High Risk
IP 34.187.109.111 rated at threat level 8/10 based on 28 security reports.
Pattern analysis reveals concerning activity. Confidence: 100%.
More threatening than 90% of monitored IPs
IP Address
34.187.109.111
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
The Netherlands
Location
Google LLC
ASN 396982
28
Reports
Mixed
Data Source
Threat Categories
Web App Attack
27
SQL Injection
14
Bad Web Bot
7
WP Version Scanning
2
WP Plugin Scanning
2
WP Config Exposure
2
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
4. October 2026
Last Activity
5. October 2026
Recent (7 days)
28 incidents
Cloud Infrastructure
This IP operates from Google Cloud Platform cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
4. Oct 2026 - 5. Oct 2026
100%
Current
Stable
Trend
Security Reports (28)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | Web App Attack | Honeypot | 75% |
| New | Web App Attack | Honeypot | 75% |
| New | Web App Attack | Honeypot | 75% |
| New | Web App Attack SQL Injection | Honeypot x2 | 75% |
| New | Bad Web Bot Web App Attack | Community x3 | 75% |
| New | WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | Web App Attack | Honeypot | 75% |
| New | Web App Attack | Honeypot | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | SQL Injection Web App Attack | Honeypot x2 | 75% |
| New | WP Plugin Scanning WP Version Scanning WP Config Exposure +2 | Community x2 | 75% |
| New | Bad Web Bot Web App Attack | Community x2 | 75% |
Technical Details
Basic Information
- IP Address
- 34.187.109.111
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NL
- ASN
- AS396982
- ISP
- Google LLC
DNS Information
- Reverse DNS
- 111.109.187.34.bc.googleusercontent.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 28
- First Reported
- 4 Oct 2026
- Last Reported
- 5 Oct 2026, 14:48
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS396982
Google LLC
JP
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
4,147
Total IPs Monitored
193,206
Total Reports
46.6
Reports per IP
Network Context
This IP address belongs to Google LLC (AS396982), which manages 4,147 IP addresses in our monitoring system. Out of these, 193,206 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 823,902 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
28
avg: 9
++
Network Comparison
Compared against 44,912 IPs in ASN 396982
Threat Level
8/10
network avg: 6.6
+
Total Reports
28
network avg: 10
++
Network Google LLC has overall threat level 2/10
Geographic Comparison
Compared against 17,759 IPs in NL
Threat Level
8/10
country avg: 6.3
+
Total Reports
28
country avg: 30
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
5 Oct 2026
25 reports
Daily Average
0.9
reports/day
Most Active
Monday
25 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
27
SQL Injection
14
Bad Web Bot
7
WP Plugin Scanning
2
WP Version Scanning
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
748,920 threat incidents tracked globally • Last 24h: 29,879 Logs
FEED
Top Threat Sources
-
01
United States146,573 19.6% -
02
Brazil111,456 14.9%
-
03
India85,290 11.4%
-
04
China45,695 6.1%
-
05
SC29,248 3.9%
-
06
Germany18,075 2.4%
-
07
Netherlands17,759 2.4%
-
08
Pakistan17,426 2.3%
-
09
Argentina16,241 2.2%
-
10
Colombia15,161 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
136.92.16.48
8/10
Confidence
100%
Reports
231
Location
DE
DE
136.90.54.236
8/10
Confidence
100%
Reports
216
Location
US
US
136.90.53.160
8/10
Confidence
100%
Reports
138
Location
US
US
136.90.48.99
8/10
Confidence
100%
Reports
136
Location
US
US
136.90.54.222
8/10
Confidence
100%
Reports
130
Location
US
US
34.26.152.184
10/10
Confidence
100%
Reports
129
Location
US
US
146.148.121.136
8/10
Confidence
100%
Reports
123
Location
BE
BE
207.175.213.233
10/10
Confidence
100%
Reports
121
Location
BE
BE
35.247.221.203
10/10
Confidence
100%
Reports
114
Location
BR
BR
136.90.15.166
8/10
Confidence
100%
Reports
110
Location
US
US
136.92.26.87
10/10
Confidence
100%
Reports
96
Location
DE
DE
136.90.54.131
8/10
Confidence
100%
Reports
87
Location
US
US
34.138.241.105
10/10
Confidence
100%
Reports
86
Location
US
US
35.240.100.200
8/10
Confidence
100%
Reports
85
Location
BE
BE
207.175.220.59
8/10
Confidence
100%
Reports
80
Location
BE
BE
207.175.13.72
8/10
Confidence
100%
Reports
77
Location
BE
BE
35.241.202.92
10/10
Confidence
100%
Reports
72
Location
BE
BE
136.90.54.202
8/10
Confidence
100%
Reports
71
Location
US
US
35.253.98.46
10/10
Confidence
100%
Reports
70
Location
US
US
34.156.22.151
8/10
Confidence
100%
Reports
66
Location
BE
BE
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.92.40.236
8/10
Confidence
100%
Reports
134
ISP
TechTies Inc.
