JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.40.219.252

34.40.219.252 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	252.219.40.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.40.219.252

Whois 34.40.219.252

IP Abuse Reports for 34.40.219.252:

This IP address has been reported a total of 27 times from 23 distinct sources. 34.40.219.252 was first reported on September 1st 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 Olexiy Backend	2026-09-03 08:10:58 (4 minutes ago)	34.40.219.252 ...	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-09-03 04:46:48 (3 hours ago)	Triggered Cloudflare WAF (linkMaze) from AU. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from AU. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇪 vaia.cloud	2026-09-03 02:25:01 (5 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇪🇸 scaballe	2026-09-02 21:47:37 (10 hours ago)		Web App Attack
Anonymous	2026-09-02 21:34:13 (10 hours ago)	Web application attack detected.	Web App Attack
Anonymous	2026-09-02 21:10:02 (11 hours ago)	suspicious request in access.log	Web App Attack
🇩🇪 Viveronese	2026-09-02 20:08:52 (12 hours ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 19:49:53 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.40.219.252 (252.219.40.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.40.219.252 (252.219.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 15:49:45.814831 2026] [security2:error] [pid 18561:tid 18561] [client 34.40.219.252:42594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nutandboltguy.com"] [uri "/.git/config"] [unique_id "aph92UwgD4YHrVVLBevjhAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-09-02 08:41:52 (23 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 WellSpring	2026-09-02 08:18:01 (23 hours ago)	env leak on odypays.org/admin/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇳🇱 Site.eu	2026-09-02 06:29:01 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-09-02 05:07:32 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
Anonymous	2026-09-02 02:38:48 (1 day ago)	34.40.219.252 - - [02/Sep/2026:02:19:57 +0000] "GET /.env.development HTTP/1.1" 502 552 "-" "Mozilla ... show more 34.40.219.252 - - [02/Sep/2026:02:19:57 +0000] "GET /.env.development HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.40.219.252 - - [02/Sep/2026:02:38:47 +0000] "GET /.git/config HTTP/1.1" 404 4065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.40.219.252 - - [02/Sep/2026:02:38:47 +0000] "GET /.git/config HTTP/1.1" 404 4065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.40.219.252 - - [02/Sep/2026:02:38:48 +0000] "GET /.env HTTP/1.1" 404 4057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" ... show less	Port Scan Brute-Force
Anonymous	2026-09-02 02:19:54 (1 day ago)	34.40.219.252 - - [02/Sep/2026:02:19:38 +0000] "GET /.git/config HTTP/1.1" 502 552 "-" "Mozilla/5.0 ... show more 34.40.219.252 - - [02/Sep/2026:02:19:38 +0000] "GET /.git/config HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.40.219.252 - - [02/Sep/2026:02:19:44 +0000] "GET /.env HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.40.219.252 - - [02/Sep/2026:02:19:47 +0000] "GET /.env.local HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.40.219.252 - - [02/Sep/2026:02:19:50 +0000] "GET /.env.production HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.40.219.252 - - [02/Sep/2026:02:19:53 +0000] "GET /.env.staging HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" ... show less	Port Scan Brute-Force
🇬🇧 Aetherweb Ark	2026-09-01 22:43:18 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.40.219.252 (AU/Australia/252.219.40.34.bc.go ... show more (mod_security) mod_security (id:949110) triggered by 34.40.219.252 (AU/Australia/252.219.40.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.236

🇮🇳 206.84.238.23

🇺🇸 167.234.120.67

🇺🇸 162.216.150.99

🇺🇸 162.216.149.181

🇺🇸 149.57.191.20

🇰🇷 121.185.89.74

🇺🇸 64.62.156.155

🇪🇬 45.240.243.182

🇩🇪 38.60.249.227

🇮🇩 36.69.50.40

🇺🇸 35.236.28.198

🇰🇷 211.63.219.148

🇧🇷 170.239.71.246

🇯🇵 152.32.202.250

🇫🇷 91.231.89.236

🇺🇸 64.62.156.148

🇺🇸 64.62.156.145

🇺🇸 64.62.156.142

🇺🇸 64.23.191.88