34.52.138.223

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
35 reports
34 reporters · latest 2 months ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
223.138.52.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇧🇪 Belgium
City
Brussels, Brussels Capital
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

34.52.138.223 has been reported 35 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
35 from 34 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=98, sources=1)
Hacking Brute-Force SSH
Anonymous
Apache probe; attempts=125; exact paths: //xmlrpc.php | //xmlrpc.php?rsd | /xmlrpc.php | /xmlrpc.php?rsd
Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: 201 malicious requests on 2026-07-22 (e.g., env/backup probes, brute-force, or error bursts).
Web App Attack SSH Hacking
🇳🇿 Antinson
Scraping with a high error ratio and request rate
Bad Web Bot
🇮🇱 Dolphi
POST //xmlrpc.php
Brute-Force Web App Attack
🇳🇱 BlueWire Hosting
Probing websites for vulnerabilities
Web App Attack
🇪🇸 masterguru
(xmlrpc) Failed xmlrpc access from 34.52.138.223 (BE/Belgium/223.138.52.34.bc.googleusercontent.com): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host Web App Attack
🇮🇹 VHosting
Detected WordPress attack from 4 different servers
Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸 Rip
WordPress fingerprinting and attack surface probing
Port Scan Web App Attack
🇷🇺 DZBOT
DZBOT: Website Scanning / Scraping
Bad Web Bot Exploited Host Web App Attack
🇺🇸 technojoe99
Exploit scan from 34.52.138.223. GET /actuator/httptrace HTTP/1.1.
Web App Attack
🇩🇪 XICTRON
ModSecurity rule violation detected by Fail2Ban
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 34.52.138.223 (BE/Belgium/223.138.52.34.bc.googleusercontent.com)
SQL Injection

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 213.230.78.60
🇸🇳 154.125.228.145
🇺🇸 143.198.155.67
🇿🇦 105.244.166.226
🇳🇱 94.102.49.190
🇺🇸 91.230.168.255
🇷🇺 87.117.56.123
🇷🇺 80.234.78.70
🇨🇦 70.38.10.146
🇩🇪 69.5.169.42
🇺🇸 47.254.80.207
🇺🇸 40.142.214.180
🇯🇵 153.127.64.214
🇺🇸 107.174.113.46
🇺🇸 107.172.28.169
🇨🇳 106.12.7.70
🇨🇭 104.244.79.113
🇧🇩 103.174.23.21
🇷🇺 95.165.146.107
🇰🇷 59.16.212.232
feedback