JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.19.252.145

Recent Activity

Abuse Confidence Score

100% Critical

126 reports

88 reporters · latest 1 hour ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 145.252.19.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇨🇦 Canada
City: Montreal, Quebec

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

126 from 88 distinct reporters

First reported

October 30th 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇩🇪 Germany 22 🇺🇸 United States of America 22 🇳🇱 Netherlands 18

Most common categories Web App Attack 107 Bad Web Bot 37 Brute-Force 36 Hacking 25 Port Scan 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-11-09 15:37:12 UTC · (1 hour ago)	[MonNov0916:37:10.5445462026][security2:error][pid1516000:tid1516116][client34.19.252.145:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\} ... show more [MonNov0916:37:10.5445462026][security2:error][pid1516000:tid1516116][client34.19.252.145:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\*271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"ksmstudio.ch\"][uri\"/\"][unique_id\"avHoprGs2Rd1VUpbQXvopAAAAQU\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-11-09 11:49:43 UTC · (4 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Savvii	2026-11-09 08:55:08 UTC · (7 hours ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 07:53:51 UTC · (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.19.252.145 (145.252.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:53:45.179026 2026] [security2:error] [pid 1581:tid 1 ... show more (mod_security) mod_security (id:210492) triggered by 34.19.252.145 (145.252.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:53:45.179026 2026] [security2:error] [pid 1581:tid 1581] [client 34.19.252.145:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kryptonome.com"] [uri "/.git/config"] [unique_id "avF8CbWtiS00wrOClWemTgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-09 05:48:49 UTC · (10 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Alt255	2026-11-09 05:37:41 UTC · (11 hours ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.19.252.145 - - [09/Nov/2026:06:37:27 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.19.252.145 - - [09/Nov/2026:06:37:27 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-11-09 05:31:59 UTC · (11 hours ago)	Try to access /.git/config	Web App Attack
🇩🇪 MarkGGN	2026-11-09 02:46:02 UTC · (13 hours ago)	Web attack. 34.19.252.145 - - [09/Nov/2026:03:46:01 +0100] "GET /[HOST] HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.19.252.145 - - [09/Nov/2026:03:46:02 +01 ... show more Web attack. 34.19.252.145 - - [09/Nov/2026:03:46:01 +0100] "GET /[HOST] HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.19.252.145 - - [09/Nov/2026:03:46:02 +0100] "GET /[HOST] HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇸🇪 vaia.cloud	2026-11-09 02:25:01 UTC · (14 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇱🇻 radix	2026-11-09 00:25:51 UTC · (16 hours ago)	Automated probing for sensitive configuration files and environment leaks.	Brute-Force Web App Attack
🇩🇪 raph	2026-11-09 00:20:12 UTC · (16 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇨🇦 1gz	2026-11-08 17:31:40 UTC · (23 hours ago)	Triggered Cloudflare WAF (firewallManaged) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated ... show more Triggered Cloudflare WAF (firewallManaged) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 middelkoopcc	2026-11-08 17:03:13 UTC · (23 hours ago)	2026-11-08 18:01:39 GET /.git/config [301] && 2026-11-08 18:01:39 GET /.env [301] && 2026-11-08 18:01:40 GET /.env.bak [301] && 100 more within 20 minutes	Web App Attack
🇿🇦 Megasurf	2026-11-08 16:26:51 UTC · (1 day ago)	web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).	Web App Attack
🇪🇸 masterguru	2026-11-08 08:01:53 UTC · (1 day ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)	Hacking

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.73.216.109

🇺🇸 216.67.219.126

🇺🇸 162.216.150.69

🇺🇸 74.249.128.55

🇯🇵 34.180.84.77

🇰🇷 14.53.202.223

🇺🇸 209.124.216.126

🇳🇱 195.178.110.131

🇩🇪 139.162.162.160

🇺🇸 100.29.192.60

🇺🇸 66.132.224.88

🇳🇱 45.156.128.99

🇬🇧 35.203.210.24

🇮🇩 182.8.225.133

🇵🇾 181.117.188.143

🇸🇬 178.128.83.134

🇭🇰 154.92.2.59

🇺🇸 104.23.245.31

100.88.211.41

🇺🇸 100.29.192.120