104.154.74.107 ip adresi nereye ait?

Merhabalar,

Sitem 503 hatası vermeye başlayınca hata loglarına baktım ve sürekli 104.154.74.107 adresinden giriş yapılmaya çalışıldığını anladım. Sanırım bir saldırı yiyor site ancak bu ip adresini arattığımda google a ait olduğunu görüyorum. Sizce de böyle mi bu ip adresi bir saldırımı yoksa google botları mı?

Teşekkür ederim.

https://www.yoncu.com/ip/104.154.74.107

IP Adresinin Sahibi:
Route : 104.154.0.0/15
Descr : Google
Origin : 15169
Notify : radb-contact@google.com
Mnt By : MAINT-AS15169
Source : RADB

IP Adresini Kullanan:
NetRange : 104.0.0.0 - 104.255.255.255
CIDR : 104.0.0.0/8
NetName : NET104
NetHandle : NET-104-0-0-0-0
Parent : ()
NetType : Allocated to ARIN
Organization : American Registry for Internet Numbers (ARIN)
RegDate : 2011-02-03
Ref : https://whois.arin.net/rest/net/NET-104-0-0-0-0
Source : ARIN

Noktalı Format : 104.154.74.107
Sayısal Format : 1754942059
Kullanılan Ülke : -
Para Birimi : -
Ülke Başkenti :

Queried whois.arin.net with "n 104.154.74.107"...

NetRange: 104.154.0.0 - 104.155.255.255
CIDR: 104.154.0.0/15
NetName: GOOGLE-CLOUD
NetHandle: NET-104-154-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS15169
Organization: Google Inc. (GOOGL-2)
RegDate: 2014-07-09
Updated: 2015-09-21
Comment: ** The IP addresses under this netblock are in use by Google Cloud customers **
Comment:
Comment: Direct all copyright and legal complaints to
Comment: https://support.google.com/legal/go/report
Comment:
Comment: Direct all spam and abuse complaints to
Comment: https://support.google.com/code/go/gce_abuse_report
Comment:
Comment: For fastest response, use the relevant forms above.
Comment:
Comment: Complaints can also be sent to the GC Abuse desk
Comment: (google-cloud-compliance@google.com)
Comment: but may have longer turnaround times.
Comment:
Comment: Complaints sent to any other POC will be ignored.
Ref: https://whois.arin.net/rest/net/NET-104-154-0-0-1



OrgName: Google Inc.
OrgId: GOOGL-2
Address: 1600 Amphitheatre Parkway
City: Mountain View
StateProv: CA
PostalCode: 94043
Country: US
RegDate: 2006-09-29
Updated: 2017-01-28
Comment: *** The IP addresses under this Org-ID are in use by Google Cloud customers ***
Comment:
Comment: Direct all copyright and legal complaints to
Comment: https://support.google.com/legal/go/report
Comment:
Comment: Direct all spam and abuse complaints to
Comment: https://support.google.com/code/go/gce_abuse_report
Comment:
Comment: For fastest response, use the relevant forms above.
Comment:
Comment: Complaints can also be sent to the GC Abuse desk
Comment: (google-cloud-compliance@google.com)
Comment: but may have longer turnaround times.
Comment:
Comment: Complaints sent to any other POC will be ignored.
Ref: https://whois.arin.net/rest/org/GOOGL-2


OrgAbuseHandle: GCABU-ARIN
OrgAbuseName: GC Abuse
OrgAbusePhone: +1-650-253-0000
OrgAbuseEmail: google-cloud-compliance@google.com
OrgAbuseRef: https://whois.arin.net/rest/poc/GCABU-ARIN

OrgTechHandle: ZG39-ARIN
OrgTechName: Google Inc
OrgTechPhone: +1-650-253-0000
OrgTechEmail: arin-contact@google.com
OrgTechRef: https://whois.arin.net/rest/poc/ZG39-ARIN

