AbuseIPDB » 34.26.68.252
34.26.68.252
This IP was reported 5 times. Confidence of
Abuse
is 16% : ?
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
252.68.26.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇺🇸
United States of America
City
North Charleston, South Carolina
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 34.26.68.252 :
This IP address has been reported a total of
5
times from
2 distinct
sources.
34.26.68.252 was first reported on
September 11th 2026 , and the most recent report was
3 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-11 16:59:15
(3 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:59:11.238759 2026] [security2:error] [pid 23640:tid 23640] [client 34.26.68.252:33690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shelbynash.com"] [uri "/@fs/.env"] [unique_id "aqQzX4FNRrCWoQbeZsYtwAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 16:40:07
(22 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:40:01.956887 2026] [security2:error] [pid 6313:tid 6313] [client 34.26.68.252:47442] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sheamar.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sheamar.com"] [uri "/z9x8c7v6b5-debug-trigger-sheamar.com"] [unique_id "aqQu4fDtJ5wG6VK-Khp_VAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 16:20:43
(42 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:20:34.947824 2026] [security2:error] [pid 26650:tid 26650] [client 34.26.68.252:50746] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||shaunthomas.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "shaunthomas.com"] [uri "/rclone.conf"] [unique_id "aqQqUhFzifO-Vx0rD2S0pQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-11 16:06:13
(56 minutes ago)
Scanning/Probing (22)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 15:49:06
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.26.68.252 (252.68.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 11:48:59.361562 2026] [security2:error] [pid 16267:tid 16267] [client 34.26.68.252:43642] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sharawi-gum.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sharawi-gum.com"] [uri "/rclone.conf"] [unique_id "aqQi63pP6UcT6u1X4suZxwAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: