JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.140.5.164

34.140.5.164 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	164.5.140.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.140.5.164

Whois 34.140.5.164

IP Abuse Reports for 34.140.5.164:

This IP address has been reported a total of 37 times from 27 distinct sources. 34.140.5.164 was first reported on July 18th 2026, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 04:56:31 (9 minutes ago)	(mod_security) mod_security (id:210730) triggered by 34.140.5.164 (164.5.140.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.140.5.164 (164.5.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 00:56:24.883138 2026] [security2:error] [pid 30120:tid 30120] [client 34.140.5.164:38316] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|isaacsonpaintings.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isaacsonpaintings.com"] [uri "/z9x8c7v6b5-debug-trigger-isaacsonpaintings.com"] [unique_id "alxY-BPYf15C4GmwPrh5ZgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-07-19 03:21:02 (1 hour ago)	2026-07-19 @ 05:21:02 (CET) ~ Blocked for trying to access: /.gitlab-ci.yml	Web App Attack
🇳🇱 ConsulHosting	2026-07-19 02:42:35 (2 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 DEV-DNS	2026-07-19 02:02:30 (3 hours ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇺🇸 TPI-Abuse	2026-07-19 02:02:27 (3 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.140.5.164 (164.5.140.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.140.5.164 (164.5.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 22:02:22.309937 2026] [security2:error] [pid 18744:tid 18744] [client 34.140.5.164:57560] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ivory-wedding-invitations.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ivory-wedding-invitations.com"] [uri "/z9x8c7v6b5-debug-trigger-ivory-wedding-invitations.com"] [unique_id "alwwLgZS2dAMEPkyyod4mAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-07-19 01:45:40 (3 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇳🇱 i-turnradio.nl	2026-07-19 01:37:43 (3 hours ago)	2026-07-19 @ 03:37:42 (CET) ~ Blocked for trying to access: /.env.example	Web App Attack
🇬🇧 gws-hostmaster	2026-07-19 01:31:18 (3 hours ago)	ModSecurity OWASP CRS (Anomaly Score: 10): Restricted File Access Attempt;URL file extension is rest ... show more ModSecurity OWASP CRS (Anomaly Score: 10): Restricted File Access Attempt;URL file extension is restricted by policy; show less	Web App Attack
Anonymous	2026-07-19 01:15:16 (3 hours ago)	Sensitive file access attempt	Hacking
🇬🇧 andypiper	2026-07-19 01:02:42 (4 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 00:55:39 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.140.5.164 (164.5.140.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.140.5.164 (164.5.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 20:55:33.602566 2026] [security2:error] [pid 28138:tid 28138] [client 34.140.5.164:55276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "j3ee.com"] [uri "/.git/config"] [unique_id "alwghSDmZTmZIQj1oRh2RQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-19 00:12:04 (4 hours ago)	Bot / scanning and/or hacking attempts: GET /_profiler/open HTTP/2.0, GET /config.json HTTP/2.0, GET ... show more Bot / scanning and/or hacking attempts: GET /_profiler/open HTTP/2.0, GET /config.json HTTP/2.0, GET /actuator HTTP/2.0, GET /_next/build-manifest.json HTTP/2.0, GET /__env.js HTTP/2.0, GET /.env.staging HTTP/2.0, GET /info.php HTTP/2.0, GET /health HTTP/2.0, GET /build/manifest.json HTTP/2.0, GET /_nuxt/builds/latest.json HTTP/2.0, GET /server-info HTTP/2.0, GET /test.php HTTP/2.0, GET /graphql HTTP/2.0, GET /i.php HTTP/2.0, GET /.env.dev HTTP/2.0, GET /phpinfo.php HTTP/2.0, GET /static/manifest.json HTTP/2.0, GET /app_dev.php HTTP/2.0, GET /pi.php HTTP/2.0, GET /.next/build-manifest.json HTTP/2.0, GET /_debugbar/open HTTP/2.0, GET /assets/manifest.json HTTP/2.0, GET /_profiler/latest HTTP/2.0 show less	Hacking Web App Attack
🇫🇷 ✨	2026-07-19 00:03:14 (5 hours ago)	Domain : italyexsclusivecar.it Rule : env 2026-07-19 00:02:02 *hidden-privacy* GET /.env.backup ... show more Domain : italyexsclusivecar.it Rule : env 2026-07-19 00:02:02 *hidden-privacy* GET /.env.backup - 443 - 34.140.5.164 HTTP/2.0 Mozilla/5.0 (compatible; cohere-ai/1.0; https://cohere.com) - italyexsclusivecar.it 301 0 0 431 174 13 - - show less	Hacking SQL Injection
🇩🇪 Nightreaver	2026-07-18 23:50:59 (5 hours ago)	34.140.5.164 - - [19/Jul/2026:01:50:58 0200] "GET /.aws/config HTTP/1.1" 404 5752 "-" "Mozilla/5.0 ... show more 34.140.5.164 - - [19/Jul/2026:01:50:58 0200] "GET /.aws/config HTTP/1.1" 404 5752 "-" "Mozilla/5.0 (compatible; Applebot/0.1; http://www.apple.com/go/applebot)" 34.140.5.164 - - [19/Jul/2026:01:50:58 0200] "GET /z9x8c7v6b5-debug-trigger-[snip] HTTP/1.1" 404 5752 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.140.5.164 - - [19/Jul/2026:01:50:58 0200] "GET /wp-json HTTP/1.1" 404 5752 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.140.5.164 - - [19/Jul/2026:01:50:58 0200] "GET /.git-credentials HTTP/1.1" 404 5752 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; https://cohere.com)" 34.140.5.164 - - [19/Jul/2026:01:50:58 0200] "GET /.aws/credentials HTTP/1.1" 404 5752 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; https://developer.amazon.com/support/amazonbot)"[...] show less	Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-07-18 23:31:32 (5 hours ago)	80,443	Brute-Force SSH

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇻🇪 190.153.66.202

🇨🇴 177.253.226.226

🇸🇬 152.32.218.30

🇭🇰 101.36.124.127

🇧🇬 91.92.47.120

🇬🇧 35.203.211.143

🇯🇵 8.216.8.168

🇰🇷 211.253.31.30

🇧🇷 205.210.31.218

🇹🇼 198.235.24.127

🇺🇾 190.135.209.45

🇲🇽 189.167.193.178

🇵🇱 176.53.159.198

🇺🇸 172.234.218.22

🇩🇪 167.94.146.44

🇫🇮 147.185.133.236

🇻🇳 103.48.83.92

🇨🇦 85.217.149.15

🇮🇱 77.137.74.16