JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.148.252.207

Neutral Activity

Abuse Confidence Score

0% Low Risk

27 reports

20 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 207.252.148.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

27 from 20 distinct reporters

First reported

September 2nd 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇫🇷 France 2

Most common categories Web App Attack 2 Brute-Force 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-09-17 12:06:29 UTC · (1 month ago)	2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [apache-scan] Ban 34.148.252.207 2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [laravel-auth] Ban 34.148.252.207 2026-09-05 10:41:58,829 fail2ban.actions [ ... show more 2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [apache-scan] Ban 34.148.252.207 2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [laravel-auth] Ban 34.148.252.207 2026-09-05 10:41:58,829 fail2ban.actions [1796604]: NOTICE [laravel-env] Ban 34.148.252.207 2026-09-05 10:41:59,078 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 34.148.252.207 2026-09-05 10:41:59,104 fail2ban.actions [1796604]: NOTICE [apache-dirscan] Ban 34.148.252.207 ... show less	Brute-Force Web App Attack
🇫🇷 Catalin Negru	2026-09-14 07:18:39 UTC · (1 month ago)	2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [apache-scan] Ban 34.148.252.207 2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [laravel-auth] Ban 34.148.252.207 2026-09-05 10:41:58,829 fail2ban.actions [ ... show more 2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [apache-scan] Ban 34.148.252.207 2026-09-05 10:41:58,785 fail2ban.actions [1796604]: NOTICE [laravel-auth] Ban 34.148.252.207 2026-09-05 10:41:58,829 fail2ban.actions [1796604]: NOTICE [laravel-env] Ban 34.148.252.207 2026-09-05 10:41:59,078 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 34.148.252.207 2026-09-05 10:41:59,104 fail2ban.actions [1796604]: NOTICE [apache-dirscan] Ban 34.148.252.207 ... show less	Brute-Force Web App Attack
🇳🇱 Alt255	2026-09-11 12:26:52 UTC · (2 months ago)	34.148.252.207 - - \[05/Sep/2026:22:36:58 +0200\] "GET /dump.sql HTTP/1.1" 404 7982 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/124.0 Safari/537.36" 34.148.252.207 - - \[05/Sep/2026:22:36:58 +0200\] "GET /d ... show more 34.148.252.207 - - \[05/Sep/2026:22:36:58 +0200\] "GET /dump.sql HTTP/1.1" 404 7982 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/124.0 Safari/537.36" 34.148.252.207 - - \[05/Sep/2026:22:36:58 +0200\] "GET /database.sql HTTP/1.1" 404 7982 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/124.0 Safari/537.36" 34.148.252.207 - - \[05/Sep/2026:22:36:58 +0200\] "GET /db.sql HTTP/1.1" 404 7982 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/124.0 Safari/537.36" 34.148.252.207 - - \[05/Sep/2026:22:36:58 +0200\] "GET /backup.sql HTTP/1.1" 404 7982 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/124.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 service Informatique	2026-09-08 04:00:37 UTC · (2 months ago)	GET /phpinfo.php	Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-07 21:59:20 UTC · (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-06.	Web App Attack SSH Hacking
🇩🇪 Skyrider	2026-09-07 07:14:45 UTC · (2 months ago)	crowdsecurity/http-sensitive-files	Web App Attack
🇧🇾 lns.bz	2026-09-06 06:35:42 UTC · (2 months ago)	.env scanning [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 03:54:17 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.148.252.207 (207.252.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:54:11.678092 2026] [security2:error] [pid 30353:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.148.252.207 (207.252.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:54:11.678092 2026] [security2:error] [pid 30353:tid 30353] [client 34.148.252.207:59220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.landscapedesignworkshop.com"] [uri "/.env"] [unique_id "apzj492aL_wsqxPTc7W56wAAADI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-06 03:26:55 UTC · (2 months ago)	(mod_security) mod_security (id:949110) triggered by 34.148.252.207 (US/United States/207.252.148.34.bc.googleusercontent.com): N in the last X secs	Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 02:49:48 UTC · (2 months ago)	(mod_security) mod_security (id:210730) triggered by 34.148.252.207 (207.252.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:49:41.444074 2026] [security2:error] [pid 26270:ti ... show more (mod_security) mod_security (id:210730) triggered by 34.148.252.207 (207.252.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:49:41.444074 2026] [security2:error] [pid 26270:tid 26270] [client 34.148.252.207:40464] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|epicjellyfish.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "epicjellyfish.com"] [uri "/dump.sql"] [unique_id "apzUxcobEONrF2TNWXRKZQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-06 01:58:18 UTC · (2 months ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.148.252.207 (US/United States/207.252.148.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.148.252.207 - - [06/Sep/2026:0 ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.148.252.207 (US/United States/207.252.148.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.148.252.207 - - [06/Sep/2026:03:58:14 +0200] "GET /.env HTTP/1.1" 406 4831 "-" "crusader-worker/1.0" 34.148.252.207 - - [06/Sep/2026:03:58:14 +0200] "GET /.env.local HTTP/1.1" 406 4830 "-" "crusader-worker/1.0" 34.148.252.207 - - [06/Sep/2026:03:58:14 +0200] "GET /.env.example HTTP/1.1" 406 4830 "-" "crusader-worker/1.0" show less	Port Scan
🇺🇸 mnsf	2026-09-06 00:05:38 UTC · (2 months ago)	Scanning/Probing (20)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-05 23:47:47 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.148.252.207 (207.252.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:47:40.147367 2026] [security2:error] [pid 1814:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.148.252.207 (207.252.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:47:40.147367 2026] [security2:error] [pid 1814:tid 1814] [client 34.148.252.207:40276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "help.go4food.com"] [uri "/.env.old"] [unique_id "apyqHC8nBB7CXehDwJ4cOAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-05 23:37:21 UTC · (2 months ago)	34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.save HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.14 ... show more 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.save HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.prod HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.207 - - [05/Sep/2026:18:37:21 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 34.148.252.207 34.148.252.20 ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-09-05 23:22:05 UTC · (2 months ago)	Aggressive web search of vulnerable pages: /.env.local /.env /backup.tar.gz /backup.zip /dump.tar.gz /phpinfo.php /db.sql ...	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.178.246.43

🇧🇪 198.235.24.244

🇬🇧 194.50.235.146

🇫🇮 193.187.110.205

🇰🇷 175.202.119.34

🇺🇸 108.53.100.38

🇳🇱 77.67.26.83

🇺🇸 62.146.171.93

🇲🇽 187.132.201.162

🇺🇸 172.203.134.70

🇰🇷 34.50.37.26

🇮🇹 194.20.240.24

🇳🇱 192.253.248.222

🇺🇸 172.217.115.4

🇨🇦 85.217.149.2

🇳🇱 77.239.124.61

🇩🇪 193.124.20.238

🇺🇸 172.236.228.224

🇷🇴 92.118.39.56

🇩🇪 69.5.169.139