JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.154.145.18

104.154.145.18 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 80%: ?

80%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	18.145.154.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.154.145.18

Whois 104.154.145.18

IP Abuse Reports for 104.154.145.18:

This IP address has been reported a total of 14 times from 13 distinct sources. 104.154.145.18 was first reported on June 13th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-13 22:00:16 (2 days ago)	Auto-ban: >3000 req/min op 2026-06-13	Web App Attack SSH Hacking
🇺🇸 WellSpring	2026-06-13 17:30:16 (2 days ago)	generic probe on 651.today/api/config.php — WellSpr.ing/NetSentinel civic-AI security layer	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-13 17:23:51 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 104.154.145.18 (18.145.154.104.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 104.154.145.18 (18.145.154.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:23:44.205144 2026] [security2:error] [pid 22657:tid 22657] [client 104.154.145.18:41242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|floridausa.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "floridausa.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai2SILF_RK5r9hsJOixuHwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 aks4226	2026-06-13 16:20:58 (2 days ago)	Bot search, attacking common web applications.	Web App Attack
🇺🇸 mnsf	2026-06-13 16:05:33 (2 days ago)	Abuse Detected (20)	Brute-Force Web App Attack
🇩🇪 updown.io	2026-06-13 14:24:39 (2 days ago)	{"level":"info","ts":1781360678.2971885,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781360678.2971885,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"104.154.145.18","remote_port":"45418","client_ip":"104.154.145.18","proto":"HTTP/1.1","method":"GET","host":"fedcbaupdate.yupdate.qpsrqponmlkjilkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/v1/actuator/configprops","headers":{"User-Agent":["Mozilla/5.0 (iPhone; CPU iPhone OS 11_2_6 like Mac OS X) AppleWebKit/604.5.6 (KHTML, like Gecko) Version/11.0 Mobile/15D100 Safari/604.1"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000096884,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://fedcbaupdate.yupdate.qpsrqponmlkjilkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/v1/actuator/configprops"],"Content-Type":[],"Server":["Caddy"]}} {"level":"info","ts":1781360678.3011575,"logger":"http.log.access.log1","msg":"handled ... show less	DDoS Attack Web App Attack
🇫🇷 masterguru	2026-06-13 13:16:24 (2 days ago)	Restricted File Access Attempt. Matched phrase ".aws/" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇪🇸 pipeline.es	2026-06-13 11:34:53 (2 days ago)	Web scanning / probing for vulnerable paths \| URL: /.npmrc \| Evidence: altovolta.es 104.154.145.18 - ... show more Web scanning / probing for vulnerable paths \| URL: /.npmrc \| Evidence: altovolta.es 104.154.145.18 - - [13/Jun/2026:13:34:12 +0200] \"GET /.npmrc HTTP/1.1\" 404 204 \"-\" \"Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/604.1.34 (KHTML, like Gecko) CriOS/67.0.3396.69 Mobile/16A366 Safari/604.1\" GEOIP_COUNTRY_CODE=US \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: US show less	Port Scan Web App Attack
🇳🇱 Site.eu	2026-06-13 11:11:37 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 wlt-blocker	2026-06-13 10:44:45 (2 days ago)	Unauthorized access to webpage admin	Web App Attack
🇳🇱 Mangelot Hosting	2026-06-13 08:15:13 (2 days ago)	(modsecurity) srv103 ModSecurity 104.154.145.18 (US/United States/18.145.154.104.bc.googleuserconten ... show more (modsecurity) srv103 ModSecurity 104.154.145.18 (US/United States/18.145.154.104.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 mnsf	2026-06-13 07:07:47 (2 days ago)	Abuse Detected (14)	Brute-Force Web App Attack
🇮🇹 VHosting	2026-06-13 03:15:04 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-13 03:13:06 (3 days ago)	categories: DDoS Attack	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:532:1000:3d05:c6c6:2d40:4366

🇺🇸 136.144.43.225

🇺🇸 64.227.59.76

🇳🇱 45.148.10.183

🇧🇪 34.156.32.37

🇪🇹 196.189.237.172

🇲🇽 186.96.158.180

🇺🇾 186.54.176.92

🇫🇮 147.185.133.248

🇺🇸 146.88.241.138

🇳🇱 91.92.40.4

🇺🇸 74.114.29.220

🇺🇸 47.234.138.49

🇸🇬 47.79.6.136

🇳🇱 45.148.10.152

🇺🇸 31.56.178.132

🇬🇧 217.154.61.249

🇺🇸 216.239.34.223

🇺🇸 216.25.89.96

🇻🇳 103.176.24.57