JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.6.113.158

Neutral Activity

Abuse Confidence Score

0% Low Risk

33 reports

20 reporters · latest 1 year ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 158.113.6.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇳🇱 Netherlands
City: Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.6.113.158 has been reported 33 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

33 from 20 distinct reporters

First reported

November 3rd 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 elan	2025-11-05 15:07:28 UTC · (1 year ago)	ModSecurity WAF violation (OWASP CRS)	Brute-Force Web App Attack
🇬🇧 [email protected]	2025-11-05 00:52:34 UTC · (1 year ago)	...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2025-11-04 22:59:12 UTC · (1 year ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-03.	Hacking Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-11-04 06:13:00 UTC · (1 year ago)	5 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇺🇸 octageeks.com	2025-11-04 05:07:46 UTC · (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-03 22:59:03 UTC · (1 year ago)	Auto-ban: >3000 req/min op 2025-11-03	Hacking Web App Attack SSH
🇺🇸 mnsf	2025-11-03 21:05:42 UTC · (1 year ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 20:22:08 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 15:22:04.906319 2025] [security2:error] [pid 12839:tid 12 ... show more (mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 15:22:04.906319 2025] [security2:error] [pid 12839:tid 12862] [client 34.6.113.158:52110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crosscountry.ahsdistance.org"] [uri "/.git/config"] [unique_id "aQkO7M-U-3Z-lIKiOWEsRgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 20:01:53 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 15:01:46.218575 2025] [security2:error] [pid 9867:tid 986 ... show more (mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 15:01:46.218575 2025] [security2:error] [pid 9867:tid 9867] [client 34.6.113.158:52488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cristalsupermercado.gp.com.grupoporvenir.com"] [uri "/.git/config"] [unique_id "aQkKKn__Dvo-q0MaaVHAqgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 19:46:27 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 14:46:21.338560 2025] [security2:error] [pid 14239:tid 14 ... show more (mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 14:46:21.338560 2025] [security2:error] [pid 14239:tid 14239] [client 34.6.113.158:58338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.createbelieve.mroxygen.org"] [uri "/.git/config"] [unique_id "aQkGjZSqtXBvzZwcTBfMtAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Trueforce Threat Report	2025-11-03 19:42:38 UTC · (1 year ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-11-03 19:34:50 UTC · (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 18:48:09 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 13:48:01.754238 2025] [security2:error] [pid 19892:tid 19 ... show more (mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 13:48:01.754238 2025] [security2:error] [pid 19892:tid 19892] [client 34.6.113.158:52860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.countertop.mooseled.com"] [uri "/.git/config"] [unique_id "aQj44Xr1bf5ah8j7dueLWAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2025-11-03 18:32:41 UTC · (1 year ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 18:29:18 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 13:29:10.753098 2025] [security2:error] [pid 18220:tid 18 ... show more (mod_security) mod_security (id:210492) triggered by 34.6.113.158 (158.113.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 13:29:10.753098 2025] [security2:error] [pid 18220:tid 18220] [client 34.6.113.158:48300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.corona-schutzkonzept.vjrott.com"] [uri "/.git/config"] [unique_id "aQj0dnmdBSkEmQdofjIuzwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇰 188.121.168.214

🇮🇶 185.56.195.173

🇨🇳 117.148.167.134

🇬🇧 89.37.172.145

🇨🇿 85.137.164.72

🇨🇳 58.51.132.251

🇮🇳 49.206.201.253

🇺🇸 217.145.224.100

🇺🇸 193.202.12.29

🇲🇽 177.227.196.163

🇿🇦 105.243.68.170

🇻🇳 103.199.18.125

🇱🇧 85.112.69.171

🇸🇬 82.197.71.19

🇳🇱 77.239.124.68

🇳🇱 64.205.72.139

🇺🇸 216.25.89.119

🇧🇦 195.222.43.138

🇨🇳 123.245.85.0

🇮🇳 122.168.197.245