JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.154.74.212

104.154.74.212 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	212.74.154.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.154.74.212

Whois 104.154.74.212

IP Abuse Reports for 104.154.74.212:

This IP address has been reported a total of 49 times from 41 distinct sources. 104.154.74.212 was first reported on March 6th 2026, and the most recent report was 55 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-28 22:04:18 (55 minutes ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27. show less	Web App Attack SSH Hacking
🇫🇮 paissangroup	2026-08-28 21:52:03 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇳🇱 e.fierstra	2026-08-28 21:38:05 (1 hour ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-08-28 21:23:56 (1 hour ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 rollenspiel.network	2026-08-28 18:50:22 (4 hours ago)	CrowdSec detection: crowdsecurity/http-sensitive-files	Web App Attack
🇫🇮 as211431.net	2026-08-28 17:00:32 (5 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php~ UA: crusader-worker/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 WizardsToolkit	2026-08-28 16:37:38 (6 hours ago)	attempted to access /storage/logs/laravel.log	Web App Attack
🇩🇪 LRob	2026-08-28 16:21:48 (6 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env.save (+12 more) \| 2026-08-28 16:21 UTC show less	Hacking Web App Attack
🇮🇩 Burayot	2026-08-28 16:15:40 (6 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.154.74.212 (US/United States/212 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.154.74.212 (US/United States/212.74.154.104.bc.googleusercontent.com): 2 in the last 3600 secs show less	Web App Attack
🇱🇹 NotACaptcha	2026-08-28 16:03:07 (6 hours ago)	webserver:443 [28/Aug/2026] "GET /wp-config.php.swp HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" we ... show more webserver:443 [28/Aug/2026] "GET /wp-config.php.swp HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /.env.old HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /.env.dev HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /.env.bak HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /wp-config.php~ HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /wp-config.php.bak HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /.env HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /.env.prod HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /storage/logs/laravel.log HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /.env.backup HTTP/1.1" 404 5717 "-" "crusader-worker/1.0" webserver:443 [28/Aug/2026] "GET /crusader-404-probe HTTP/1.1" 404 57... show less	Web App Attack
Anonymous	2026-08-28 15:35:04 (7 hours ago)	suspicious request in access.log	Web App Attack
🇩🇪 pscriptos	2026-08-28 13:45:27 (9 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇨🇭 4server	2026-08-28 13:16:24 (9 hours ago)	[FriAug2815:16:21.7320272026][security2:error][pid1516854:tid1516993][client104.154.74.212:0]ModSecu ... show more [FriAug2815:16:21.7320272026][security2:error][pid1516854:tid1516993][client104.154.74.212:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.leonitraslochi.ch\"][uri\"/.env.local\"][unique_id\"apGKJUIc7JJpUySprjCkKwAAABA\"] show less	Hacking Web App Attack
🇮🇹 Inartis	2026-08-28 12:43:04 (10 hours ago)	104.154.74.212 - - [28/Aug/2026:14:43:02 +0200] "GET /.env.prod HTTP/1.1" 404 56291 "-" "crusader-wo ... show more 104.154.74.212 - - [28/Aug/2026:14:43:02 +0200] "GET /.env.prod HTTP/1.1" 404 56291 "-" "crusader-worker/1.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Progetto1	2026-08-28 11:26:01 (11 hours ago)	Detected via HAProxyScanner at 2026-08-28 11:26:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-08-28 11:26:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 161.189.161.206

🇭🇺 91.146.167.76

🇺🇸 172.234.218.87

🇧🇷 131.255.68.201

🇮🇳 122.163.121.233

🇨🇳 121.237.180.222

🇸🇪 88.80.20.49

🇷🇴 80.94.92.156

🇹🇷 46.2.155.90

🇩🇪 213.209.159.208

🇳🇱 174.138.12.72

🇮🇳 125.99.240.61

🇺🇸 66.132.195.95

🇵🇱 45.141.233.67

🇮🇹 31.177.41.98

🇪🇬 41.196.0.221

🇬🇧 34.153.151.169

🇧🇪 34.14.117.241

🇸🇦 2001:16a2:c062:fca5:1090:6925:a17e:55c3

🇺🇿 213.230.111.14