JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.254.149

34.154.254.149 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	149.254.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.254.149

Whois 34.154.254.149

IP Abuse Reports for 34.154.254.149:

This IP address has been reported a total of 28 times from 21 distinct sources. 34.154.254.149 was first reported on October 15th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 dominioz	2026-10-16 20:32:45 (11 minutes ago)	2026-10-16 20:32:27 GET /.env~ - - 34.154.254.149 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebK ... show more 2026-10-16 20:32:27 GET /.env~ - - 34.154.254.149 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 403 291 2026-10-16 20:32:28 GET /.env.local - - 34.154.254.149 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 147291 2026-10-16 20:32:29 GET /.env.production - - 34.154.254.149 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 147291 2026-10-16 20:32:30 GET /.env.staging - - 34.154.254.149 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 147291 2026-10-16 20:32:32 GET /.env.development - - 34.154.254.149 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 147291 ... show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-10-16 19:50:02 (53 minutes ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-10-16 19:08:22 (1 hour ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 Murazaki	2026-10-16 18:10:00 (2 hours ago)	balamb.fr 34.154.254.149 - - [16/Oct/2026:20:09:58 +0200] "GET /mailer/.env HTTP/1.1" 404 114645 "-" ... show more balamb.fr 34.154.254.149 - - [16/Oct/2026:20:09:58 +0200] "GET /mailer/.env HTTP/1.1" 404 114645 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.61:80" balamb.fr 34.154.254.149 - - [16/Oct/2026:20:09:58 +0200] "GET /mail/.env HTTP/1.1" 404 114644 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.61:80" balamb.fr 34.154.254.149 - - [16/Oct/2026:20:09:59 +0200] "GET /mailing/.env HTTP/1.1" 404 114651 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.61:80" balamb.studio 34.154.254.149 - - [16/Oct/2026:20:09:59 +0200] "GET /mailer/.env HTTP/1.1" 404 114638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.61:80" balamb.studio 34.154.254.149 - - [16/Oct/2026:20:09:59 +0200] "GET /mail/.env HTTP/1.1" 404 114644 ... show less	Bad Web Bot
🇳🇱 Site.eu	2026-10-16 18:08:42 (2 hours ago)	Excessive 404/403 errors	Brute-Force
🇧🇪 cmbplf	2026-10-16 16:24:51 (4 hours ago)	14.513 requests with url.path .env 2.206 requests with url.path phpinfo.php 411 requests with u ... show more 14.513 requests with url.path .env 2.206 requests with url.path phpinfo.php 411 requests with url.path credentials.json 172 requests with url.path .php.bak 163 requests with url.path /.git/config 122 requests with url.path .git/* show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-16 16:20:18 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:20:12.608129 2026] [security2:error] [pid 15470:tid 15470] [client 34.154.254.149:35530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baklitjewelry.com"] [uri "/.git/config"] [unique_id "atJOvBtAGwBA1w8oAgFWogAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-10-16 16:10:09 (4 hours ago)		Web App Attack
🇳🇱 Mangelot Hosting	2026-10-16 16:03:18 (4 hours ago)	(modsec_attack) srv102 ModSecurity attack 34.154.254.149 (IT/Italy/149.254.154.34.bc.googleuserconte ... show more (modsec_attack) srv102 ModSecurity attack 34.154.254.149 (IT/Italy/149.254.154.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-10-16 15:17:09 (5 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 13:59:59 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:59:53.711880 2026] [security2:error] [pid 21753:tid 21753] [client 34.154.254.149:53652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baker15.com"] [uri "/.git/config"] [unique_id "atIt2fO2o17gEKGx_2wSvgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 12:08:56 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:08:50.748799 2026] [security2:error] [pid 10210:tid 10210] [client 34.154.254.149:44326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bajocamara.com"] [uri "/.git/config"] [unique_id "atIT0iL9noSr3I0KnqQTMAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-16 09:46:16 (10 hours ago)	Automated web vulnerability and path enumeration scan with excessive 404 requests	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 09:35:15 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.254.149 (149.254.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:35:09.446199 2026] [security2:error] [pid 20047:tid 20047] [client 34.154.254.149:60830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bairentang.org"] [uri "/.git/config"] [unique_id "atHvzZX98S6xQ1Kh4mrMTAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-16 08:12:32 (12 hours ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 136.85.188.59

🇩🇪 130.12.180.35

🇮🇳 121.242.232.216

🇨🇳 106.59.139.245

🇺🇸 70.184.126.57

🇰🇷 20.194.31.140

🇷🇴 2.57.121.25

🇺🇸 2600:1900:0:4006::

🇵🇦 200.46.177.242

🇵🇱 194.180.49.76

🇫🇷 178.238.235.207

🇫🇷 91.231.89.222

🇳🇱 77.83.39.16

🇫🇷 62.84.186.132

🇨🇳 61.137.140.192

🇺🇸 216.126.225.6

🇦🇹 152.53.46.2

🇮🇳 110.226.7.89

🇫🇷 80.241.219.228

🇧🇬 78.128.113.46