JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.6.102.102

34.6.102.102 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	102.102.6.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.6.102.102

Whois 34.6.102.102

IP Abuse Reports for 34.6.102.102:

This IP address has been reported a total of 24 times from 19 distinct sources. 34.6.102.102 was first reported on August 1st 2026, and the most recent report was 35 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-01 14:27:54 (35 minutes ago)	(mod_security) mod_security (id:949110) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:949110) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:27:47.467723 2026] [security2:error] [pid 2031380:tid 2031380] [client 34.6.102.102:38846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "slapai.org"] [uri "/.env.dev"] [unique_id "am4CYzXSe43SMlP_3OY6cQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Webhoster	2026-08-01 14:19:37 (43 minutes ago)	{"ClientAddr":"172.71.183.163:10882","ClientHost":"34.6.102.102","ClientPort":"10882","ClientUsernam ... show more {"ClientAddr":"172.71.183.163:10882","ClientHost":"34.6.102.102","ClientPort":"10882","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":4036507,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":4036507,"RequestAddr":"plex.timvdberg.dev","RequestContentSize":0,"RequestCount":623581,"RequestHost":"plex.timvdberg.dev","RequestMethod":"GET","RequestPath":"/.env","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"plex@file","StartLocal":"2026-08-01T14:19:36.779940692Z","StartUTC":"2026-08-01T14:19:36.779940692Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"34.6.102.102","request_X-Forwarded-For":"34.6.102.102","request_X-Real-Ip":"172.71.183.163","time":"2026-08-01T14:19:36Z"} {"ClientAddr":"104.23.168.20:11581","ClientHost":"34.6.102.102","ClientPort":"11581","ClientUsername":"-","DownstreamContentSize" ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇦🇹 mindrider	2026-08-01 14:17:37 (45 minutes ago)	34.6.102.102 - - [01/Aug/2026:16:17:36 +0200] "GET /.env.dev HTTP/1.1" 404 2968 "-" "crusader-worker ... show more 34.6.102.102 - - [01/Aug/2026:16:17:36 +0200] "GET /.env.dev HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-" 34.6.102.102 - - [01/Aug/2026:16:17:36 +0200] "GET /.env.production HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-" ... show less	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-01 14:16:23 (47 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 e.fierstra	2026-08-01 14:06:48 (56 minutes ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇹 clamehost.it	2026-08-01 13:47:49 (1 hour ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
🇺🇸 TPI-Abuse	2026-08-01 13:46:22 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:46:18.064468 2026] [security2:error] [pid 569969:tid 569979] [client 34.6.102.102:55328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.liamkiriadcompany.brucejoell.com"] [uri "/.env.dev"] [unique_id "am34qsUts0Y2lkkgQSim0wAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 daveoctober	2026-08-01 13:39:35 (1 hour ago)	October Sentinel: honeypot triggered	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-01 13:03:21 (2 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 Origon	2026-08-01 13:02:33 (2 hours ago)	http-sensitive-files - IP: 34.6.102.102 - time="2026-08-01T15:02:32+02:00" level=info msg="(555f66b ... show more http-sensitive-files - IP: 34.6.102.102 - time="2026-08-01T15:02:32+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.6.102.102 (NL/396982) : 4h ban on Ip 34.6.102.102" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 12:55:57 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:55:49.143828 2026] [security2:error] [pid 2175842:tid 2175842] [client 34.6.102.102:53652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seiganji.ichi51e.net"] [uri "/.env.example"] [unique_id "am3s1W7O2EWGClHVZLbzbgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-08-01 12:47:45 (2 hours ago)	[SatAug0114:47:40.2017032026][security2:error][pid3511363:tid3511830][client34.6.102.102:0]ModSecuri ... show more [SatAug0114:47:40.2017032026][security2:error][pid3511363:tid3511830][client34.6.102.102:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.carolin-mizio.ch\"][uri\"/.env.old\"][unique_id\"am3q7POF84bRd89MaSESqAAAANA\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 12:36:23 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:36:15.064416 2026] [security2:error] [pid 2178507:tid 2178507] [client 34.6.102.102:57550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ndanou.com"] [uri "/.env.old"] [unique_id "am3oP6OXB3_VFlDDnrHPggAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-08-01 12:25:34 (2 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.6.102.102 (102.102.6.34.bc.google ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.6.102.102 (102.102.6.34.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇸🇪 vaia.cloud	2026-08-01 12:25:04 (2 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 212.64.201.210

🇺🇸 172.71.167.57

🇺🇸 154.83.197.75

🇯🇵 139.162.70.53

🇻🇳 103.161.113.136

🇮🇳 103.42.74.124

🇫🇷 91.196.152.192

🇨🇦 51.79.68.87

🇭🇰 42.201.192.53

🇩🇪 35.234.92.214

🇺🇸 31.58.26.2

🇳🇱 213.176.26.133

🇳🇱 213.176.26.78

🇸🇬 213.163.193.99

🇨🇳 120.48.15.138

🇨🇳 101.132.80.207

🇫🇮 34.88.250.130

🇰🇷 34.64.111.117

🇮🇳 8.234.78.11

🇳🇱 195.178.110.232