JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.197.34.194

104.197.34.194 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	194.34.197.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.197.34.194

Whois 104.197.34.194

IP Abuse Reports for 104.197.34.194:

This IP address has been reported a total of 33 times from 22 distinct sources. 104.197.34.194 was first reported on August 27th 2026, and the most recent report was 34 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-02 10:18:44 (34 minutes ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.space \| URI: /api/.git/config \| UA: crusader-worker/1.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇧🇾 lns.bz	2026-09-02 06:57:39 (3 hours ago)	Too many 404 requests [BY]	Web App Attack
🇩🇪 FD-IX	2026-09-02 06:55:08 (3 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 06:08:25 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.197.34.194 (194.34.197.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.197.34.194 (194.34.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:08:18.076909 2026] [security2:error] [pid 933:tid 933] [client 104.197.34.194:44528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lazymanvegan.com"] [uri "/api/.git/config"] [unique_id "ape9Upy7bB7cigl5b7nDngAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 JustMeHere	2026-09-02 05:14:42 (5 hours ago)	[Wed Sep 02 01:14:38.093652 2026] [security2:error] [pid 1342:tid 1394] [client 104.197.34.194:58010 ... show more [Wed Sep 02 01:14:38.093652 2026] [security2:error] [pid 1342:tid 1394] [client 104.197.34.194:58010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mail.yorknation.com"] [uri "/api/.git/config"] [unique_id "apewvmN-eyWaC7MkSi27hQAAANg"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:57:42 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.197.34.194 (194.34.197.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.197.34.194 (194.34.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:57:34.436406 2026] [security2:error] [pid 26011:tid 26050] [client 104.197.34.194:57470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.seasonsgreeters.net"] [uri "/backend/.git/config"] [unique_id "apesvjrXzCN6mp0T3myO_gAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:36:24 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.197.34.194 (194.34.197.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.197.34.194 (194.34.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:36:20.258615 2026] [security2:error] [pid 31586:tid 31586] [client 104.197.34.194:39972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail1.semisysteme.com"] [uri "/app/.git/config"] [unique_id "apenxGuwK-TPQHEwUTXIJQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-09-02 04:05:14 (6 hours ago)	Too many Status 40X (12) Scanning/Probing (24)	Brute-Force Web App Attack
🇩🇪 Philister11	2026-09-02 02:19:01 (8 hours ago)	CrowdSec: crowdsecurity/http-probing (US/AS396982)	Web App Attack Hacking
🇵🇱 Budyn	2026-09-02 00:24:08 (10 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.space \| URI: /.git/config \| UA: crusader-worker/1.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
Anonymous	2026-09-01 22:58:53 (11 hours ago)	Detected by CrowdSec: crowdsecurity/http-sensitive-files	Web App Attack
Anonymous	2026-09-01 19:18:51 (15 hours ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-09-01 14:08:01 (20 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-09-01 13:07:02 (21 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 11:46:27 (23 hours ago)	(mod_security) mod_security (id:949110) triggered by 104.197.34.194 (US/United States/194.34.197.104 ... show more (mod_security) mod_security (id:949110) triggered by 104.197.34.194 (US/United States/194.34.197.104.bc.googleusercontent.com): N in the last X secs show less	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 2a01:111:f403:dc10::

🇺🇸 172.174.236.56

🇺🇸 136.107.75.68

🇺🇸 91.230.168.28

🇫🇷 91.196.152.223

🇫🇷 51.210.100.146

🇩🇪 31.56.24.50

🇺🇸 2604:a880:400:d1:0:4:e8b9:b001

🇧🇷 201.28.176.31

🇺🇸 195.184.76.92

🇳🇱 176.65.148.29

🇺🇸 172.253.198.153

🇺🇸 154.198.19.218

🇺🇸 136.65.121.252

🇺🇸 98.200.32.209

🇵🇱 83.9.231.17

🇳🇱 45.142.193.164

🇷🇴 2.57.122.238

🇻🇪 186.96.67.8

🇨🇳 183.198.125.150