JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.179.240.52

34.179.240.52 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 62%: ?

62%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	52.240.179.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.179.240.52

Whois 34.179.240.52

IP Abuse Reports for 34.179.240.52:

This IP address has been reported a total of 16 times from 11 distinct sources. 34.179.240.52 was first reported on October 10th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Secure Gateway®️	2026-10-10 22:00:31 (6 days ago)	Report By Secure Gateway Security Team: Unsolicited Connection Attempt	Hacking
🇺🇸 ALSCO®️	2026-10-10 22:00:31 (6 days ago)	Report By ALSCO Security Team: Brute Force Login Attempt	SQL Injection
🇮🇹 VHosting	2026-10-10 21:20:06 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-10 18:58:31 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 14:58:26.327409 2026] [security2:error] [pid 12830:tid 12830] [client 34.179.240.52:53996] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|518-windows.callalbany.com\|F\|2"] [data ".callalbany.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "518-windows.callalbany.com"] [uri "/z9x8c7v6b5-debug-trigger-518-windows.callalbany.com"] [unique_id "asqK0oq8RYiidMt8WDDs0QAAADU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-10 18:41:00 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 14:40:56.039529 2026] [security2:error] [pid 1748:tid 1748] [client 34.179.240.52:55008] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|4lazytrafficschoolonline.4lazy.com\|F\|2"] [data ".4lazy.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "4lazytrafficschoolonline.4lazy.com"] [uri "/z9x8c7v6b5-debug-trigger-4lazytrafficschoolonline.4lazy.com"] [unique_id "asqGuMVo4NyxalQvwXAfFwAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-10 18:20:47 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 14:20:41.411746 2026] [security2:error] [pid 24286:tid 24286] [client 34.179.240.52:57658] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|4940brooklinedr.com.13waggoners.com\|F\|2"] [data ".com.13waggoners.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "4940brooklinedr.com.13waggoners.com"] [uri "/z9x8c7v6b5-debug-trigger-4940brooklinedr.com.13waggoners.com"] [unique_id "asqB-SGz5D2SS3OytrdD-QAAAGM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2026-10-10 18:14:01 (1 week ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇬🇧 Aetherweb Ark	2026-10-10 18:06:16 (1 week ago)	(mod_security) mod_security (id:949110) triggered by 34.179.240.52 (DE/Germany/52.240.179.34.bc.goog ... show more (mod_security) mod_security (id:949110) triggered by 34.179.240.52 (DE/Germany/52.240.179.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇺🇸 Mundo Bueno	2026-10-10 17:48:24 (1 week ago)	[ISILIA Protection v2.3] Tentative d'accès: /@fs/.env [RATE LIMITED - 1800s quarantine] \| Pays: DE \| ... show more [ISILIA Protection v2.3] Tentative d'accès: /@fs/.env [RATE LIMITED - 1800s quarantine] \| Pays: DE \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplex show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-10 17:38:22 (1 week ago)	(mod_security) mod_security (id:210580) triggered by 34.179.240.52 (52.240.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210580) triggered by 34.179.240.52 (52.240.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 13:38:15.428800 2026] [security2:error] [pid 11593:tid 11593] [client 34.179.240.52:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:apis. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|gibitdigital.com\|F\|2"] [data "Matched Data: proc/self/environ found within ARGS:apis: ../../../../../../proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "gibitdigital.com"] [uri "/api/console/api_server"] [unique_id "asp4B0G6BRs35AVHPc7vrAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-10-10 16:31:28 (1 week ago)	Aggressive web search of vulnerable pages: /docker-compose.yml /_image?href=/../../../.env /api/cons ... show more Aggressive web search of vulnerable pages: /docker-compose.yml /_image?href=/../../../.env /api/console/api_server?sense_version=%40%40SENSE_VE ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-10 16:22:49 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.179.240.52 (52.240.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.179.240.52 (52.240.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 12:22:42.104849 2026] [security2:error] [pid 20387:tid 20387] [client 34.179.240.52:40390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4windsmedia.com"] [uri "/.env.save"] [unique_id "aspmUnc6Kd49efNAGegpjgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-10 16:09:59 (1 week ago)	[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.179.240.52 - - [10/Oct/2026:18:09:57 +0200] "GET /.env.example HTTP/2.0" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-10 15:59:00 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.179.240.52 (52.240.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 11:58:55.380976 2026] [security2:error] [pid 4974:tid 4974] [client 34.179.240.52:33568] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|495metro.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "495metro.com"] [uri "/z9x8c7v6b5-debug-trigger-495metro.com"] [unique_id "aspgv4y-86VubRaWfwxznQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-10-10 15:57:27 (1 week ago)	[SatOct1017:57:21.8748992026][security2:error][pid52863:tid52952][client34.179.240.52:0]ModSecurity: ... show more [SatOct1017:57:21.8748992026][security2:error][pid52863:tid52952][client34.179.240.52:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"4-server.com\"][uri\"/z9x8c7v6b5-debug-trigger-4-server.com\"][unique_id\"aspgYVnsdWQneFEIE5Y-2AAAAQE\"] show less	Hacking Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 102.157.138.171

🇺🇸 69.167.30.7

🇺🇸 40.67.178.198

🇯🇵 35.200.101.75

🇺🇸 2a03:2880:f212:1c9:face:b00c:0:43fe

🇮🇹 217.26.178.3

🇩🇪 213.209.159.25

🇲🇲 103.83.190.122

🇳🇱 77.239.124.154

🇧🇪 35.205.116.134

🇺🇸 32.196.38.110

🇧🇷 186.251.71.202

🇺🇸 136.65.74.74

🇨🇳 115.222.147.112

🇳🇱 109.160.32.137

🇳🇱 45.74.59.2

🇧🇷 177.200.68.30

🇰🇷 112.161.75.207

🇨🇦 38.135.179.65

🇩🇪 34.89.133.29