JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.80.104.254

Activity Trending Down

Abuse Confidence Score

50% Elevated

14 reports

9 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 254.104.80.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇹🇼 Taiwan
City: Taipei, Taiwan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

14 from 9 distinct reporters

First reported

November 2nd 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 7 🇳🇱 Netherlands 3 🇧🇾 Belarus 1

Most common categories Web App Attack 13 Brute-Force 7 Bad Web Bot 7 Hacking 4 SQL Injection 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-11-04 22:59:11 UTC · (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-03.	Web App Attack SSH Hacking
🇪🇸 masterguru	2026-11-04 02:15:22 UTC · (1 week ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)	Hacking
Anonymous	2026-11-04 01:40:10 UTC · (1 week ago)	\| [Dangerous/Taiwan] Aggressive IP 34.80.104.254 (~30 hits). Type: DoS Defender- Web server 400 error code	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-11-03 21:44:36 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:44:28.943919 2026] [security2:error] [pid 1461:tid 1 ... show more (mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:44:28.943919 2026] [security2:error] [pid 1461:tid 1461] [client 34.80.104.254:47958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bella-vista.com"] [uri "/.git/config"] [unique_id "aupVvFv4oJ2Fy6rVa1jvhwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-11-03 17:18:20 UTC · (1 week ago)	.env scanning [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 15:29:42 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:29:37.173323 2026] [security2:error] [pid 1824:tid 1 ... show more (mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:29:37.173323 2026] [security2:error] [pid 1824:tid 1824] [client 34.80.104.254:52452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belize-boat-registration.com"] [uri "/.git/config"] [unique_id "aun94VyHiPXxTQz4BHeZNQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 12:04:24 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:04:16.466112 2026] [security2:error] [pid 27505:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:04:16.466112 2026] [security2:error] [pid 27505:tid 27505] [client 34.80.104.254:36940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belintxon.com"] [uri "/.git/config"] [unique_id "aunNwHBDx_b6SvZtKaWmmQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-11-03 09:50:04 UTC · (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Alt255	2026-11-03 07:44:18 UTC · (1 week ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.80.104.254 - - [03/Nov/2026:08:44:02 +0100] "GET /.git/config HTTP/1.1" 301 626 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.80.104.254 - - [03/Nov/2026:08:44:02 +0100] "GET /.git/config HTTP/1.1" 301 626 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-11-03 04:17:55 UTC · (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-11-03 02:43:08 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:43:01.856933 2026] [security2:error] [pid 8810:tid 8 ... show more (mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:43:01.856933 2026] [security2:error] [pid 8810:tid 8810] [client 34.80.104.254:47560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burdetteconsulting.com"] [uri "/.git/config"] [unique_id "aulKNQr18KDUyvnptcHLugAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-02 15:35:15 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:35:10.485882 2026] [security2:error] [pid 20893:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:35:10.485882 2026] [security2:error] [pid 20893:tid 20893] [client 34.80.104.254:43342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burnbuns.com"] [uri "/.git/config"] [unique_id "auitroljMTfg54IEJUQhvQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-02 13:05:25 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:05:19.102309 2026] [security2:error] [pid 30621:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.80.104.254 (254.104.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:05:19.102309 2026] [security2:error] [pid 30621:tid 30621] [client 34.80.104.254:36566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burlison.com"] [uri "/.git/config"] [unique_id "auiKj_9wBgBl4-RRb8uCPAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Sonoflet	2026-11-02 06:12:36 UTC · (1 week ago)	CrowdSec detection \| scenario: http-sensitive-files	Web App Attack Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2001:4860:482a:600::

🇦🇷 186.148.226.235

🇺🇸 162.216.150.7

🇮🇳 106.220.225.105

🇺🇸 104.28.202.184

🇧🇩 103.113.194.118

🇺🇸 62.151.180.122

🇳🇱 45.156.87.155

🇧🇷 201.40.179.200

🇳🇱 86.38.187.92

🇳🇱 77.239.124.130

🇫🇷 51.75.27.218

🇸🇬 47.237.210.16

🇳🇱 45.148.10.141

🇺🇸 37.19.66.212

🇬🇧 31.14.254.57

🇪🇬 197.163.30.129

🇳🇱 195.178.110.232

🇧🇷 154.80.128.161

🇺🇸 104.28.196.78