JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.104.146.187

34.104.146.187 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 81%: ?

81%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	187.146.104.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.104.146.187

Whois 34.104.146.187

IP Abuse Reports for 34.104.146.187:

This IP address has been reported a total of 14 times from 14 distinct sources. 34.104.146.187 was first reported on June 13th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-15 22:05:53 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14. show less	Web App Attack SSH Hacking
🇫🇷 masterguru	2026-06-15 06:24:42 (4 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 onlyops.app	2026-06-15 06:00:06 (4 days ago)	Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-mods ... show more Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-modsecurity jail) \| onlyops.app show less	Exploited Host
🇺🇸 TPI-Abuse	2026-06-15 05:57:51 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.104.146.187 (187.146.104.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.104.146.187 (187.146.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:57:44.341529 2026] [security2:error] [pid 27101:tid 27213] [client 34.104.146.187:36814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ip.kd9uri.com"] [uri "/api/.env.backup"] [unique_id "ai-UWJT-J3ewNOsQIFu7jwAAAJU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-15 04:16:07 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-15 03:26:01 (4 days ago)	categories: DDoS Attack	DDoS Attack
🇫🇷 Hostynet	2026-06-15 01:37:45 (4 days ago)	TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single ... show more TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single source). Source automatically blacklisted. show less	DDoS Attack
🇩🇪 updown.io	2026-06-15 00:29:06 (4 days ago)	{"level":"info","ts":1781483328.1818962,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781483328.1818962,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.104.146.187","remote_port":"42524","client_ip":"34.104.146.187","proto":"HTTP/1.1","method":"GET","host":"status.startinfinity.com","uri":"/.env.stage","headers":{"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.startinfinity.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000616498,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1781483328.1829996,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.104.146.187","remote_port":"42528","client_ip":"34.104.146.187","proto":"HTTP/1.1", ... show less	DDoS Attack Web App Attack
🇩🇪 big-cloud.nl	2026-06-14 21:25:41 (4 days ago)	Try to access /.env	Web App Attack
🇧🇪 cmbplf	2026-06-14 06:51:22 (5 days ago)	129 requests with url.path *sendgrid.env	Brute-Force Bad Web Bot
🇮🇹 VHosting	2026-06-14 04:20:04 (5 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-06-14 02:24:21 (5 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇳🇱 Site.eu	2026-06-14 02:18:01 (5 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 oukat	2026-06-13 21:46:25 (5 days ago)	Web bot / web application probing against nginx	Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 170.187.163.117

🇦🇷 190.244.39.224

🇺🇸 147.185.132.146

🇯🇵 118.194.236.126

🇫🇷 85.217.140.25

🇦🇹 68.210.120.110

🇮🇳 45.127.235.87

🇧🇪 34.62.160.244

🇷🇴 2.57.122.103

🇺🇸 216.25.89.78

🇮🇳 182.95.160.46

🇧🇷 129.121.54.237

🇰🇷 106.247.22.181

🇸🇪 104.23.223.144

🇺🇸 104.21.80.138

🇺🇸 100.50.17.159

🇮🇹 77.39.210.13

🇧🇬 62.133.47.13

🇮🇷 46.100.238.66

🇳🇱 45.148.10.200