JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.74.252.164

34.74.252.164 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	164.252.74.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.74.252.164

Whois 34.74.252.164

IP Abuse Reports for 34.74.252.164:

This IP address has been reported a total of 60 times from 54 distinct sources. 34.74.252.164 was first reported on September 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Roper123	2026-09-16 01:10:18 (1 day ago)	Web app attack	Web App Attack
🇩🇪 grassau.com	2026-09-16 00:04:06 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.74.252.164 (US/Un ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.74.252.164 (US/United States/South Carolina/North Charleston/164.252.74.34.bc.googleusercontent.com) show less	Bad Web Bot
🇳🇱 Alt255	2026-09-15 23:44:45 (1 day ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.74.252.164 - - [16/Sep/2026:01:44:45 +0200] "GET /.git/config HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" ... show less	Bad Web Bot Web App Attack
🇧🇬 Stoyko Stoykov	2026-09-15 23:38:11 (1 day ago)	34.74.252.164 - - [16/Sep/2026:02:38:10 +0300] "GET /document.php?modulepart=systemtools&file=../con ... show more 34.74.252.164 - - [16/Sep/2026:02:38:10 +0300] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" ... show less	Hacking Web App Attack
🇫🇷 tecnicorioja	2026-09-15 22:00:32 (2 days ago)	wp-login attack [15/Sep/2026:20:31:24	Brute-Force Web App Attack
🇹🇷 ycoskun41	2026-09-15 21:59:05 (2 days ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇿🇦 vanderhost	2026-09-15 21:54:01 (2 days ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.lo ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage/logs show less	Web App Attack Bad Web Bot
🇹🇼 tye	2026-09-15 21:41:09 (2 days ago)	Wazuh Alert Evidence: 34.74.252.164 (34.74.252.164) - - [16/Sep/2026:05:41:06 +0800] "GET /forgot-pa ... show more Wazuh Alert Evidence: 34.74.252.164 (34.74.252.164) - - [16/Sep/2026:05:41:06 +0800] "GET /forgot-password HTTP/1.1" 404 5200 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" show less	Web App Attack
🇷🇴 clauss	2026-09-15 21:34:11 (2 days ago)	34.74.252.164 - - [16/Sep/2026:00:33:58 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 ... show more 34.74.252.164 - - [16/Sep/2026:00:33:58 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.74.252.164 - - [16/Sep/2026:00:34:11 +0300] "GET /config.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" ... show less	Web App Attack
Anonymous	2026-09-15 21:15:03 (2 days ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 21:12:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.74.252.164 (164.252.74.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.74.252.164 (164.252.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:12:29.251402 2026] [security2:error] [pid 21459:tid 21459] [client 34.74.252.164:57940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thecalls.net"] [uri "/.//.env"] [unique_id "aqm0vbZ1e34tf1l5gu1ULAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 zumbo.net	2026-09-15 20:49:28 (2 days ago)	[Tue Sep 15 23:49:26.287851 2026] [proxy_fcgi:error] [pid 476949:tid 476967] [client 34.74.252.164:0 ... show more [Tue Sep 15 23:49:26.287851 2026] [proxy_fcgi:error] [pid 476949:tid 476967] [client 34.74.252.164:0] AH01071: Got error 'Primary script unknown' [Tue Sep 15 23:49:27.636512 2026] [proxy_fcgi:error] [pid 476949:tid 476955] [client 34.74.252.164:0] AH01071: Got error 'Primary script unknown' [Tue Sep 15 23:49:27.694433 2026] [proxy_fcgi:error] [pid 476951:tid 476965] [client 34.74.252.164:0] AH01071: Got error 'Primary script unknown' [Tue Sep 15 23:49:27.763421 2026] [proxy_fcgi:error] [pid 476951:tid 477005] [client 34.74.252.164:0] AH01071: Got error 'Primary script unknown' [Tue Sep 15 23:49:27.855431 2026] [proxy_fcgi:error] [pid 476949:tid 476976] [client 34.74.252.164:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇬🇧 cg-design.co.uk	2026-09-15 20:38:53 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.74.252.164 (US/United States/164.252 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.74.252.164 (US/United States/164.252.74.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇰 HostingGroup	2026-09-15 20:36:53 (2 days ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 7. First blocked: 2026-09-15. show less	Bad Web Bot Web App Attack
Anonymous	2026-09-15 20:35:19 (2 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.114.19.195

🇺🇸 198.44.58.153

🇺🇦 176.103.5.169

🇺🇸 134.209.215.61

🇰🇷 124.254.255.178

🇨🇳 106.13.1.7

🇮🇩 36.64.131.68

🇺🇸 35.196.142.243

🇺🇸 35.196.133.73

🇩🇪 217.160.190.176

🇧🇷 200.106.183.4

🇺🇸 104.236.205.18

🇲🇾 47.250.194.152

🇺🇸 45.3.39.199

🇺🇸 35.196.129.239

🇺🇸 35.196.118.144

🇺🇸 35.196.1.67

🇹🇷 212.174.57.220

🇺🇸 212.108.113.92

🇧🇪 198.235.24.179