JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.130.23

34.154.130.23 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	23.130.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.130.23

Whois 34.154.130.23

IP Abuse Reports for 34.154.130.23:

This IP address has been reported a total of 53 times from 35 distinct sources. 34.154.130.23 was first reported on September 10th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-15 15:03:04 (22 hours ago)	[topuurbd] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34 ... show more [topuurbd] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34.154.130.23 - - \[13/Sep/2026:15:11:44 +0200\] "GET /.git/config HTTP/1.1" 307 341 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - \[13/Sep/2026:15:11:45 +0200\] "GET /.env HTTP/1.1" 307 341 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - \[13/Sep/2026:15:11:45 +0200\] "GET /.env.local HTTP/1.1" 307 341 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - \[13/Sep/2026:15:11:45 +0200\] "GET /.env.production HTTP/1.1" 307 341 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) A ... show less	Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2026-09-14 15:46:40 (1 day ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 LRob	2026-09-14 14:50:35 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-09-14 14:50 UTC show less	Hacking Web App Attack
Anonymous	2026-09-14 14:50:22 (1 day ago)	34.154.130.23 - - [14/Sep/2026:16:50:12 +0200] "GET /.git/config HTTP/1.1" 403 614 "-" "Mozilla/5.0 ... show more 34.154.130.23 - - [14/Sep/2026:16:50:12 +0200] "GET /.git/config HTTP/1.1" 403 614 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - [14/Sep/2026:16:50:12 +0200] "GET /.env HTTP/1.1" 403 614 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - [14/Sep/2026:16:50:12 +0200] "GET /.env.local HTTP/1.1" 403 614 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - [14/Sep/2026:16:50:12 +0200] "GET /.env.production HTTP/1.1" 403 614 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - [14/Sep/2026:16:50:12 +0200] "GET /.env.staging HTTP/1.1" 403 614 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.130.23 - - [14/Sep/2026:16:50:12 +0200] " ... show less	DDoS Attack
🇦🇺 2000cn.com.au	2026-09-14 14:18:23 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 Site.eu	2026-09-14 01:08:10 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇸🇬 azminawwar	2026-09-13 21:35:10 (2 days ago)	34.154.130.23 Probing for vulnerable code from 2026-09-14 04:33:50 WIB, evidence: tienabled\|0\|0\|0\|az ... show more 34.154.130.23 Probing for vulnerable code from 2026-09-14 04:33:50 WIB, evidence: tienabled\|0\|0\|0\|azmi.my.id/includes/phpinfo.php show less	Web App Attack Hacking
Anonymous	2026-09-13 16:56:29 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.154.130.23 (IT/Italy/23.130.154.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.154.130.23 (IT/Italy/23.130.154.34.bc.googleusercontent.com) show less	SQL Injection
🇫🇷 masterguru	2026-09-13 14:58:11 (2 days ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇮🇳 evicky2002	2026-09-13 06:00:01 (3 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-09-12 22:18:47 (3 days ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-12 18:39:49 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Site.eu	2026-09-12 17:22:13 (3 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-09-12 16:10:42 (3 days ago)	Banned by Fail2Ban on server	Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 15:01:38 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.154.130.23 (23.130.154.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.154.130.23 (23.130.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 11:01:30.104801 2026] [security2:error] [pid 8398:tid 8398] [client 34.154.130.23:56070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anchorroots.com"] [uri "/.git/config"] [unique_id "aqVpSt4rK565_h2h2ElbXwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.252.196.198

🇧🇷 189.90.33.195

🇺🇸 172.233.178.94

🇳🇱 77.239.124.215

🇺🇦 77.109.21.190

🇷🇴 68.67.113.17

🇧🇬 46.10.201.90

🇰🇪 41.90.145.199

🇧🇪 35.187.15.215

🇧🇪 34.79.143.219

🇩🇿 197.202.3.140

🇧🇷 187.28.1.110

🇺🇸 170.130.187.38

🇯🇵 124.45.31.57

🇮🇳 115.245.172.214

🇷🇺 95.54.142.60

🇫🇮 77.42.74.152

🇭🇰 8.210.75.243

🇺🇸 2a03:2880:f816:73::

🇬🇧 178.128.32.203