JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.91.5.20

34.91.5.20 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 97%: ?

97%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	20.5.91.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.91.5.20

Whois 34.91.5.20

IP Abuse Reports for 34.91.5.20:

This IP address has been reported a total of 23 times from 17 distinct sources. 34.91.5.20 was first reported on August 31st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-02 22:00:53 (5 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01. show less	Web App Attack SSH Hacking
🇬🇧 consul.to	2026-09-02 08:25:09 (18 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 06:10:51 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com ... show more (mod_security) mod_security (id:210492) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:10:46.572050 2026] [security2:error] [pid 12530:tid 12530] [client 34.91.5.20:49718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.portelizabeth.jbaycabs.com"] [uri "/htdocs/.git/config"] [unique_id "ape95ln3z1qpYUD4HgONSwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-02 05:34:46 (21 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
Anonymous	2026-09-02 05:28:06 (21 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 NihiliousMonk	2026-09-02 05:25:27 (21 hours ago)	Fail2Ban report from jail npm-scanners	Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-02 04:06:14 (23 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com ... show more (mod_security) mod_security (id:949110) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-02 03:23:05 (1 day ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Stara	2026-09-02 02:25:30 (1 day ago)	ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)	Brute-Force SSH Web App Attack
🇩🇪 FD-IX	2026-09-02 02:11:55 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-02 01:17:07 (1 day ago)	[WedSep0203:17:01.7016462026][security2:error][pid1511625:tid1511815][client34.91.5.20:0]ModSecurity ... show more [WedSep0203:17:01.7016462026][security2:error][pid1511625:tid1511815][client34.91.5.20:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"teatrotangram.ch.81-17-25-250.cpanel.site\"][uri\"/backend/.git/config\"][unique_id\"apd5DZ7LXgDa2fD0ZAlOFQAAAQU\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 00:51:03 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com ... show more (mod_security) mod_security (id:210492) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:50:56.782234 2026] [security2:error] [pid 11553:tid 11553] [client 34.91.5.20:34624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.bikiniadvice.com"] [uri "/www/.git/config"] [unique_id "apdy8G9pJoLE6Y1h2aCMWQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 00:23:53 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com ... show more (mod_security) mod_security (id:210492) triggered by 34.91.5.20 (20.5.91.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:23:45.801330 2026] [security2:error] [pid 21597:tid 21597] [client 34.91.5.20:51958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gcdata.wisdomwfm.com"] [uri "/backend/.git/config"] [unique_id "apdskbJ9IqsGYrBxR87X9wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-01 21:00:01 (1 day ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-01 18:25:03 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.191

🇦🇷 181.46.66.120

🇨🇳 120.48.100.73

🇧🇪 34.156.54.97

🇩🇴 200.124.69.162

🇭🇰 199.45.154.185

🇺🇸 185.81.144.147

🇷🇺 178.169.109.74

🇺🇸 172.206.227.114

🇹🇭 165.101.65.130

🇺🇸 136.107.72.191

🇷🇺 95.191.224.94

🇫🇷 91.231.89.6

🇸🇬 84.75.155.192

🇱🇹 77.90.185.16

🇺🇸 71.156.31.182

🇺🇸 66.132.172.238

🇺🇸 47.149.190.119

🇧🇷 45.205.1.247

🇨🇳 42.238.68.125