JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.23.128.52

34.23.128.52 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 52%: ?

52%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	52.128.23.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.23.128.52

Whois 34.23.128.52

IP Abuse Reports for 34.23.128.52:

This IP address has been reported a total of 40 times from 19 distinct sources. 34.23.128.52 was first reported on June 8th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-12 10:07:38 (3 weeks ago)	Trying to access config files	Web App Attack
Anonymous	2026-06-10 14:07:32 (4 weeks ago)	Trying to access config files	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-09 22:03:18 (4 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-09 08:33:19 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:33:16.044453 2026] [security2:error] [pid 8800:tid 8800] [client 34.23.128.52:39332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schwanpaint.com"] [uri "/.git/config"] [unique_id "aifPzMYicTZAtb2YKvNITwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 08:06:59 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:06:53.662434 2026] [security2:error] [pid 25984:tid 25984] [client 34.23.128.52:42662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waleed.co.waleed-alshalan.com"] [uri "/.git/config"] [unique_id "aifJnU5syhI4KpKm4DziWAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Progetto1	2026-06-09 07:50:01 (1 month ago)	Detected via HAProxyScanner at 2026-06-09 07:50:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-06-09 07:50:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-06-09 06:34:15 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:34:07.433136 2026] [security2:error] [pid 5625:tid 5652] [client 34.23.128.52:43628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.destination-kitchen.com"] [uri "/.git/config"] [unique_id "aiez394C6zKELK9NhAoR2wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-06-09 06:01:28 (1 month ago)	fail2ban-ban	Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-06-09 04:51:07 (1 month ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 03:37:45 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:37:42.366715 2026] [security2:error] [pid 7381:tid 7393] [client 34.23.128.52:34242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandbarsteve.com"] [uri "/.git/config"] [unique_id "aieKhqmsxNwMip4fo_wF1wAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 03:21:40 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:21:33.689484 2026] [security2:error] [pid 22838:tid 22838] [client 34.23.128.52:35996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forestvalleyfarm.com"] [uri "/.git/config"] [unique_id "aieGvY4pVxJULsVQgvQ_DQAAADk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-09 03:06:06 (1 month ago)	Trying to access config files	Web App Attack
🇫🇮 inlink.ltd	2026-06-09 02:27:22 (1 month ago)	dot file probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 02:00:54 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.23.128.52 (52.128.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:00:48.702901 2026] [security2:error] [pid 18412:tid 18412] [client 34.23.128.52:43314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gonzalez.com"] [uri "/.git/config"] [unique_id "aidz0JCDGyJVVbSrCw6dCgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 betternews.app	2026-06-09 01:54:09 (1 month ago)	"a web request contained keyword ".git"; Suspicious URL: /.git/config"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.98.122.37

🇲🇾 219.92.8.225

🇦🇷 186.38.26.5

🇭🇰 165.154.6.75

🇺🇸 162.240.222.44

🇺🇸 147.182.176.157

🇮🇩 103.83.93.93

🇩🇪 93.152.221.91

🇮🇷 78.109.200.147

🇱🇹 77.90.185.20

🇰🇷 49.247.37.22

🇭🇰 45.196.236.141

🇺🇸 20.228.193.165

🇭🇰 8.218.84.155

🇻🇳 1.53.36.82

🇰🇷 211.251.245.88

🇺🇸 209.85.215.200

🇹🇭 203.154.158.195

🇸🇬 203.116.129.55

🇧🇷 200.153.86.250