OrgNOCHandle: GCABU-ARIN
OrgNOCName: GC Abuse
OrgNOCPhone: +1-650-253-0000
OrgNOCEmail: google-cloud-compliance@google.com
OrgNOCRef: https://whois.arin.net/rest/poc/GCABU-ARIN
DNS records

name class type data time to live
107.74.154.104.bc.googleusercontent.com IN A 104.154.74.107 86400s (1.00:00:00)
googleusercontent.com IN TYPE257
[no interpretation available]
hex dump:
(15 bytes)
00 05 69 73 73 75 65 70 ..issuep
6B 69 2E 67 6F 6F 67 ki.goog
86400s (1.00:00:00)
googleusercontent.com IN NS ns4.google.com 345600s (4.00:00:00)
googleusercontent.com IN NS ns1.google.com 345600s (4.00:00:00)
googleusercontent.com IN TXT v=spf1 include:_spf.google.com ?all 3600s (01:00:00)
googleusercontent.com IN TYPE257
[no interpretation available]
hex dump:
(19 bytes)
00 05 69 73 73 75 65 73 ..issues
79 6D 61 6E 74 65 63 2E ymantec.
63 6F 6D com
86400s (1.00:00:00)
googleusercontent.com IN NS ns2.google.com 345600s (4.00:00:00)
googleusercontent.com IN SOA
server: ns4.google.com
email: dns-admin@google.com
serial: 158259565
refresh: 900
retry: 900
expire: 1800
minimum ttl: 60
60s (00:01:00)
googleusercontent.com IN NS ns3.google.com 345600s (4.00:00:00)
107.74.154.104.in-addr.arpa IN PTR 107.74.154.104.bc.googleusercontent.com 120s (00:02:00)
107.74.154.104.in-addr.arpa IN RRSIG
type covered: PTR (12)
algorithm: RSA/SHA-256 (8)
labels: 6
original ttl: 120 (00:02:00)
signature expiration: 2017-06-13 22:52:00Z
signature inception: 2017-06-05 22:52:00Z
key tag: 47826
signer's name: 74.154.104.in-addr.arpa
signature:
(1024 bits)
AD79AE9A7B31811AE12F06D9970CF6C4
D2B6C0DFE5A2F8FAE1DBB8F89308574D
DF1E95B228E8B78DF9D9044D10B69545
D70E576DEAF843BB57F3A3794AF92FDD
69BEECE142F9FA74615868EF70E75E80
DC56E43989B3E8A3C7C03F8EB13F7FC2
4FC568AE67176DE47E321C695C2FA6E2
EDAE05F82BBE93D965AAED3DF3BC13F3
120s (00:02:00)
74.154.104.in-addr.arpa IN NS ns-gce-public1.googledomains.com 21600s (06:00:00)
74.154.104.in-addr.arpa IN NS ns-gce-public2.googledomains.com 21600s (06:00:00)
74.154.104.in-addr.arpa IN NS ns-gce-public3.googledomains.com 21600s (06:00:00)
74.154.104.in-addr.arpa IN NS ns-gce-public4.googledomains.com 21600s (06:00:00)
74.154.104.in-addr.arpa IN RRSIG
type covered: NS (2)
algorithm: RSA/SHA-256 (8)
labels: 5
original ttl: 21600 (06:00:00)
signature expiration: 2017-06-13 22:52:00Z
signature inception: 2017-06-05 22:52:00Z
key tag: 47826
signer's name: 74.154.104.in-addr.arpa
signature:
(1024 bits)
7F6A917698D2324623D93AA3404D212C
4EF05E2176E4A9942C51E1142AEF8E5D
D6C6FD06262FE70B237B6E685F8325A6
3A9CED0C126C9FDDE27AD5D06C7F1216
2BACC92E40222F034B2CD5986DA719D7
