JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.179.204.149

Activity Trending Down

Abuse Confidence Score

75% Critical

47 reports

36 reporters · latest 3 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 149.204.179.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

47 from 36 distinct reporters

First reported

October 8th 2026

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇩🇪 Germany 10 🇬🇧 United Kingdom of Great Britain and Northern Ireland 5

Most common categories Web App Attack 38 Brute-Force 18 Bad Web Bot 16 Hacking 12 Port Scan 4

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jocurionline	2026-10-15 01:30:16 UTC · (3 weeks ago)	Auto-blocked by WAF: AUTO-BAN: Error-log attack lfi_attempt, denied_access (9 hits) 24 h	Web App Attack Hacking
🇬🇧 openstrike.co.uk	2026-10-10 05:14:08 UTC · (4 weeks ago)	458 attacks on directory traversals, VC URLs, password/key grabbing URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), shell probes, PHP URLs, env grabbing URLs: GET /..%2f..%2f.env HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /__vite_rsc_findS ... show more 458 attacks on directory traversals, VC URLs, password/key grabbing URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), shell probes, PHP URLs, env grabbing URLs: GET /..%2f..%2f.env HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/1.1 GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc HTTP/1.1 GET /secrets.yml HTTP/1.1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1 GET /.env.development?raw HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-10-09 05:14:40 UTC · (4 weeks ago)	275 attacks on shell probes, env grabbing URLs, VC URLs, config grabbing URLs (type 2), PHP URLs, directory traversals, password/key grabbing URLs, env grabbing URLs (type 2): POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTT ... show more 275 attacks on shell probes, env grabbing URLs, VC URLs, config grabbing URLs (type 2), PHP URLs, directory traversals, password/key grabbing URLs, env grabbing URLs (type 2): POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 GET /@fs/app/.env.local?import&raw?? HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /secrets.yml HTTP/1.1 POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 GET /@fs/root/.aws/credentials?raw?? HTTP/1.1 GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1 show less	Hacking Web App Attack
🇧🇪 voormedia	2026-10-09 02:12:49 UTC · (4 weeks ago)	Accessed trap at '/.bashrc'	Web App Attack
🇺🇸 MatCat	2026-10-09 02:05:08 UTC · (4 weeks ago)	Banned by fail2ban: apache-noscript	Hacking Web App Attack
🇮🇪 RoboSOC	2026-10-09 01:33:33 UTC · (4 weeks ago)	PHP CGI Argument Injection Vulnerability, PTR: 149.204.179.34.bc.googleusercontent.com.	Hacking
🇩🇪 jocurionline	2026-10-09 01:30:12 UTC · (4 weeks ago)	Auto-blocked by WAF: AUTO-BAN: RCE/Command Injection 1 h	Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 23:26:58 UTC · (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 34.179.204.149 (149.204.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:26:53.430899 2026] [security2:error] [pid 28091:ti ... show more (mod_security) mod_security (id:210730) triggered by 34.179.204.149 (149.204.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:26:53.430899 2026] [security2:error] [pid 28091:tid 28091] [client 34.179.204.149:46578] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|natesupport.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "natesupport.com"] [uri "/z9x8c7v6b5-debug-trigger-natesupport.com"] [unique_id "asgmvbHni_13OIyyqWCRCAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sternwart	2026-10-08 23:20:00 UTC · (4 weeks ago)	Automatisch erkannt: Zugriff auf /.env.backup (my-coach.ch)	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-10-08 23:10:46 UTC · (4 weeks ago)	Crawler ignoring refusals \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot, Mozilla/ ... show more Crawler ignoring refusals \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot, Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/) (+2 more) \| path: /asset-manifest.json, /assets/manifest.json, /w1ie4wghew2f42toij5i (+5 more) show less	Bad Web Bot
🇺🇸 MatCat	2026-10-08 23:05:15 UTC · (4 weeks ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-08 22:49:38 UTC · (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 34.179.204.149 (149.204.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 18:49:33.194429 2026] [security2:error] [pid 8012:tid ... show more (mod_security) mod_security (id:210730) triggered by 34.179.204.149 (149.204.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 18:49:33.194429 2026] [security2:error] [pid 8012:tid 8012] [client 34.179.204.149:54056] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|marisetravel.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "marisetravel.com"] [uri "/z9x8c7v6b5-debug-trigger-marisetravel.com"] [unique_id "asgd_V99BhGxMbiRuUEkKgAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 radardatelecom	2026-10-08 22:27:04 UTC · (4 weeks ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-08 22:22:56 UTC · (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 helios.live	2026-10-08 22:14:04 UTC · (4 weeks ago)	2026/10/08 22:14:03 [error] 58479#58479: 254878 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.179.204.149, server: kocerroxy.com, request: "POST /lib/terminal-xhr.php HTTP/1.1", upstream: "f ... show more 2026/10/08 22:14:03 [error] 58479#58479: 254878 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.179.204.149, server: kocerroxy.com, request: "POST /lib/terminal-xhr.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 34.179.204.149 - - [08/Oct/2026:22:14:03 +0000] "POST /lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 2026/10/08 22:14:03 [error] 58479#58479: 254918 access forbidden by rule, client: 34.179.204.149, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com" 2026/10/08 22:14:03 [error] 58479#58479: 254878 access forbidden by rule, client: 34.179.204.149, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com" 2026/10/08 22:14:04 [error] 58479#58479: *255013 FastCGI sent in stderr: "Primary script unknown" while reading re ... show less	Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 177.66.185.122

🇨🇭 172.161.40.129

🇳🇴 92.221.53.8

🇳🇱 45.148.10.230

🇧🇷 38.56.81.232

🇳🇱 200.138.46.133

🇧🇴 181.115.161.243

🇨🇳 180.101.184.47

🇸🇬 172.71.81.104

🇸🇬 162.158.108.29

🇵🇹 149.90.117.34

🇲🇽 138.186.28.36

🇨🇳 115.190.245.176

🇰🇷 106.244.120.37

🇵🇱 94.26.88.80

🇮🇹 91.254.113.138

🇮🇹 82.48.109.128

🇲🇾 59.153.151.176

🇰🇷 49.246.68.220

🇨🇦 45.194.92.55