JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.187.10.52

Recent Activity

Abuse Confidence Score

100% Critical

98 reports

60 reporters · latest 2 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 52.10.187.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇳🇱 Netherlands
City: Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

98 from 60 distinct reporters

First reported

November 1st 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 21 🇩🇪 Germany 19 🇳🇱 Netherlands 17

Most common categories Web App Attack 66 Hacking 30 Brute-Force 29 Bad Web Bot 29 SQL Injection 11

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 updown.io	2026-11-06 20:31:21 UTC · (2 days ago)	{"level":"info","ts":1793997080.5919135,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.187.10.52","remote_port":"41830","client_ip":"34.187.10.52","proto":"HTTP/2.0","method":"GET","host":"status.teknikveckan.com", ... show more {"level":"info","ts":1793997080.5919135,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.187.10.52","remote_port":"41830","client_ip":"34.187.10.52","proto":"HTTP/2.0","method":"GET","host":"status.teknikveckan.com","uri":"/static//app/.env","headers":{"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"User-Agent":["Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"],"Cookie":["REDACTED"],"True-Client-Ip":["172.22.187.143"],"Forwarded":["for=172.22.187.143"],"Accept-Encoding":["gzip"],"Cluster-Client-Ip":["172.22.187.143"],"X-Remote-Ip":["172.22.187.143"],"X-Real-Ip":["172.22.187.143"],"X-Remote-Addr":["172.22.187.143"],"X-Originating-Ip":["172.22.187.143"],"X-Custom-Ip-Authorization":["172.22.187.143"],"Accept":["/"],"X-Client-Ip":["172.22.187.143"],"X-Forwarded-For":["172.22.187.1 ... show less	DDoS Attack Web App Attack
Anonymous	2026-11-06 20:17:55 UTC · (2 days ago)	(BFM_FILTER_LIST) BFM: mod_security1 34.187.10.52 (NL/The Netherlands/52.10.187.34.bc.googleusercontent.com): 200 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER	Brute-Force Email Spam
🇺🇸 TPI-Abuse	2026-11-06 18:02:42 UTC · (3 days ago)	(mod_security) mod_security (id:210580) triggered by 34.187.10.52 (52.10.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:02:37.989971 2026] [security2:error] [pid 10550:tid 10 ... show more (mod_security) mod_security (id:210580) triggered by 34.187.10.52 (52.10.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:02:37.989971 2026] [security2:error] [pid 10550:tid 10550] [client 34.187.10.52:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|www.tellusafe.com\|F\|2"] [data "Matched Data: proc/self/environ found within ARGS:path: ../../../../proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.tellusafe.com"] [uri "/userfiles"] [unique_id "au4WPQBA9Qj4J5W0dra-0gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-11-06 17:08:47 UTC · (3 days ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-mnz6-1) show less	Bad Web Bot
🇫🇷 masterguru	2026-11-06 14:01:57 UTC · (3 days ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking
🇩🇪 Skyrider	2026-11-06 12:21:18 UTC · (3 days ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇺🇸 johnp	2026-11-06 11:56:33 UTC · (3 days ago)	Hostile web requests to a website: /, /robots.txt, /sitemap_index.xml, /ngsw.json, /z9x8c7v6b5-debug-trigger-texasmetalworks.com, /i73ds0wkccyww8o57wa0 (54 requests, 2026-11-06 10:53:05 UTC to 2026-11-06 11:56:33 UTC). User agent: Mozilla/5.0 (X11; L ... show more Hostile web requests to a website: /, /robots.txt, /sitemap_index.xml, /ngsw.json, /z9x8c7v6b5-debug-trigger-texasmetalworks.com, /i73ds0wkccyww8o57wa0 (54 requests, 2026-11-06 10:53:05 UTC to 2026-11-06 11:56:33 UTC). User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇩🇪 rh24	2026-11-06 11:21:52 UTC · (3 days ago)	(badbots) Bad bot user-agent [redacted] from 34.187.10.52 (NL/The Netherlands/52.10.187.34.bc.googleusercontent.com)	Hacking
🇺🇸 Matthew Ping	2026-11-06 10:45:02 UTC · (3 days ago)	Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on d865.	DDoS Attack Brute-Force
🇬🇧 consul.to	2026-11-06 09:44:36 UTC · (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Alt255	2026-11-06 09:31:18 UTC · (3 days ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.187.10.52 - - [06/Nov/2026:10:31:08 +0100] "GET /.env.credentials HTTP/1.1" 404 2070 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://w ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.187.10.52 - - [06/Nov/2026:10:31:08 +0100] "GET /.env.credentials HTTP/1.1" 404 2070 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-11-06 09:30:06 UTC · (3 days ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-201) show less	Bad Web Bot
🇦🇺 Telemetry2U.com	2026-11-06 08:12:00 UTC · (3 days ago)	Unauthorized connection attempt to port 8080	Hacking
🇬🇧 thetomtaylor.co.uk	2026-11-06 06:07:02 UTC · (3 days ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]	Hacking SQL Injection Web App Attack
🇫🇮 Christopher Hughes	2026-11-06 05:51:42 UTC · (3 days ago)	34.187.10.52 - - [06/Nov/2026:05:51:42 +0000] "GET /4nbag91btkph274iheq9 HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...	Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 191.7.159.201

🇩🇴 152.0.37.48

🇨🇦 99.232.54.193

🇦🇷 24.232.189.135

🇮🇷 194.180.11.186

🇱🇹 185.2.228.48

🇬🇧 35.203.210.56

🇰🇷 4.230.10.211

🇫🇷 217.217.97.128

🇰🇭 202.79.29.108

🇫🇮 147.185.133.14

🇫🇷 91.231.89.2

🇫🇷 51.91.221.69

🇵🇱 45.138.12.16

🇺🇸 198.105.126.12

🇩🇪 194.5.193.174

🇺🇸 191.101.241.242

🇧🇷 177.174.0.3

🇺🇸 162.216.149.176

🇲🇲 103.203.134.36