JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.23.197.194

Activity Trending Down

Abuse Confidence Score

73% Elevated

23 reports

22 reporters · latest 2 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 194.197.23.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

23 from 22 distinct reporters

First reported

October 20th 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 5 🇩🇰 Denmark 2

Most common categories Web App Attack 17 Bad Web Bot 6 Hacking 5 Brute-Force 4 Port Scan 4

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 evlhomer	2026-10-22 11:05:18 UTC · (2 weeks ago)	Web App Attack	Web App Attack
🇵🇱 strefapi_com	2026-10-21 11:49:18 UTC · (2 weeks ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇩🇪 BlueWire Hosting	2026-10-21 11:46:27 UTC · (2 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇳🇱 Alt255	2026-10-21 11:44:46 UTC · (2 weeks ago)	[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.23.197.194 - - [21/Oct/2026:13:44:39 +0200] "GET /auth HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 ... show more [ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.23.197.194 - - [21/Oct/2026:13:44:39 +0200] "GET /auth HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.23.197.194 - - [21/Oct/2026:13:44:39 +0200] "GET /onboarding HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.23.197.194 - - [21/Oct/2026:13:44:39 +0200] "GET /forgot-password HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.23.197.194 - - [21/Oct/2026:13:44:39 +0200] "GET /account HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ... show less	Bad Web Bot Web App Attack
🇬🇧 essinghigh	2026-10-21 10:59:32 UTC · (2 weeks ago)	IPS Detection: 34.23.197.194 -> DPT: 8443	Port Scan
🇺🇸 sumnone	2026-10-21 10:39:27 UTC · (2 weeks ago)	Port probing on unauthorized port 8080	Port Scan Hacking Exploited Host
🇺🇸 RidgeStar	2026-10-21 04:43:56 UTC · (2 weeks ago)		Hacking Web App Attack
Anonymous	2026-10-21 02:18:05 UTC · (2 weeks ago)	Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=24,7, Rate=20, Diversity=19,5.	Web App Attack DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-21 00:03:43 UTC · (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 34.23.197.194 (194.197.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:03:37.960393 2026] [security2:error] [pid 3976:tid 4 ... show more (mod_security) mod_security (id:210730) triggered by 34.23.197.194 (194.197.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:03:37.960393 2026] [security2:error] [pid 3976:tid 4005] [client 34.23.197.194:52290] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|wls.bestofthis.com\|F\|2"] [data ".bestofthis.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wls.bestofthis.com"] [uri "/z9x8c7v6b5-debug-trigger-wls.bestofthis.com"] [unique_id "atgBWa0OpdVZQopfUnqFsgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 jormaster3k	2026-10-20 20:25:30 UTC · (2 weeks ago)	Attack against Apache (too many 404s)	Web App Attack
🇳🇴 ScamAware	2026-10-20 20:12:28 UTC · (2 weeks ago)	Fail2Ban: scanning web server by bare IP address	Port Scan Bad Web Bot
🇪🇸 robotstxt	2026-10-20 20:11:50 UTC · (2 weeks ago)	34.23.197.194 - - [20/Oct/2026:20:11:49 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.23.197.194" 34.23.197.194 - - [20/Oct/2026:20:11:49 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/sel ... show more 34.23.197.194 - - [20/Oct/2026:20:11:49 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.23.197.194" 34.23.197.194 - - [20/Oct/2026:20:11:49 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.23.197.194" 34.23.197.194 - - [20/Oct/2026:20:11:49 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.23.197.194" 34.23.197.194 - - [20/Oct/2026:20:11:49 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.23.197.194" 34.23.197.194 - - [20/Oct/2026:20:11:49 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.23.197.194" ... show less	Web Spam Web App Attack
Anonymous	2026-10-20 18:21:29 UTC · (2 weeks ago)	PROTO=TCP DPT=8080	Port Scan Hacking
🇩🇪 updown.io	2026-10-20 18:15:24 UTC · (2 weeks ago)	{"level":"info","ts":1792520123.1272821,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.23.197.194","remote_port":"33170","client_ip":"34.23.197.194","proto":"HTTP/2.0","method":"POST","host":"demo.updown.io","uri": ... show more {"level":"info","ts":1792520123.1272821,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.23.197.194","remote_port":"33170","client_ip":"34.23.197.194","proto":"HTTP/2.0","method":"POST","host":"demo.updown.io","uri":"/graphql","headers":{"Sec-Ch-Ua-Platform":["\"macOS\""],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["empty"],"Content-Length":["86"],"Origin":["https://demo.updown.io"],"Sec-Ch-Ua-Mobile":["?0"],"Accept":["/"],"Content-Type":["application/json"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-Mode":["cors"],"Referer":["https://demo.updown.io"],"Sec-Fetch-Site":["same-origin"],"Priority":["u=1, i"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"demo.updown ... show less	DDoS Attack Web App Attack
🇩🇪 Hary74656	2026-10-20 16:33:28 UTC · (2 weeks ago)	Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30. [earlier text truncated] -" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" [client 34.23.197.194] [realclient 34.23.1 ... show more Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30. [earlier text truncated] -" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" [client 34.23.197.194] [realclient 34.23.197.194] - - [20/Oct/2026:18:33:27 +0200] [vhost schani.hostmi.at] "GET /register HTTP/2.0" 404 335 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" [client 34.23.197.194] [realclient 34.23.197.194] - - [20/Oct/2026:18:33:27 +0200] [vhost schani.hostmi.at] "GET /signin HTTP/2.0" 404 335 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" [client 34.23.197.194] [realclient 34.23.197.194] - - [20/Oct/2026:18:33:27 +0200] [vhost schani.hostmi.at] "GET /settings HTTP/2.0" 404 335 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 157.245.251.233

🇮🇳 112.196.52.107

🇫🇷 89.84.86.19

🇳🇱 86.38.187.8

🇺🇸 72.179.72.28

🇺🇸 64.62.197.181

🇺🇸 50.6.193.72

🇵🇱 2400:cb00:1055:1000:745c:c264:c3cd:b5ea

🇵🇱 2400:cb00:923:1000:8a5d:4edf:d1ea:b292

🇧🇷 187.62.192.101

🇳🇱 185.136.15.153

🇺🇸 157.230.218.106

🇨🇦 45.194.92.221

🇳🇱 45.148.10.246

🇺🇸 45.45.237.39

🇧🇪 207.175.237.228

🇪🇨 201.46.114.124

🇧🇷 200.223.153.10

🇺🇸 199.165.159.99

🇺🇸 178.128.182.159