104.154.31.186

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
78% Critical
20 reports
17 reporters · latest 8 minutes ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
186.31.154.104.bc.googleusercontent.com
Domain Name
google.com
Country
🇺🇸 United States of America
City
Council Bluffs, Iowa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇺🇸 United States of America 5 🇫🇷 France 3
Most common categories Port Scan 11 Web App Attack 7 Hacking 6 Bad Web Bot 2 Brute-Force 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 joharikop
Malformed HTTP request or known bad user agent detected by fail2ban on nginx reverse proxy
Bad Web Bot
🇺🇸 legionMCCXV
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
Port Scan Hacking
🇫🇷 peter.pann
Port scan: 90 blocked connection attempts to ports 1080,1081,1234,1337,3000,3128,4000,5000,8000,8080 (dropped by our geo-firewall).
Port Scan
🇫🇷 abuseipdb_reporter
Web App Attack
🇯🇵 ZEROVOX
CrowdSec: crowdsecurity/http-open-proxy detected
Web App Attack
🇩🇪 xavier-momain.eu
CrowdSec ban — scenario: crowdsecurity/iptables-scan-multi_ports | report #2
Port Scan
🇱🇻 GooddayGroup
Malicious automated scanning and unauthorized access attempts.
Hacking Brute-Force
🇩🇪 xavier-momain.eu
CrowdSec ban — scenario: xavier/nftables-scan-any-port
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (3 bytes of payload); 11434 [6], 8000 [5], 1234 [5], 20128 [5], 30000 [5], 20130 [5] TCP
Port Scan
🇳🇱 Ilop
[v6-22] Firewall dropped 28 unsolicited packet(s) proto=tcp to port(s) 80,443 from 104.154.31.186 — WAN scan (automated sensor)
Port Scan
🇩🇪 acadeova
Blocked by UFW on vps4 [3000/tcp] Source port: 60800 TTL: 60 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇯🇵 Execoop
LLM Inference API Requests (Ollama) (observed): 2 HTTP
Hacking Web App Attack
🇺🇸 HamSammich
Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-11-06T11:11Z).
Port Scan Web App Attack
Anonymous
Unauthorized access (8080/tcp/http-alt)
Port Scan
🇩🇪 weiss
CrowdSec blocked IP (crowdsecurity/http-open-proxy) on edge-lon
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 212.119.46.76
🇸🇬 194.5.82.134
🇺🇸 188.212.138.187
🇬🇧 185.195.232.135
🇬🇧 185.170.110.100
🇨🇳 117.71.54.107
🇫🇷 104.164.235.41
🇳🇱 69.33.65.100
🇵🇱 54.38.52.18
🇳🇱 51.158.206.96
🇺🇸 24.199.92.11
🇵🇱 23.230.91.242
🇷🇴 2.57.122.168
🇨🇦 184.147.71.131
🇺🇸 157.22.73.156
🇺🇸 147.185.132.99
🇰🇿 91.147.100.200
🇺🇸 69.116.211.133
🇺🇸 65.49.20.120
🇳🇱 45.148.10.151
feedback