JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

8.234.191.94

Activity Trending Down

Abuse Confidence Score

33% Elevated

28 reports

25 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 94.191.234.8.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Washington, District of Columbia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

28 from 25 distinct reporters

First reported

September 11th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 5 🇫🇷 France 3 🇳🇱 Netherlands 3

Most common categories Web App Attack 18 Bad Web Bot 9 Brute-Force 8 Hacking 6 Port Scan 3

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 marvan51	2026-09-14 12:47:38 UTC · (1 month ago)	Automated block report by Blog MMM security audit: ATTACK_ATTEMPT_PATH_TRAVERSAL	Bad Web Bot
🇩🇰 HostingGroup	2026-09-13 17:21:53 UTC · (1 month ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-09-13.	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-09-13 17:16:35 UTC · (1 month ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 8.234.191.94 (US/United States/94.191.234.8.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 8.234.191.94 - - [13/Sep/2026:19:16:33 +0200 ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 8.234.191.94 (US/United States/94.191.234.8.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 8.234.191.94 - - [13/Sep/2026:19:16:33 +0200] "GET /bless.php HTTP/2.0" 200 4802 "http://lidotrocadero.com/bless.php#888xyz999" "Go-http-client/2.0" "8.234.191.94" host=lidotrocadero.com show less	Port Scan
🇫🇷 masterguru	2026-09-13 16:52:42 UTC · (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197)	Bad Web Bot
🇸🇪 vaia.cloud	2026-09-13 16:45:01 UTC · (1 month ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-13 16:30:04 UTC · (1 month ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 maxpower	2026-09-13 16:29:03 UTC · (1 month ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 8.234.191.94 (US/United States/94.191.234.8.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 8.234.191.94 - - [13/Sep/2026:18:29:00 +0200 ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 8.234.191.94 (US/United States/94.191.234.8.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 8.234.191.94 - - [13/Sep/2026:18:29:00 +0200] "GET /bless.php HTTP/2.0" 200 4804 "http://marialauracaselli.com/bless.php#888xyz999" "Go-http-client/2.0" "8.234.191.94" host=marialauracaselli.com show less	Port Scan
🇩🇪 snhosting	2026-09-13 06:05:22 UTC · (1 month ago)	8.234.191.94 - - [13/Sep/2026:08:05:11 +0200] "GET /static../.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 8.234.191.94 - - [13/Sep/2026:08:05:12 ... show more 8.234.191.94 - - [13/Sep/2026:08:05:11 +0200] "GET /static../.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 8.234.191.94 - - [13/Sep/2026:08:05:12 +0200] "GET /media../.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; rv:143.7) Gecko/20100101 Firefox/143.7; compatible; TelegramBot/1.0" 8.234.191.94 - - [13/Sep/2026:08:05:12 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 200 1618 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 8.234.191.94 - - [13/Sep/2026:08:05:12 +0200] "GET /.env HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/151.0.4940.53 Safari/537.36" 8.234.191.94 - - [13/Sep/2026:08:05:12 +0200] "GET /.env.local HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (X11; Linu ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇺🇸 gu-alvareza	2026-09-13 05:06:54 UTC · (1 month ago)	Vite.server.fs.deny.raw.Arbitrary.File.Read	Hacking
🇳🇱 Alt255	2026-09-13 04:47:55 UTC · (1 month ago)	[ti-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 8.234.191.94 - - [13/Sep/2026:06:47:54 +0200] "GET /static../.env HTTP/1.1" 404 6821 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); com ... show more [ti-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 8.234.191.94 - - [13/Sep/2026:06:47:54 +0200] "GET /static../.env HTTP/1.1" 404 6821 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" ... show less	Bad Web Bot Web App Attack
🇫🇷 service Informatique	2026-09-13 04:00:37 UTC · (1 month ago)	GET /wp-json	Web App Attack
🇮🇳 Shubham Kumar	2026-09-13 02:07:13 UTC · (1 month ago)	Repeated scrape-guard abuse (flag #0)	Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 00:08:55 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 8.234.191.94 (94.191.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 20:08:48.134212 2026] [security2:error] [pid 13786:tid 13 ... show more (mod_security) mod_security (id:210492) triggered by 8.234.191.94 (94.191.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 20:08:48.134212 2026] [security2:error] [pid 13786:tid 13786] [client 8.234.191.94:2270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.142"] [uri "/static../.env"] [unique_id "aqXpkHhdUISyGcQe_zO06gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-09-12 18:27:19 UTC · (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇮🇩 PENJAGA.AUM	2026-09-12 17:21:17 UTC · (1 month ago)	8.234.191.94 - Attack: Common web attack - /%2e%2e/%2e%2e/.env	Web App Attack SQL Injection Spoofing

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 187.182.238.137

🇺🇸 184.99.24.98

🇺🇸 172.56.144.27

🇺🇸 162.216.149.104

🇭🇳 154.12.110.195

🇳🇱 109.160.32.106

🇺🇸 71.65.78.168

🇺🇸 65.49.1.152

🇻🇳 58.186.20.101

🇺🇸 52.190.196.193

🇦🇷 190.229.30.201

🇨🇳 183.160.249.217

🇦🇺 144.138.249.162

🇺🇸 104.248.210.24

🇿🇦 102.130.49.150

🇸🇪 80.248.233.39

🇺🇸 74.102.227.40

🇺🇸 68.207.80.188

🇺🇸 67.175.232.123

🇲🇾 47.250.112.250