JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.178.54.57

Recent Activity

Abuse Confidence Score

100% Critical

29 reports

20 reporters · latest 1 hour ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 57.54.178.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇳🇱 Netherlands
City: Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 20 distinct reporters

First reported

November 5th 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 7 🇺🇸 United States of America 7 🇨🇿 Czechia 4

Most common categories Web App Attack 23 Bad Web Bot 16 Brute-Force 14 Hacking 4 SQL Injection 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 debestelapp	2026-11-06 05:55:09 UTC · (1 hour ago)		Web App Attack
🇩🇪 rh24	2026-11-06 05:53:38 UTC · (1 hour ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.178.54.57 (NL/The Netherlands/57.54.178.34.bc.googleusercontent.com)	Bad Web Bot
🇹🇷 Jova	2026-11-06 05:45:39 UTC · (1 hour ago)	Requests impersonating 3 different crawlers from one IP.	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-11-06 05:34:34 UTC · (1 hour ago)	Scanning for web/db/file exploits on www.meijerpotato.com	SQL Injection Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-11-06 04:52:45 UTC · (2 hours ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-11-06 04:25:59 UTC · (3 hours ago)	146 requests with url.path /proc/ 105 requests with url.path *credentials.json	Brute-Force Bad Web Bot
🇩🇪 sebham03	2026-11-06 03:46:10 UTC · (3 hours ago)	Automated sensitive-file/web application probing observed from 2026-11-05T19:20:50+00:00 to 2026-11-06T03:46:10+00:00 across 2 separate observation windows: 818 HTTP requests including 384 strong probe-indicator requests. Each window contained multip ... show more Automated sensitive-file/web application probing observed from 2026-11-05T19:20:50+00:00 to 2026-11-06T03:46:10+00:00 across 2 separate observation windows: 818 HTTP requests including 384 strong probe-indicator requests. Each window contained multiple suspicious normalized paths. Responses: HTTP 200: 777, HTTP 400: 30, HTTP 404: 7, HTTP 405: 4. HTTP 200 does not prove sensitive-file access or successful authentication; response contents not verified. No compromise established. show less	Web App Attack
🇳🇱 Savvii	2026-11-06 01:24:07 UTC · (6 hours ago)	20 attempts against mh-misbehave-ban on virgo	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Agaman	2026-11-06 01:20:33 UTC · (6 hours ago)	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-06 01:20 UTC. Samples: GET /dist/.vite/manifest.json 444; GET /.vite/manifest.json 444; GET /js../.env 444. Fake crawler: the User-Agent claims "Perplexity-User", but this I ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-06 01:20 UTC. Samples: GET /dist/.vite/manifest.json 444; GET /.vite/manifest.json 444; GET /js../.env 444. Fake crawler: the User-Agent claims "Perplexity-User", but this IP is not a verified Perplexity-User address. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 01:16:24 UTC · (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.178.54.57 (57.54.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:16:21.128122 2026] [security2:error] [pid 25452:tid 25 ... show more (mod_security) mod_security (id:210492) triggered by 34.178.54.57 (57.54.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:16:21.128122 2026] [security2:error] [pid 25452:tid 25452] [client 34.178.54.57:57480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bodybuildbid.com"] [uri "/.env.keys"] [unique_id "au0qZTyQny-RZr_p8XgBIwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-05 23:04:31 UTC · (8 hours ago)	IP matched detection query more than 2 hosts and only bad rq long ban.	Brute-Force Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-11-05 22:54:29 UTC · (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.178.54.57 (57.54.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:54:24.621604 2026] [security2:error] [pid 4597:tid 459 ... show more (mod_security) mod_security (id:210492) triggered by 34.178.54.57 (57.54.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:54:24.621604 2026] [security2:error] [pid 4597:tid 4597] [client 34.178.54.57:51358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gsrsv.org"] [uri "/css../.env"] [unique_id "au0JIHFLnS5_7OJ-fpejVgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 22:19:34 UTC · (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.178.54.57 (57.54.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:19:31.158750 2026] [security2:error] [pid 4959:tid 495 ... show more (mod_security) mod_security (id:210730) triggered by 34.178.54.57 (57.54.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:19:31.158750 2026] [security2:error] [pid 4959:tid 4959] [client 34.178.54.57:44300] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dadlounge.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dadlounge.com"] [uri "/z9x8c7v6b5-debug-trigger-dadlounge.com"] [unique_id "au0A8yz5AaDEvY_j6FL0YAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-11-05 21:05:39 UTC · (10 hours ago)	Common web attack from 34.178.54.57.	Web App Attack
🇳🇱 Alboweb B.V.	2026-11-05 20:11:04 UTC · (11 hours ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 223.123.34.15

🇨🇭 209.99.189.119

🇲🇽 187.189.90.195

🇨🇳 182.138.158.134

🇹🇹 181.118.45.177

🇨🇳 121.229.9.97

🇻🇳 103.163.118.174

🇹🇷 81.214.75.248

🇺🇸 76.173.132.230

🇺🇸 73.237.197.12

🇨🇦 70.49.229.50

🇺🇸 192.155.87.225

🇫🇮 185.89.43.49

🇰🇭 124.199.118.52

🇮🇳 117.251.86.142

🇨🇦 99.227.42.234

🇺🇦 94.124.162.190

🇵🇹 85.242.146.95

🇺🇸 73.64.211.180

🇺🇸 72.63.249.93