JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.104.129.136

Neutral Activity

Abuse Confidence Score

0% Low Risk

35 reports

25 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 136.129.104.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇯🇵 Japan
City: Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

35 from 25 distinct reporters

First reported

September 4th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 1

Most common categories Email Spam 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cloud86 B.V.	2026-09-26 21:23:05 UTC · (1 month ago)	categories: Email Spam	Email Spam
🇩🇪 ger-stg-sifi1	2026-09-06 03:20:21 UTC · (2 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 e.fierstra	2026-09-06 01:26:39 UTC · (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-06 01:19:55 UTC · (2 months ago)	Multiple WAF Violations	Web App Attack
🇫🇮 JLKnoch Software GmbH	2026-09-05 06:54:20 UTC · (2 months ago)	CrowdSec crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 14:12:04 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:11:58.723715 2026] [security2:error] [pid 25377:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:11:58.723715 2026] [security2:error] [pid 25377:tid 25377] [client 34.104.129.136:53924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sanesoftware.com"] [uri "/.env"] [unique_id "aprRrlWVPcFc4CQEp9_XAQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 13:45:04 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:44:56.912360 2026] [security2:error] [pid 25202:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:44:56.912360 2026] [security2:error] [pid 25202:tid 25202] [client 34.104.129.136:57342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agirlwithaguitar.com"] [uri "/.env.old"] [unique_id "aprLWEkMpJoQk3IEWx9hfwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-04 13:21:58 UTC · (2 months ago)	[04/Sep/2026:16:21:58 +0300] -- 34.104.129.136 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-config.php~ HTTP/1.1	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 12:57:17 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 08:57:09.993093 2026] [security2:error] [pid 22967:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 08:57:09.993093 2026] [security2:error] [pid 22967:tid 22967] [client 34.104.129.136:57916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mayiasteadman.com"] [uri "/.env"] [unique_id "aprAJYz4JodT6uzrgjJp4QAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-09-04 12:32:10 UTC · (2 months ago)	Wordpress vulnerability scanning	Web App Attack
🇩🇪 yitzhaq	2026-09-04 12:26:37 UTC · (2 months ago)	34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4422 "-" "crusader-worker/1.0" 34.104.129.136 - - ... show more 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4422 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /actuator/configprops HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /.env.local HTTP/1.1" 404 4422 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /.env.bak HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /.env.prod HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /wp-config.php.swp HTTP/1.1" 404 4420 "-" "crusader-worker/1.0" 34.104.129.136 - - [04/Sep/2026:14:26:34 +0200] "GET /actuator/env HTTP/1.1" 404 show less	Web App Attack Brute-Force
Anonymous	2026-09-04 11:54:50 UTC · (2 months ago)	[server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/env \| /.env.local \| /.env.prod	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 11:51:36 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:51:30.407311 2026] [security2:error] [pid 22137:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.104.129.136 (136.129.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:51:30.407311 2026] [security2:error] [pid 22137:tid 22137] [client 34.104.129.136:52460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.allautousa.com"] [uri "/.env.production"] [unique_id "apqwwvIwo1WMEa4Neqql2AAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-09-04 11:30:21 UTC · (2 months ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-iad5-2) show less	Hacking
Anonymous	2026-09-04 11:00:02 UTC · (2 months ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 179.107.214.252

🇺🇸 147.185.132.188

🇫🇷 141.101.95.74

🇺🇦 134.249.8.68

🇧🇪 84.199.12.218

🇺🇸 70.167.233.130

🇷🇴 2.57.121.25

🇩🇪 194.88.98.121

🇧🇷 186.238.89.142

🇺🇸 144.172.98.45

🇻🇳 117.2.125.84

🇳🇱 45.148.10.141

🇧🇬 213.183.62.133

🇮🇳 152.32.156.138

🇵🇱 89.25.194.37

🇺🇸 50.84.211.204

🇹🇼 34.81.187.195

🇲🇿 197.219.208.58

🇸🇬 165.22.105.175

🇰🇷 119.28.239.85