JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.97.147.20

34.97.147.20 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	20.147.97.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.97.147.20

Whois 34.97.147.20

IP Abuse Reports for 34.97.147.20:

This IP address has been reported a total of 26 times from 21 distinct sources. 34.97.147.20 was first reported on September 10th 2026, and the most recent report was 36 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-09-11 16:55:31 (36 minutes ago)	(modsecurity) srv102 ModSecurity 34.97.147.20 (JP/Japan/20.147.97.34.bc.googleusercontent.com): 30 i ... show more (modsecurity) srv102 ModSecurity 34.97.147.20 (JP/Japan/20.147.97.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇰 toolbit.online	2026-09-11 14:27:05 (3 hours ago)	CrowdSec detected automated probing for exposed files / admin panels from this IP (6 matching events ... show more CrowdSec detected automated probing for exposed files / admin panels from this IP (6 matching events in our own server logs; scenario "http-sensitive-files"). Behavioural detection, auto-banned at the firewall. show less	Bad Web Bot Web App Attack
Anonymous	2026-09-11 13:57:02 (3 hours ago)	Bot / scanning and/or hacking attempts: POST / HTTP/1.1, GET /.env.staging HTTP/1.1, GET /opt/.env H ... show more Bot / scanning and/or hacking attempts: POST / HTTP/1.1, GET /.env.staging HTTP/1.1, GET /opt/.env HTTP/1.1, GET /joomla/.env HTTP/1.1, GET /shopify/.env HTTP/1.1, GET /drupal/.env HTTP/1.1, GET /symfony/.env HTTP/1.1, GET /build/.env HTTP/1.1, GET /html/.env HTTP/1.1, GET /cms/.env HTTP/1.1, GET /wordpress/.env HTTP/1.1, GET /laravel/.env HTTP/1.1, GET /magento/.env HTTP/1.1, GET /wp/.env HTTP/1.1, GET /.env.production HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 10:49:26 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.147.20 (20.147.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.147.20 (20.147.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 06:49:19.293563 2026] [security2:error] [pid 13971:tid 13971] [client 34.97.147.20:57104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.btccasting.com.bamedica.com"] [uri "/.git/config"] [unique_id "aqPcr-cch-UkNA_Jz5g90AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-09-11 09:26:31 (8 hours ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s	Web App Attack
🇫🇷 Octopuce	2026-09-11 07:38:59 (9 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇳🇱 Site.eu	2026-09-11 06:33:36 (10 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 wpadm4	2026-09-11 06:05:38 (11 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 05:51:18 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.147.20 (20.147.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.147.20 (20.147.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 01:51:11.505733 2026] [security2:error] [pid 8558:tid 8558] [client 34.97.147.20:35158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bryteandbroderick.webserviceswest.com"] [uri "/.git/config"] [unique_id "aqOWz_ELgFhUg-rAvnrM6QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-09-11 05:05:00 (12 hours ago)	21.915 requests in 1 hour (3mos3d17h)	Brute-Force Bad Web Bot
🇫🇮 YF	2026-09-11 04:00:49 (13 hours ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇿🇦 conure.sh	2026-09-11 03:28:52 (14 hours ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 2s	Web App Attack
🇩🇪 4server	2026-09-11 02:34:35 (14 hours ago)	[FriSep1104:34:29.5043892026][security2:error][pid1101282:tid1101303][client34.97.147.20:0]ModSecuri ... show more [FriSep1104:34:29.5043892026][security2:error][pid1101282:tid1101303][client34.97.147.20:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.brunocampagna.com.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"aqNoteqGzG3ddR1NlgkZJgAAAEQ\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 marten_o	2026-09-10 22:37:31 (18 hours ago)	34.97.147.20 - - [11/Sep/2026:00:37:31 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 576 "-" "Mozilla/5 ... show more 34.97.147.20 - - [11/Sep/2026:00:37:31 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 392 774 ... show less	Web App Attack
Anonymous	2026-09-10 17:13:09 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.222

🇺🇸 147.185.132.83

🇧🇬 109.160.32.38

🇻🇳 101.99.37.80

🇨🇳 101.96.193.131

🇳🇱 93.123.109.105

🇨🇳 43.247.250.115

🇸🇬 34.124.210.175

🇺🇸 34.20.132.206

🇷🇴 2.57.122.209

🇭🇰 203.198.173.137

🇺🇸 179.61.137.164

🇧🇬 109.160.32.14

🇺🇦 94.131.240.137

🇫🇷 85.217.140.47

🇲🇽 201.141.111.158

🇮🇩 182.10.161.69

🇧🇷 177.185.220.56

🇺🇦 176.105.197.211

🇺🇸 108.175.1.72