JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.158.243.104

34.158.243.104 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	104.243.158.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.158.243.104

Whois 34.158.243.104

IP Abuse Reports for 34.158.243.104:

This IP address has been reported a total of 53 times from 44 distinct sources. 34.158.243.104 was first reported on June 8th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-12 05:14:25 (4 days ago)	151 attacks on too many concurrent requests, env grabbing URLs: GET /env.txt HTTP/1.1 GET /.env.live ... show more 151 attacks on too many concurrent requests, env grabbing URLs: GET /env.txt HTTP/1.1 GET /.env.live HTTP/1.1 show less	Bad Web Bot Hacking
🇨🇭 🇨🇭 Hosting	2026-06-12 05:10:19 (4 days ago)	Automated WAF report: 100-125 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇨🇦 alexbfr	2026-06-12 04:00:17 (4 days ago)	Fail2Ban Report, nginx-bot-trap jail: Automated honeypot detection.	Port Scan
🇦🇺 nzhost.co.nz	2026-06-11 23:14:52 (4 days ago)	$f2bV_matches	Hacking Brute-Force
🇳🇱 wlt-blocker	2026-06-11 17:38:17 (4 days ago)	Unauthorized access to webpage admin	Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-11 16:26:04 (4 days ago)	categories: DDoS Attack	DDoS Attack
🇩🇪 updown.io	2026-06-11 14:27:32 (5 days ago)	{"level":"info","ts":1781188051.9419818,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781188051.9419818,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.158.243.104","remote_port":"59664","client_ip":"34.158.243.104","proto":"HTTP/1.1","method":"GET","host":"fptmkwww.www.159.89.98.98.nip.io","uri":"/.env.backup.txt","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 9; GM1917) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000043744,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://fptmkwww.www.159.89.98.98.nip.io/.env.backup.txt"],"Content-Type":[]}} {"level":"info","ts":1781188051.9442265,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.158.243.104","remote_port":"59674","client_ip":"34.158.243.104","proto":"HTTP/1.1","method":"GET","host":"fptmkwww.www.159.89.98.98.nip.io" ... show less	DDoS Attack Web App Attack
🇩🇪 rh24	2026-06-11 08:05:27 (5 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.158.243.104 (US/U ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.158.243.104 (US/United States/104.243.158.34.bc.googleusercontent.com) show less	Bad Web Bot
🇳🇱 e.fierstra	2026-06-11 07:10:04 (5 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 akasolutions.de	2026-06-11 06:36:25 (5 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.158.243.104 (US/United States/104.24 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.158.243.104 (US/United States/104.243.158.34.bc.googleusercontent.com) show less	SQL Injection
🇵🇱 dcnet	2026-06-11 06:00:09 (5 days ago)	FortiGate detected DOS attack from IPv4 address 34.158.243.104	DDoS Attack
🇳🇱 Site.eu	2026-06-10 23:27:24 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 4server	2026-06-10 23:03:14 (5 days ago)	[ThuJun1101:03:09.6573752026][security2:error][pid1089361:tid1089405][client34.158.243.104:0]ModSecu ... show more [ThuJun1101:03:09.6573752026][security2:error][pid1089361:tid1089405][client34.158.243.104:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:10$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.modularss.mood4apps.com\"][uri\"/api/.env.prod\"][unique_id\"aintLfYDBg8W_u5LVBTlpgAAAEE\"] show less	Port Scan Brute-Force Web App Attack
🇫🇮 inlink.ltd	2026-06-10 22:15:26 (5 days ago)	dot file probe	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-10 22:01:44 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.97.231

🇧🇪 198.235.24.155

🇨🇳 180.184.139.84

🇭🇰 152.32.211.69

🇯🇴 92.241.37.50

🇫🇷 85.217.140.2

🇳🇱 167.172.43.237

🇺🇸 167.99.54.222

🇺🇸 150.136.214.177

🇸🇬 138.2.70.58

🇺🇸 104.184.135.106

🇸🇮 92.42.201.105

🇷🇴 80.94.95.211

🇮🇳 69.57.172.207

🇻🇳 36.50.134.129

🇬🇧 35.203.211.26

🇺🇸 23.95.123.25

🇭🇰 223.197.178.95

🇰🇷 221.165.6.102

🇩🇪 202.61.206.224