Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-14 14:05:58 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 34.65.203.55 (55.203.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 10:05:50.567263 2026] [security2:error] [pid 3922:tid 392 ... show more (mod_security) mod_security (id:210492) triggered by 34.65.203.55 (55.203.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 10:05:50.567263 2026] [security2:error] [pid 3922:tid 3922] [client 34.65.203.55:51464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.capitalcitysoul.com.calvaryshreveport.org"] [uri "/.env.zip"] [unique_id "agXWvoWKKnhV6gkv3LxjLwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-05-14 12:30:18 UTC · (6 months ago)	ModSecurity rule 949110 triggered on wp1. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
Anonymous	2026-05-14 12:14:00 UTC · (6 months ago)	Exceeded the maximum global requests per minute for crawlers or humans.	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-14 09:56:25 UTC · (6 months ago)	(PERMBLOCK) 34.65.203.55 (CH/Switzerland/55.203.65.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:	Port Scan
Anonymous	2026-05-14 08:20:47 UTC · (6 months ago)	(caddyscan) Scanner path probe from 34.65.203.55 (CH/Switzerland/55.203.65.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:08:20:42 ... show more (caddyscan) Scanner path probe from 34.65.203.55 (CH/Switzerland/55.203.65.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:08:20:42 +0000] "GET /.env.zip HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:08:20:43 +0000] "GET /.env.tar.gz HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:08:20:43 +0000] "GET /.env.tgz HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:08:20:44 +0000] "GET /.env.tar HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:08:20:44 +0000] "GET /.env.tar.bz2 HTTP/1.1" show less	Port Scan
🇳🇱 Site.eu	2026-05-14 07:04:01 UTC · (6 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-05-14 06:22:52 UTC · (6 months ago)	(mod_security) mod_security (id:210730) triggered by 34.65.203.55 (55.203.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 02:22:49.024929 2026] [security2:error] [pid 21523:tid 21 ... show more (mod_security) mod_security (id:210730) triggered by 34.65.203.55 (55.203.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 02:22:49.024929 2026] [security2:error] [pid 21523:tid 21523] [client 34.65.203.55:33382] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.vycestudiojuridico.tecnoconce.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vycestudiojuridico.tecnoconce.com"] [uri "/api.sql"] [unique_id "agVqORTmIzbW9Ce2y2frXgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-14 04:07:26 UTC · (6 months ago)	(caddyscan) Scanner path probe from 34.65.203.55 (CH/Switzerland/55.203.65.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:04:07:17 ... show more (caddyscan) Scanner path probe from 34.65.203.55 (CH/Switzerland/55.203.65.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:04:07:17 +0000] "GET /.env.zip HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:04:07:18 +0000] "GET /.env.tar.gz HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:04:07:19 +0000] "GET /.env.tgz HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:04:07:20 +0000] "GET /.env.tar HTTP/1.1" [REDACTED] 200 2627 34.65.203.55 - - [14/May/2026:04:07:21 +0000] "GET /.env.tar.bz2 HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.149.108

🇩🇪 157.22.47.94

🇨🇳 122.192.32.45

🇨🇳 119.98.12.242

🇰🇷 112.146.58.102

🇮🇳 92.4.87.225

🇳🇱 64.205.72.73

🇬🇧 57.129.136.58

🇺🇦 46.172.155.155

🇺🇸 45.135.1.247

🇻🇪 38.137.177.197

🇬🇧 35.203.210.85

🇺🇸 23.92.145.140

🇸🇪 217.211.237.213

🇧🇷 179.89.216.181

🇩🇪 118.193.58.20

🇨🇳 101.35.5.68

🇳🇱 45.86.200.84

🇬🇧 35.203.211.38

🇺🇸 14.102.58.31