JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.187.52.196

34.187.52.196 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	196.52.187.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.187.52.196

Whois 34.187.52.196

IP Abuse Reports for 34.187.52.196:

This IP address has been reported a total of 36 times from 25 distinct sources. 34.187.52.196 was first reported on July 27th 2026, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jormaster3k	2026-08-01 00:35:10 (50 minutes ago)	Attack against Apache (too many 404s)	Web App Attack
🇺🇸 infra-monitor	2026-07-31 23:00:06 (2 hours ago)	Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe	Port Scan Web App Attack
Anonymous	2026-07-31 20:41:13 (4 hours ago)	Bot / seems abusive / Apache connections: 28	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇸 rsa	2026-07-31 20:22:00 (5 hours ago)	GET /app HTTP/1.1	DDoS Attack Brute-Force Exploited Host Web App Attack Hacking
🇳🇱 e.fierstra	2026-07-31 13:53:27 (11 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-31 10:42:28 (14 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 08:14:34 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.187.52.196 (196.52.187.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.187.52.196 (196.52.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 04:14:28.405839 2026] [security2:error] [pid 6234:tid 6234] [client 34.187.52.196:59540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "members.oxfordgliding.com"] [uri "/.git/HEAD"] [unique_id "amxZZKGRzYCY_OX_sOHp3gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-31 02:35:01 (22 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 01:15:43 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.187.52.196 (196.52.187.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.187.52.196 (196.52.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 21:15:39.895891 2026] [security2:error] [pid 30295:tid 30313] [client 34.187.52.196:36734] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|api.absurdotron.com\|F\|2"] [data ".absurdotron.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "api.absurdotron.com"] [uri "/z9x8c7v6b5-debug-trigger-api.absurdotron.com"] [unique_id "amv3O-9m5nQowwLp_fdhpgAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-07-30 22:09:14 (1 day ago)	IP banned by Fail2Ban in jail ah-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 21:58:43 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.187.52.196 (196.52.187.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.187.52.196 (196.52.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 17:58:38.780476 2026] [security2:error] [pid 1744243:tid 1744243] [client 34.187.52.196:47984] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bilimkurgumanyagi.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bilimkurgumanyagi.com"] [uri "/z9x8c7v6b5-debug-trigger-bilimkurgumanyagi.com"] [unique_id "amvJDhxZ-4BkLGXK11INbwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-30 20:39:00 (1 day ago)	CrowdSec: crowdsecurity/http-probing \| req: /.aws/config \| 11 distinct paths \| UA: Mozilla/5.0 (comp ... show more CrowdSec: crowdsecurity/http-probing \| req: /.aws/config \| 11 distinct paths \| UA: Mozilla/5.0 (compatible; Bytespider; [email protected]) show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 20:02:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.187.52.196 (196.52.187.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.187.52.196 (196.52.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 16:02:24.101109 2026] [security2:error] [pid 338:tid 338] [client 34.187.52.196:46882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "borzois.com"] [uri "/.git/config"] [unique_id "amut0DPWMSOcxUrfbrasyAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-30 18:02:29 (1 day ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-07-30 15:40:05 (1 day ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.120.189.74

🇷🇺 217.25.223.104

🇹🇼 198.235.24.47

🇬🇧 194.50.235.151

🇳🇱 193.176.31.150

🇫🇮 193.56.113.27

🇺🇸 162.216.150.213

🇭🇰 118.193.44.22

🇨🇳 112.49.235.45

🇷🇺 95.78.20.35

🇺🇸 65.111.9.12

🇱🇺 64.89.160.135

🇧🇷 45.228.170.31

🇳🇱 45.148.10.141

🇸🇬 45.78.204.246

🇷🇺 37.79.137.83

🇺🇸 34.158.245.23

🇺🇸 13.86.104.46

🇧🇷 186.251.71.202

🇧🇷 177.124.174.71