JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.17.178.52

Neutral Activity

Abuse Confidence Score

0% Low Risk

38 reports

23 reporters · latest 2 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 52.178.17.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇮🇹 Italy
City: Turin, Piedmont

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.17.178.52 has been reported 38 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

38 from 23 distinct reporters

First reported

May 10th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-17 03:44:05 UTC · (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=96, sources=1)	Hacking Brute-Force SSH
🇸🇰 EVISION	2026-05-19 00:55:08 UTC · (5 months ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: bPgK7bAF2AkCFW0he0qukr1huaUdGqMI	Port Scan Hacking Brute-Force
Anonymous	2026-05-15 11:30:00 UTC · (5 months ago)	Exceeded the maximum global requests per minute for crawlers or humans.	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 08:13:14 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 34.17.178.52 (52.178.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:13:09.904269 2026] [security2:error] [pid 19270:tid 19 ... show more (mod_security) mod_security (id:210492) triggered by 34.17.178.52 (52.178.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:13:09.904269 2026] [security2:error] [pid 19270:tid 19270] [client 34.17.178.52:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.forsaleincr.com"] [uri "/.env.zip"] [unique_id "agbVlWMl__MEWAiHCgdV3QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-05-15 03:14:16 UTC · (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): (CF_ENABLE)	SQL Injection
Anonymous	2026-05-15 02:10:56 UTC · (6 months ago)	(caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [15/May/2026:02:10:50 +0000] ... show more (caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [15/May/2026:02:10:50 +0000] "GET /.env.zip HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [15/May/2026:02:10:50 +0000] "GET /.env.tar.gz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [15/May/2026:02:10:51 +0000] "GET /.env.tgz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [15/May/2026:02:10:51 +0000] "GET /.env.tar HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [15/May/2026:02:10:52 +0000] "GET /.env.tar.bz2 HTTP/1.1" show less	Port Scan
🇳🇱 homeshowdomain.nl	2026-05-14 21:59:34 UTC · (6 months ago)	Auto-ban: >3000 req/min op 2026-05-14	Web App Attack SSH Hacking
🇮🇪 tarlabs	2026-05-14 20:00:55 UTC · (6 months ago)	IP banned by Fail2Ban (traefik jail)	Web App Attack
Anonymous	2026-05-14 14:09:59 UTC · (6 months ago)	(caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:14:09:55 +0000] ... show more (caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:14:09:55 +0000] "GET /.env.zip HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:14:09:55 +0000] "GET /.env.tar.gz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:14:09:56 +0000] "GET /.env.tgz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:14:09:56 +0000] "GET /.env.tar HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:14:09:57 +0000] "GET /.env.tar.bz2 HTTP/1.1" show less	Port Scan
🇳🇱 Site.eu	2026-05-14 12:02:44 UTC · (6 months ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-05-14 11:55:16 UTC · (6 months ago)	(caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:11:55:12 +0000] ... show more (caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:11:55:12 +0000] "GET /.env.zip HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:11:55:12 +0000] "GET /.env.tar.gz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:11:55:13 +0000] "GET /.env.tgz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:11:55:13 +0000] "GET /.env.tar HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:11:55:14 +0000] "GET /.env.tar.bz2 HTTP/1.1" show less	Port Scan
Anonymous	2026-05-14 10:11:08 UTC · (6 months ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇺🇸 TPI-Abuse	2026-05-14 04:53:05 UTC · (6 months ago)	(mod_security) mod_security (id:210730) triggered by 34.17.178.52 (52.178.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 00:53:00.281131 2026] [security2:error] [pid 9475:tid 947 ... show more (mod_security) mod_security (id:210730) triggered by 34.17.178.52 (52.178.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 00:53:00.281131 2026] [security2:error] [pid 9475:tid 9475] [client 34.17.178.52:35484] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nelsonprototype.blackjobsnetwork.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nelsonprototype.blackjobsnetwork.com"] [uri "/api.sql"] [unique_id "agVVLDW3Djp_QJZSf_VCFAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 penguin-solutions.at	2026-05-14 04:51:29 UTC · (6 months ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
Anonymous	2026-05-14 04:30:40 UTC · (6 months ago)	(caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:04:30:33 +0000] ... show more (caddyscan) Scanner path probe from 34.17.178.52 (IT/Italy/52.178.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:04:30:33 +0000] "GET /.env.zip HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:04:30:34 +0000] "GET /.env.tar.gz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:04:30:34 +0000] "GET /.env.tgz HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:04:30:35 +0000] "GET /.env.tar HTTP/1.1" [REDACTED] 200 2627 34.17.178.52 - - [14/May/2026:04:30:36 +0000] "GET /.env.tar.bz2 HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 173.255.221.22

🇩🇪 167.94.145.25

🇺🇸 100.14.149.210

🇳🇱 77.239.124.45

🇬🇧 35.203.211.30

🇧🇷 34.39.134.88

🇪🇨 186.4.135.194

🇺🇸 66.132.186.172

🇨🇳 58.242.118.12

🇬🇧 35.203.211.246

🇬🇧 35.203.211.245

🇧🇷 35.198.13.128

🇺🇸 35.185.204.104

🇸🇬 34.21.222.143

🇨🇳 14.103.111.13

🇸🇪 13.60.208.194

🇮🇩 202.65.225.66

🇺🇸 199.165.159.88

🇳🇱 195.178.110.228

🇳🇱 193.47.62.69