JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.154.188.140

Recent Activity

Abuse Confidence Score

98% Critical

26 reports

17 reporters · latest 1 hour ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 140.188.154.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇮🇹 Italy
City: Milan, Lombardy

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

26 from 17 distinct reporters

First reported

November 12th 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 5 🇨🇭 Switzerland 2

Most common categories Web App Attack 23 Brute-Force 17 Bad Web Bot 11 Hacking 6 Port Scan 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Marco711	2026-11-14 00:26:01 UTC · (1 hour ago)	port/URL scanning	Port Scan Web App Attack
🇨🇭 ca	2026-11-14 00:10:59 UTC · (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-11-13 22:59:33 UTC · (2 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.	Web App Attack SSH Hacking
Anonymous	2026-11-13 18:37:43 UTC · (7 hours ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-11-13 17:45:17 UTC · (8 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 13:06:38 UTC · (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:06:32.462675 2026] [security2:error] [pid 29544:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:06:32.462675 2026] [security2:error] [pid 29544:tid 29544] [client 34.154.188.140:46798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ati.software"] [uri "/.git/config"] [unique_id "avcLWCvYeF5oOtyvzDn56QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 11:45:24 UTC · (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:45:21.224284 2026] [security2:error] [pid 10336:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:45:21.224284 2026] [security2:error] [pid 10336:tid 10336] [client 34.154.188.140:42734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.asiancommoditiescorporation.com"] [uri "/.git/config"] [unique_id "avb4US0Anq_6G18CrPV4xAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 11:27:59 UTC · (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:27:53.613615 2026] [security2:error] [pid 1277:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:27:53.613615 2026] [security2:error] [pid 1277:tid 1277] [client 34.154.188.140:45658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.asfmglobal.com"] [uri "/.git/config"] [unique_id "avb0OacZkmtwCMX_En3rZgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-11-13 10:00:11 UTC · (15 hours ago)	34.154.188.140 - - [13/Nov/2026:12:00:10 +0200] "GET /.git/config HTTP/1.1" 400 63 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.188.140 - - [13/Nov/2026:12:00:10 +0 ... show more 34.154.188.140 - - [13/Nov/2026:12:00:10 +0200] "GET /.git/config HTTP/1.1" 400 63 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.188.140 - - [13/Nov/2026:12:00:10 +0200] "GET /.env.local HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 phoenix1jl96	2026-11-13 08:22:48 UTC · (17 hours ago)	2026/11/13 09:22:46 [error] 96551#96551: 597246 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.154.188.140, server: autodiscover.aqteeve.com, request: "GET /mailer/.env HTTP/1.1", host: "autodiscov ... show more 2026/11/13 09:22:46 [error] 96551#96551: 597246 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.154.188.140, server: autodiscover.aqteeve.com, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.aqteeve.com" 2026/11/13 09:22:46 [error] 96551#96551: *597246 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.154.188.140, server: autodiscover.aqteeve.com, request: "GET /mail/.env HTTP/1.1", host: "autodiscover.aqteeve.com" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇨🇭 4server	2026-11-13 06:00:24 UTC · (19 hours ago)	[FriNov1307:00:16.9202242026][security2:error][pid442992:tid443378][client34.154.188.140:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\ ... show more [FriNov1307:00:16.9202242026][security2:error][pid442992:tid443378][client34.154.188.140:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\*271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"autodiscover.annunci-ticino.ch\"][uri\"/\"][unique_id\"avancIYzmRo0nRT7CbB7PgAAAQU\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 05:59:53 UTC · (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:59:47.793941 2026] [security2:error] [pid 8263:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:59:47.793941 2026] [security2:error] [pid 8263:tid 8270] [client 34.154.188.140:41920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.annthornycroft.com"] [uri "/.git/config"] [unique_id "avanU7OGPwBCFb09oZY3owAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 05:18:15 UTC · (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:18:11.528871 2026] [security2:error] [pid 18277:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:18:11.528871 2026] [security2:error] [pid 18277:tid 18277] [client 34.154.188.140:49142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.angelsofrhodeisland.com"] [uri "/.git/config"] [unique_id "avadkzwMBnkLT4AngMVj_gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 03:40:53 UTC · (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:40:50.202436 2026] [security2:error] [pid 5919:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.154.188.140 (140.188.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:40:50.202436 2026] [security2:error] [pid 5919:tid 5919] [client 34.154.188.140:55334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.amlanddgtours.com"] [uri "/.git/config"] [unique_id "avaGwiHWv1cm8wrYfxcQkQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 rubixstudios	2026-11-13 03:22:02 UTC · (22 hours ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇪 217.165.56.68

🇺🇸 164.90.142.33

🇵🇪 161.132.42.214

🇳🇱 109.160.32.159

🇵🇱 80.68.146.183

🇺🇸 71.6.237.235

🇸🇬 8.222.209.182

🇰🇷 220.76.91.28

🇧🇷 200.185.196.177

🇧🇷 190.124.191.155

🇫🇷 185.194.178.85

🇧🇷 179.84.19.71

🇨🇭 179.43.153.10

🇧🇷 177.101.47.133

🇳🇱 146.190.230.216

🇨🇦 138.197.162.116

🇨🇳 121.224.78.164

🇺🇸 91.230.168.139

🇵🇱 80.68.146.159

🇵🇱 80.68.146.12