JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.121.199.252

34.121.199.252 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 66%: ?

66%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	252.199.121.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.121.199.252

Whois 34.121.199.252

IP Abuse Reports for 34.121.199.252:

This IP address has been reported a total of 37 times from 11 distinct sources. 34.121.199.252 was first reported on June 14th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ChamberofCommerce.com	2026-06-21 18:01:29 (10 hours ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇫🇷 bigorre.org	2026-06-21 10:36:28 (18 hours ago)	unidentified crawl, no bot reference in user agent	Bad Web Bot
Anonymous	2026-06-21 09:19:48 (19 hours ago)	FortiWeb WAF: 102 attacks detected. Threat Score: 35800. Types: Client Management(51), Block IP List ... show more FortiWeb WAF: 102 attacks detected. Threat Score: 35800. Types: Client Management(51), Block IP List(51). Origin: United States. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 19:25:07 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.121.199.252 (252.199.121.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.121.199.252 (252.199.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:25:02.631915 2026] [security2:error] [pid 18670:tid 18670] [client 34.121.199.252:35294] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bahamascruisersguide.com\|F\|2"] [data ".seaworthy.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bahamascruisersguide.com"] [uri "/Useful-Links/\\xe2\\x80\\xa2<br />http:/www.seaworthy.com"] [unique_id "ajbpDmJxwsRLSAvY1AAgwAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 06:24:34 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.121.199.252 (252.199.121.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.121.199.252 (252.199.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 02:24:27.131892 2026] [security2:error] [pid 32643:tid 32643] [client 34.121.199.252:35178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomkennels.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/[email protected]"] [unique_id "ajYyG6rDSkJhTpk0-BMnCgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 03:26:24 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.121.199.252 (252.199.121.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.121.199.252 (252.199.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 23:26:18.619042 2026] [security2:error] [pid 26414:tid 26439] [client 34.121.199.252:59024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aafm.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "ajYIWgkmzL8PWvjtDfuq0AAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-06-19 17:04:39 (2 days ago)	unidentified crawl, no bot reference in user agent	Bad Web Bot
🇮🇩 sockominfo	2026-06-19 14:00:14 (2 days ago)	Webshell discovery success (Response: 200). Threat Score: 8.1/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.1/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-06-19 13:00:09 (2 days ago)	Webshell discovery success (Response: 200). Threat Score: 8.3/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.3/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-06-19 11:00:10 (2 days ago)	Webshell discovery success (Response: 200). Threat Score: 8.2/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.2/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
Anonymous	2026-06-19 09:21:59 (2 days ago)	FortiWeb WAF: 138 attacks detected. Threat Score: 17000. Types: Client Management(69), Block IP List ... show more FortiWeb WAF: 138 attacks detected. Threat Score: 17000. Types: Client Management(69), Block IP List(69). Origin: United States. show less	Web App Attack
🇮🇩 sockominfo	2026-06-19 00:00:28 (3 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇩 sockominfo	2026-06-18 23:00:09 (3 days ago)	Webshell discovery success (Response: 200). Threat Score: 8.4/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.4/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇫🇷 bigorre.org	2026-06-18 15:03:30 (3 days ago)	unidentified crawl, no bot reference in user agent	Bad Web Bot
Anonymous	2026-06-18 04:01:59 (4 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::a1

🇹🇼 220.133.15.82

🇫🇷 213.210.20.217

🇳🇱 193.176.31.150

🇬🇧 193.163.125.252

🇧🇷 186.251.71.202

🇹🇭 165.154.51.90

🇩🇪 156.236.31.85

🇨🇳 124.116.169.30

🇫🇷 91.231.89.81

🇺🇸 4.150.191.6

🇦🇷 190.137.17.138

🇺🇸 170.9.225.197

🇺🇸 91.230.168.129

🇫🇷 91.196.152.211

🇺🇸 69.164.217.245

🇺🇸 45.79.82.114

🇩🇪 43.228.157.152

🇨🇦 20.220.166.196

🇺🇸 20.80.88.160