JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.166.52.2

34.166.52.2 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 99%: ?

99%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	2.52.166.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇦 Saudi Arabia
City	Dammam, Eastern Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.166.52.2

Whois 34.166.52.2

IP Abuse Reports for 34.166.52.2:

This IP address has been reported a total of 27 times from 19 distinct sources. 34.166.52.2 was first reported on October 15th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 robotstxt	2026-10-17 10:09:56 (4 days ago)	34.166.52.2 - - [17/Oct/2026:10:09:18 +0000] "GET /.env HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh ... show more 34.166.52.2 - - [17/Oct/2026:10:09:18 +0000] "GET /.env HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.166.52.2" 34.166.52.2 - - [17/Oct/2026:10:09:19 +0000] "GET /.env.local HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.166.52.2" 34.166.52.2 - - [17/Oct/2026:10:09:19 +0000] "GET /.env.production HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.166.52.2" 34.166.52.2 - - [17/Oct/2026:10:09:20 +0000] "GET /.env.staging HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.166.52.2" 34.166.52.2 - - [17/Oct/2026:10:09:20 +0000] "GET /.env.development HTTP/1.1" 403 31 "-" "Mozil ... show less	Web App Attack
🇳🇱 Site.eu	2026-10-17 09:12:12 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 homeshowdomain.nl	2026-10-16 22:01:35 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-15. show less	Web App Attack SSH Hacking
🇬🇧 Apache	2026-10-16 13:27:52 (5 days ago)	(mod_security) mod_security (id:920500) triggered by 34.166.52.2 (SA/Saudi Arabia/2.52.166.34.bc.goo ... show more (mod_security) mod_security (id:920500) triggered by 34.166.52.2 (SA/Saudi Arabia/2.52.166.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-10-16 13:11:33 (5 days ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/2.52.166.34.bc.googleusercontent. ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/2.52.166.34.bc.googleusercontent.com show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 13:10:29 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:10:23.400185 2026] [security2:error] [pid 11306:tid 11306] [client 34.166.52.2:45408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dandemonium.net"] [uri "/.git/config"] [unique_id "atIiP4K-xWKPqG_sqRsY9wAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 12:07:52 (5 days ago)	(mod_security) mod_security (id:949110) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:949110) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:07:46.591944 2026] [security2:error] [pid 23198:tid 23198] [client 34.166.52.2:39006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "danchujkoassoc.com"] [uri "/.git/config"] [unique_id "atITkiLjvbDjs6autJs1agAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-10-16 11:50:47 (5 days ago)	[16/Oct/2026:14:50:47 +0300] -- 34.166.52.2 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/c ... show more [16/Oct/2026:14:50:47 +0300] -- 34.166.52.2 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 10:49:41 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:49:37.402828 2026] [security2:error] [pid 16810:tid 16810] [client 34.166.52.2:35104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dance4ovations.com"] [uri "/.git/config"] [unique_id "atIBQeLFkIZQsDjyh6oFVAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-10-16 10:49:19 (5 days ago)	[Fri Oct 16 21:49:19.321996 2026] [security2:error] [pid 652486] [client 34.166.52.2:52800] [client ... show more [Fri Oct 16 21:49:19.321996 2026] [security2:error] [pid 652486] [client 34.166.52.2:52800] [client 34.166.52.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/"] [unique_id "atIBL7guuroJidYh0-bcTwAAAA0"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 09:43:41 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:43:36.486824 2026] [security2:error] [pid 21837:tid 21837] [client 34.166.52.2:39436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danasedge.net"] [uri "/.git/config"] [unique_id "atHxyIxmLKhsmy5DRXuvNwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 09:20:28 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:20:22.831849 2026] [security2:error] [pid 11207:tid 11231] [client 34.166.52.2:35684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danandlila.com"] [uri "/.git/config"] [unique_id "atHsVh-Xbl-4d3t2wBuisQAAAYM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 08:53:31 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 04:53:24.989815 2026] [security2:error] [pid 19994:tid 19994] [client 34.166.52.2:42848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danafrostick.com"] [uri "/.git/config"] [unique_id "atHmBHdFJ-NsLDURGhV8zAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 06:24:30 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.166.52.2 (2.52.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:24:23.483817 2026] [security2:error] [pid 10765:tid 10765] [client 34.166.52.2:38856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "damonmarks.com"] [uri "/.git/config"] [unique_id "atHDF7VJRTTGdz4GPF5CgAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-10-16 05:55:59 (6 days ago)	http-sensitive-files - IP: 34.166.52.2 - time="2026-10-16T07:55:59+02:00" level=info msg="(555f66b4 ... show more http-sensitive-files - IP: 34.166.52.2 - time="2026-10-16T07:55:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.166.52.2 (SA/396982) : 4h ban on Ip 34.166.52.2" module=db show less	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.90.155.178

🇪🇹 196.188.253.8

🇨🇱 181.224.67.126

🇩🇪 128.1.42.111

🇬🇧 109.94.97.37

🇫🇮 104.245.243.234

🇧🇩 103.155.27.105

🇷🇺 95.165.25.233

🇧🇩 59.153.103.71

🇨🇱 34.176.62.178

🇷🇴 193.46.255.86

🇺🇦 188.163.42.54

🇬🇧 185.247.137.96

🇩🇴 154.88.136.207

🇵🇭 124.105.79.54

🇰🇷 119.64.84.82

🇻🇳 103.195.236.196

🇮🇩 103.187.165.26

🇦🇹 68.210.120.110

🇺🇸 40.121.200.75