JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.74.104.237

Activity Trending Down

Abuse Confidence Score

19% Caution

34 reports

23 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 237.104.74.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

34 from 23 distinct reporters

First reported

August 27th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2 🇩🇪 Germany 1 🇺🇸 United States of America 1

Most common categories Brute-Force 2 Web App Attack 2 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-03 01:39:00 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.74.104.237 (237.104.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:38:56.331811 2026] [security2:error] [pid 1332:tid 1 ... show more (mod_security) mod_security (id:210492) triggered by 34.74.104.237 (237.104.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:38:56.331811 2026] [security2:error] [pid 1332:tid 1332] [client 34.74.104.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mail-pmg.com"] [uri "/app/.git/config"] [unique_id "apjPsGiqrz_evtnJUMNoUgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-09-03 00:21:42 (1 month ago)	34.74.104.237 - - [03/Sep/2026:02:21:41 +0200] "GET /var/www/.git/config HTTP/1.1" 502 150 "-" "crusader-worker/1.0" ...	Brute-Force Web App Attack
🇬🇧 WebNiraj	2026-09-02 13:40:11 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 34.74.104.237 (US/United States/237.104.74.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]	Brute-Force
🇬🇧 consul.to	2026-09-02 07:35:48 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 FD-IX	2026-09-02 06:14:37 (1 month ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-02 05:31:41 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-09-02 05:13:27 (1 month ago)	285 attacks on password grabbing URLs, deployment descriptor URLs, site downloads, config grabbing URLs, too many concurrent requests, PHP URLs, config grabbing URLs (type 2): GET /.vscode/sftp.json HTTP/1.1 GET /WEB-INF/web.xml HTTP/1.1 GET /www.zip ... show more 285 attacks on password grabbing URLs, deployment descriptor URLs, site downloads, config grabbing URLs, too many concurrent requests, PHP URLs, config grabbing URLs (type 2): GET /.vscode/sftp.json HTTP/1.1 GET /WEB-INF/web.xml HTTP/1.1 GET /www.zip HTTP/1.1 GET /.htaccess HTTP/1.1 GET /service-account.json HTTP/1.1 GET /wp-config.php.old HTTP/1.1 GET /src/settings.json HTTP/1.1 show less	Hacking Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-02 01:53:03 (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-09-01 21:21:41 (1 month ago)	Try to access /app/.git/config	Web App Attack
🇸🇪 vaia.cloud	2026-09-01 21:20:01 (1 month ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 13:29:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.74.104.237 (237.104.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:29:09.254246 2026] [security2:error] [pid 9800:tid 9 ... show more (mod_security) mod_security (id:210492) triggered by 34.74.104.237 (237.104.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:29:09.254246 2026] [security2:error] [pid 9800:tid 9800] [client 34.74.104.237:48650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bank.gisur.com"] [uri "/wordpress/.git/config"] [unique_id "apbTJUckCliDyJBOEmXtSwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-01 09:55:50 (1 month ago)	[TueSep0111:55:45.3987702026][security2:error][pid2777517:tid2777786][client34.74.104.237:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"96072 ... show more [TueSep0111:55:45.3987702026][security2:error][pid2777517:tid2777786][client34.74.104.237:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webdisk.garnimolinazzo.ch\"][uri\"/api/.git/config\"][unique_id\"apahIZkbfAsY2XXrPhWo6QAAAZc\"] show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-09-01 09:50:48 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 09:41:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.74.104.237 (237.104.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:41:36.930331 2026] [security2:error] [pid 31657:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.74.104.237 (237.104.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:41:36.930331 2026] [security2:error] [pid 31657:tid 31657] [client 34.74.104.237:34200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewaywework.ficklepassionproductions.com"] [uri "/wordpress/.git/config"] [unique_id "apad0AuhIYOX59iDr2U2EgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-09-01 08:55:35 (1 month ago)	High-confidence malicious configuration/VCS probe	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 2a13:f45:455:a43e:48b0:9101:a891:b393

🇰🇷 220.116.117.213

🇺🇸 165.227.82.15

🇱🇧 77.235.139.3

🇺🇸 205.210.31.97

🇮🇩 202.158.36.50

🇳🇱 200.138.46.9

🇰🇷 182.161.152.113

🇨🇳 180.153.236.28

🇦🇷 179.238.95.146

🇺🇸 172.232.184.232

🇦🇺 158.178.141.16

🇭🇰 152.32.191.226

🇸🇬 142.248.9.239

🇨🇳 118.145.239.129

🇻🇳 116.98.248.190

🇺🇸 104.223.15.67

🇵🇹 94.61.80.129

🇳🇱 77.67.26.201

🇳🇱 45.148.10.121