ABDB2711836A594D637841ECE3FB9881
E0E854C8F1D39A4773BB95073C0AC62D
D7B3354A802DA805AF74B63966D9685D
21600s (06:00:00)
74.154.104.in-addr.arpa IN SOA
server: ns-gce-public1.googledomains.com
email: cloud-dns-hostmaster@google.com
serial: 1
refresh: 21600
retry: 3600
expire: 259200
minimum ttl: 300
21600s (06:00:00)
74.154.104.in-addr.arpa IN RRSIG
type covered: SOA (6)
algorithm: RSA/SHA-256 (8)
labels: 5
original ttl: 21600 (06:00:00)
signature expiration: 2017-06-13 22:52:00Z
signature inception: 2017-06-05 22:52:00Z
key tag: 47826
signer's name: 74.154.104.in-addr.arpa
signature:
(1024 bits)
60434155015CF435958058633C191032
EDB70D8AB4952023BD6C39C654A3514D
34EB8240BD30AF2247A3A11B01FC93CE
C8CB29E0FDFA4036CF48C586194F566F
73DC3862276526278CAEAAF4939C7353
313F46D161CB95F0D8E058218B910920
52A266A342514CBC1DE932FB90348879
B4422D9B0FB4AE5F3332723821750B0F
21600s (06:00:00)
74.154.104.in-addr.arpa IN DNSKEY
flags: ZoneKey (256)
protocol: 3
algorithm: RSA/SHA-256 (8)
public key:
(1056 bits)
0301000198C013AC442A604671B3C793
D9D0BC5B0CB9D849D329F806F67B6B49
EC12654C458BDC219B611ED0D777AB70
5783D83D6E36DD737117A89358A139F1
72697F0378F29C41D8EF618D5825AFB6
94BC1553D68D75A45F200FF609EA6D14
E810C7D4A0A23B815543254FA6E3DE7D
6A53D87F9BD8589546EF81D290223117
CCC9649F
300s (00:05:00)
74.154.104.in-addr.arpa IN DNSKEY
flags: ZoneKey (256)
protocol: 3
algorithm: RSA/SHA-256 (8)
public key:
(1056 bits)
03010001BC7EB09B84816E15DF3CFA88
E7E8E17606E2586D017051166B2B5348
3E8B62A3C7D028E0ED1CE31C1BC585F5
9FD1EFB571BA7C60623A0C6CF2461249
3E408F8ED970265022EFD9B1016423FA
D6EA6F87F8106C6CDC8E9451DF205496
DF646C5F3E951F77573126DB93380872
4E9E48A6DF8FB98ED8DD62E2AEBE6807
C4EE0185
300s (00:05:00)
74.154.104.in-addr.arpa IN DNSKEY
flags: SecureEntryPoint, ZoneKey (257)
protocol: 3
algorithm: RSA/SHA-256 (8)
public key:
(2080 bits)
030100019D7C8B0D7942E1368144398F
A33B57F1317E6E8B7483FD69CBCDE9E6
172CFA374543C5897CC47B39B7607D77
5AB9C2E40A9A6A57FFC7C08685FAB467
0C18A26AA4F2A6B5296437F9B06D4CBE
2F2C94684EB663F793FDE49285FF5B7E
ACFAFD2AADC71454B96FD2C3654FFED8
07EF5C0CA803707CBA85E7E27CF214D8
65C96BB67F7B9255CAD9E21637EF200F
7B6C5D9AC2B5617210F9E7CECA22C6CF
02B1F8646290032215B93E4A07D35E50
5FD2A631A24E769EEF0FB2FFA3AA017D
F20875A85DAA5C78DA7CC79AD5D2063E
48E7FDF055614DFEC67D9662DD196BF2
1B15AE8B47C5BBE4831EE7B840653567
D55AC36306B518BFE1E31DAC62CCA252
B924DCE9
300s (00:05:00)
74.154.104.in-addr.arpa IN RRSIG
type covered: DNSKEY (48)
algorithm: RSA/SHA-256 (8)
labels: 5
original ttl: 300 (00:05:00)
signature expiration: 2017-06-13 22:52:00Z