94.154.43.203
8/10
Confidence
100%
Reports
92
ISP
Storm Industrie...
45.148.10.151
10/10
Confidence
100%
Reports
69
ISP
Techoff Srv Lim...
94.154.43.223
8/10
Confidence
100%
Reports
34
ISP
Storm Industrie...
94.154.43.70
8/10
Confidence
100%
Reports
26
ISP
Storm Industrie...
51.124.112.121
10/10
Confidence
100%
Reports
21
ISP
Microsoft Corpo...
45.134.225.48
8/10
Confidence
100%
Reports
19
ISP
ColocaTel Inc.
20.229.185.186
10/10
Confidence
100%
Reports
19
ISP
Microsoft Corpo...
167.99.210.137
8/10
Confidence
100%
Reports
17
ISP
DigitalOcean, LLC
174.138.12.72
10/10
Confidence
100%
Reports
17
ISP
DigitalOcean, LLC
188.166.29.60
10/10
Confidence
100%
Reports
16
ISP
DigitalOcean, LLC
51.124.186.154
8/10
Confidence
100%
Reports
14
ISP
Microsoft Corpo...
94.154.43.180
8/10
Confidence
99%
Reports
13
ISP
Storm Industrie...
89.42.231.200
8/10
Confidence
98%
Reports
1,259
ISP
Amarutu Technol...
130.12.180.48
10/10
Confidence
98%
Reports
203
ISP
Omegatech LTD
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.177.179.195
10/10
Confidence
100%
Reports
1,127
Location
TW
TW
213.209.159.208
10/10
Confidence
100%
Reports
975
Location
DE
DE
195.178.110.232
10/10
Confidence
100%
Reports
356
Location
BG
BG
80.94.92.234
10/10
Confidence
100%
Reports
288
Location
RO
RO
61.19.246.157
10/10
Confidence
100%
Reports
270
Location
TH
TH
165.227.15.209
8/10
Confidence
100%
Reports
269
Location
US
US
94.23.66.112
10/10
Confidence
100%
Reports
254
Location
FR
FR
136.92.16.48
8/10
Confidence
100%
Reports
231
Location
DE
DE
2.57.122.150
10/10
Confidence
100%
Reports
217
Location
RO
RO
136.90.54.236
8/10
Confidence
100%
Reports
216
Location
US
US
219.92.37.221
10/10
Confidence
100%
Reports
202
Location
MY
MY
210.87.97.90
10/10
Confidence
100%
Reports
183
Location
ID
ID
185.177.72.128
10/10
Confidence
100%
Reports
165
Location
FR
FR
95.58.221.186
10/10
Confidence
100%
Reports
165
Location
KZ
KZ
103.186.21.148
10/10
Confidence
100%
Reports
153
Location
BD
BD