JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.106.188.142

Activity Trending Down

Abuse Confidence Score

44% Elevated

48 reports

44 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 142.188.106.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Salt Lake City, Utah

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

48 from 44 distinct reporters

First reported

September 10th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇩🇪 Germany 9 🇫🇷 France 5

Most common categories Web App Attack 33 Brute-Force 20 Bad Web Bot 15 Hacking 9 Port Scan 4

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-13 14:31:00 (1 month ago)		Brute-Force Web App Attack Hacking
🇮🇩 PENJAGA.AUM	2026-09-11 12:08:18 (1 month ago)	34.106.188.142 - Attack: ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927)	Web App Attack SQL Injection Spoofing
🇮🇳 evicky2002	2026-09-11 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 dtorrer	2026-09-11 05:36:33 (1 month ago)	General vulnerability scan.	Port Scan
🇨🇦 Mediashaker	2026-09-11 05:28:10 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.106.188.142 (US/United States/142.188.106.34.bc.googleusercontent.com)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-11 04:44:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.106.188.142 (142.188.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 00:43:57.257845 2026] [security2:error] [pid 19182:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.106.188.142 (142.188.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 00:43:57.257845 2026] [security2:error] [pid 19182:tid 19193] [client 34.106.188.142:49790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myrtlebeachdiet.com"] [uri "/.htpasswd"] [unique_id "aqOHDT16FaP53i3hIAqbQAAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-09-11 04:33:37 (1 month ago)	Multiple WAF Violations	Web App Attack
🇸🇬 naveeddaros	2026-09-11 04:28:20 (1 month ago)	HTTP Flood DDoS attack detected	Brute-Force Bad Web Bot
🇸🇬 Cloudkul Cloudkul	2026-09-11 04:16:04 (1 month ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.	Brute-Force Web App Attack
🇩🇪 maxpower	2026-09-11 03:32:09 (1 month ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.106.188.142 (US/United States/142.188.106.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.106.188.142 - - [11/Sep/20 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.106.188.142 (US/United States/142.188.106.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.106.188.142 - - [11/Sep/2026:05:32:06 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0" 200 4842 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "34.106.188.142" host=masterlabvideoproduzioni.it show less	Port Scan
🇺🇸 TPI-Abuse	2026-09-11 03:21:15 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 34.106.188.142 (142.188.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:21:10.117906 2026] [security2:error] [pid 31386:ti ... show more (mod_security) mod_security (id:210730) triggered by 34.106.188.142 (142.188.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:21:10.117906 2026] [security2:error] [pid 31386:tid 31386] [client 34.106.188.142:33312] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mahoninginn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mahoninginn.com"] [uri "/z9x8c7v6b5-debug-trigger-mahoninginn.com"] [unique_id "aqNzpti_H8JaJ-J7XHFY6wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-11 03:01:02 (1 month ago)	Bot / scanning and/or hacking attempts: POST /api/graphql HTTP/2.0, GET /admin/.env HTTP/2.0, POST /v1/graphql HTTP/2.0, [42/41] done: stream 81, GET /.npmrc, GET /.gitlab-ci.yml HTTP/2.0, GET /Events HTTP/2.0, GET /bestanden/cache/js.41a72d4c416eef7 ... show more Bot / scanning and/or hacking attempts: POST /api/graphql HTTP/2.0, GET /admin/.env HTTP/2.0, POST /v1/graphql HTTP/2.0, [42/41] done: stream 81, GET /.npmrc, GET /.gitlab-ci.yml HTTP/2.0, GET /Events HTTP/2.0, GET /bestanden/cache/js.41a72d4c416eef7f45aae77b7af7f728.js HTT, POST /graphql HTTP/2.0, POST /api HTTP/2.0, GET /Subscribe HTTP/2.0, GET /serviceAccountKey.json HTTP/2.0, [36/36] read: stream 0, , [49/49] read: stream 0, , GET /Magazine HTTP/2.0, GET /secrets.yml HTTP/2.0, [12/12] read: stream 0, show less	Hacking Web App Attack
🇺🇸 oralunal	2026-09-11 01:57:34 (1 month ago)	IP banned by Fail2Ban in jail its-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-11 01:57:11 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 debestelapp	2026-09-11 01:15:14 (1 month ago)		Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 128.185.64.249

🇪🇨 45.225.47.25

🇻🇳 222.255.174.162

🇲🇽 189.197.117.215

🇳🇱 185.136.15.82

🇫🇮 157.22.72.201

🇺🇸 130.49.8.238

🇮🇩 103.255.109.151

🇳🇱 86.38.187.64

🇺🇸 74.7.227.14

🇸🇬 51.79.212.48

🇩🇪 43.228.157.57

🇺🇸 20.106.51.109

🇺🇸 20.65.144.98

🇺🇸 193.202.80.160

🇫🇷 193.151.190.32

🇨🇱 190.22.190.209

🇵🇾 186.17.15.62

🇹🇷 185.28.61.19

🇨🇳 182.119.231.84