signature inception: 2017-06-05 22:52:00Z
key tag: 13717
signer's name: 74.154.104.in-addr.arpa
signature:
(2048 bits)
2C89315B1780B258055560F037E7D91A
C600AC743F80E5622F66CF8C3452DE26
31524AFBCDC0C8A470F9908238D56704
E18C6F30E978820A880A0554E6C59C9E
BBCE4191AAD66255211D8ECC3F56B28B
CFE94038CDDA325F1B62E9244BEC9BB9
574145576040AD3947F14876FB3EC71C
7E7FAA22A08CEFC759E6268A2AECBEAE
D5977D8B21C6469192ECBED9FB302A69
7176908E441900D90DEDB67404F82BB6
6B3DA1E4A9251B9A0013A576E4143832
D2608223085167256CC3F8B629C1C7FE
B38FCCAD35663393102445B92039BFB9
2D8F9C48104A8D3C6F2CDC54F6F9630B
6D35CE56FEAA91F9EB232AC8994A1304
B501358DE607DC3E2C9F3804AC7A684A
300s (00:05:00)
74.154.104.in-addr.arpa IN NSEC3PARAM
hash algorithm: SHA-1 (1)
flags: None (0)
iterations: 1
salt:
(64 bits)
A7E1E0F8C8A02068
5s (00:00:05)
74.154.104.in-addr.arpa IN RRSIG
type covered: NSEC3PARAM (51)
algorithm: RSA/SHA-256 (8)
labels: 5
original ttl: 0 (00:00:00)
signature expiration: 2017-06-13 22:52:00Z
signature inception: 2017-06-05 22:52:00Z
key tag: 47826
signer's name: 74.154.104.in-addr.arpa
signature:
(1024 bits)
06509FDE70AD097AC1B8FAA9B0E8A954
A093BC099703ECAD0C83D553CEE48E70
DC3FFFEA5F83A6A694420BC44B9BCD62
BD3E5F0DA41E6B38FDDD23C6BC3DD819
31611F1D5909515545E3C464F359ED8C
4384B758CAEDD288C7FD91C6F227E283
4D095B6776174154EB2C7E1813FC7ABE
8DB087AEFEC2C277609FD58F21FC0A89
5s (00:00:05)
74.154.104.in-addr.arpa IN TYPE59
[no interpretation available]
hex dump:
(36 bytes)
35 95 08 02 C1 6F 2F B1 5....o/.
54 48 93 79 41 EB D8 32 TH.yA..2
1C 7A D6 C8 8D 9E 17 AB .z......
A3 40 68 2D 10 1E 89 19 .@h-....
9E 33 F7 72 .3.r
300s (00:05:00)
74.154.104.in-addr.arpa IN RRSIG
type covered: TYPE59 (59)
algorithm: RSA/SHA-256 (8)
labels: 5
original ttl: 300 (00:05:00)
signature expiration: 2017-06-13 22:52:00Z
signature inception: 2017-06-05 22:52:00Z
key tag: 47826
signer's name: 74.154.104.in-addr.arpa
signature:
(1024 bits)
AE3A1177FAFEAD631A7DE698B2F257EC
761D6388BE65E175B4B15F16DEE491C5
DB4EC2360041968E123E66724F668AAE
DEB979073B4D67D79C7F9671C80E5B46
0BF1DD0986208A61B6243932851077D7
045F977EDA12DAABB80FFBA63F57898D
BACA5BE74505C426D276062A83117114
CF35BD5A8F9E6FB37FC6C1706BB9AE9A
300s (00:05:00)
-

Yani google bot mu hocam anlamadım ?

Kısacası bu googleusercontent.com
internet sitelerinin önizlemelerini kaydedip kullanıcılarına değişmiş olan sayfaların eski hallerini görme imkanı sunar usercontent.

Bu ip adresini engelleyince cpu kullanımı %90 dan %9 a düştü

Yani bu ip adresini engellersem siteme bir zararı olur mu ? Çünkü engellediğim an düzeliyor.

Cevabını bilen yok mu :)