34.168.52.56

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
40 reports
31 reporters · latest 7 hours ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
56.52.168.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇺🇸 United States of America
City
The Dalles, Oregon
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
40 from 31 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇳🇱 Netherlands 14 🇩🇪 Germany 7 🇺🇸 United States of America 4
Most common categories Web App Attack 30 Bad Web Bot 17 Brute-Force 15 Hacking 9 SQL Injection 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Roderic
Insights: web vulnerability probing, 65 requests on 1 site, e.g. /.env.dev, /.env.prod, /.env (rotating 29 fake bot names, e.g. ChatGLM-Spider, Browser via Google Cloud, GPTBot (OpenAI))
Web App Attack
🇩🇪 tvipper.com
path traversal, probing for exposed files and admin pages and vulnerability scanning: 102 attempts within 1 minute, seen by web server log, WAF, fail2ban, CrowdSec and edge honeypot (reported by RemotePower)
Web App Attack Bad Web Bot
🇬🇧 Aetherweb Ark
(mod_security) mod_security (id:949110) triggered by 34.168.52.56 (US/United States/56.52.168.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇲🇾 Rizzy
Multiple WAF Violations
Brute-Force Web App Attack
🇫🇷 IRISIO
scans/SQL injection/spam posts : 305 queries
Web App Attack SQL Injection
🇳🇱 e.fierstra
excessive HTTP 404 errors
Bad Web Bot
Anonymous
Web application attack: http cve 2021 41773; Web application attack: http sensitive files; Web application attack: http path traversal probing; Probing for exposed secret / credential files
Hacking Web App Attack
🇩🇪 konseptit
(mod_security) mod_security triggered on hostname [redacted] 34.168.52.56 (US/United States/56.52.168.34.bc.googleusercontent.com)
SQL Injection
Anonymous
34.168.52.56 - - [06/Nov/2026:04:33:46 +0100] "GET /.env.credentials HTTP/2.0" 403 272 "https://danhag.de/.env.credentials" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
Web Spam Blog Spam Brute-Force Web App Attack
🇩🇪 akasolutions.de
(mod_security) mod_security triggered on hostname [redacted] 34.168.52.56 (US/United States/56.52.168.34.bc.googleusercontent.com)
SQL Injection
🇳🇱 Savvii
20 attempts against mh-misbehave-ban on milky
Brute-Force Bad Web Bot Web App Attack
Anonymous
Unauthorized server file access attempt.
Hacking
🇧🇪 cmbplf
7.881 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force Bad Web Bot
🇬🇧 KTSTechnology
Web vulnerability scanning detected by our ISP firewall
Web App Attack
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
Hacking Exploited Host Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.186.73.71
🇺🇸 172.98.33.132
🇺🇸 159.112.241.98
🇨🇳 117.72.33.69
🇳🇱 109.160.32.200
🇧🇩 103.159.2.113
🇳🇱 77.67.26.69
🇳🇱 45.148.10.13
🇦🇷 200.69.35.227
🇨🇳 180.76.250.204
🇺🇸 172.98.33.129
🇵🇰 153.117.39.85
🇳🇱 142.93.233.218
🇺🇸 66.228.62.150
🇳🇱 34.147.42.196
🇧🇷 205.210.31.231
🇧🇷 170.82.205.10
🇫🇷 166.0.150.214
🇨🇦 159.89.126.159
🇺🇸 142.111.152.143
feedback