JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.52.150.123

Activity Trending Down

Abuse Confidence Score

29% Elevated

56 reports

35 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 123.150.52.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

56 from 35 distinct reporters

First reported

September 2nd 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 7 🇳🇱 Netherlands 3

Most common categories Web App Attack 17 Bad Web Bot 11 Brute-Force 8 Hacking 5 Port Scan 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-26 14:05:14 UTC · (1 month ago)	2026-09-25 17:07:13,893 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.52.150.123 ...	Bad Web Bot
🇫🇮 geot	2026-09-23 13:14:51 UTC · (1 month ago)	19 requests, including : GET /_ignition/health-check HTTP/1.1 GET /.env.example HTTP/1.1 GET /wp-config.php.swp HTTP/1.1 GET /.env.old HTTP/1.1 GET /.env HTTP/1.1 GET /env HTTP/1.1 GET /.env.local HTTP/1.1 GET /.env.backup HTTP/1.1 GET /.env.product ... show more 19 requests, including : GET /_ignition/health-check HTTP/1.1 GET /.env.example HTTP/1.1 GET /wp-config.php.swp HTTP/1.1 GET /.env.old HTTP/1.1 GET /.env HTTP/1.1 GET /env HTTP/1.1 GET /.env.local HTTP/1.1 GET /.env.backup HTTP/1.1 GET /.env.production HTTP/1.1 GET /wp-config.php~ HTTP/1.1 GET /crusader-404-probe HTTP/1.1 GET /actuator/env HTTP/1.1 GET /actuator/configprops HTTP/1.1 GET /wp-config.php.bak HTTP/1.1 GET /storage/logs/laravel.log HTTP/1.1 GET /.env.save HTTP/1.1 GET /.env.bak HTTP/1.1 GET /.env.prod HTTP/1.1 show less	Hacking Bad Web Bot Web App Attack
🇺🇸 aks4226	2026-09-22 15:54:33 UTC · (1 month ago)	Bot search, attacking common web applications.	Web App Attack
🇺🇸 Sonoflet	2026-09-22 15:24:26 UTC · (1 month ago)	CrowdSec detection \| scenario: http-probing	Port Scan Web App Attack
🇩🇪 Marc	2026-09-22 15:23:07 UTC · (1 month ago)	34.52.150.123 - - [22/Sep/2026:17:23:07 +0200] "GET /actuator/env HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.52.150.123 - - [22/Sep/2026:17:23:07 +0200] "GET /.env.example HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.52.150.123 - - [22/Sep/20 ... show more 34.52.150.123 - - [22/Sep/2026:17:23:07 +0200] "GET /actuator/env HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.52.150.123 - - [22/Sep/2026:17:23:07 +0200] "GET /.env.example HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.52.150.123 - - [22/Sep/2026:17:23:07 +0200] "GET /.env.backup HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-22 14:42:18 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:42:12.933115 2026] [security2:error] [pid 27198:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:42:12.933115 2026] [security2:error] [pid 27198:tid 27198] [client 34.52.150.123:35080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magacine.tv"] [uri "/.env.bak"] [unique_id "arKTxMX_KYj7C8qw3hO-jwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 14:26:03 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:25:57.198417 2026] [security2:error] [pid 13716:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:25:57.198417 2026] [security2:error] [pid 13716:tid 13742] [client 34.52.150.123:60136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landmarkocchealth.com"] [uri "/.env.backup"] [unique_id "arKP9aJdpEbRpM-GHp8fnwAAAQk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 AetherFox	2026-09-22 13:53:15 UTC · (1 month ago)	AetherFox VoidGuard detected: [Tue Sep 22 13:53:14.429273 2026] [authz_core:error] [pid 3619535:tid 3619555] [client 34.52.150.123:43808] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.example [Tue Sep 22 13:53:14.429303 ... show more AetherFox VoidGuard detected: [Tue Sep 22 13:53:14.429273 2026] [authz_core:error] [pid 3619535:tid 3619555] [client 34.52.150.123:43808] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.example [Tue Sep 22 13:53:14.429303 2026] [authz_core:error] [pid 3544738:tid 3544787] [client 34.52.150.123:43780] AH01630: client denied by server configuration: proxy:https://[MASKED]/actuator/configprops [Tue Sep 22 13:53:14.430296 2026] [authz_core:error] [pid 3544738:tid 3544779] [client 34.52.150.123:43838] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.old [Tue Sep 22 13:53:14.430911 2026] [authz_core:error] [pid 3544737:tid 3544743] [client 34.52.150.123:43854] AH01630: client denied by server configuration: proxy:https://[MASKED]/env [Tue Sep 22 13:53:14.431362 2026] [authz_core:error] [pid 3619535:tid 3619542] [client 34.52.150.123:43794] AH01630: client denied by server configuration: proxy:https://5.75. ... show less	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-09-22 13:31:05 UTC · (1 month ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.52.150.123 (BE/Belgium/123.150.52.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.52.150.123 - - [22/Sep/2026:15:31: ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.52.150.123 (BE/Belgium/123.150.52.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.52.150.123 - - [22/Sep/2026:15:31:02 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "crusader-worker/1.0" "-" host=grafica-x.com show less	Port Scan
🇺🇸 TPI-Abuse	2026-09-22 13:30:01 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:29:54.265503 2026] [security2:error] [pid 25721:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:29:54.265503 2026] [security2:error] [pid 25721:tid 25721] [client 34.52.150.123:37244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graficasbis.com"] [uri "/wp-config.php.bak"] [unique_id "arKC0r-XJDUmH4Ayus7GwAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 12:48:01 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:47:53.992316 2026] [security2:error] [pid 30151:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:47:53.992316 2026] [security2:error] [pid 30151:tid 30151] [client 34.52.150.123:36424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endoperfect.com"] [uri "/.env.local"] [unique_id "arJ4-ehmdNJtgWaCMxZO8wAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Petros Stefanakis	2026-09-22 12:45:05 UTC · (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 34.52.150.123 (BE/Belgium/123.150.52.34.bc.googleusercontent.com)	SQL Injection
🇩🇪 conseilgouz	2026-09-22 11:43:07 UTC · (1 month ago)	coe-17 : Block hidden directories=>/.env.prod(/)	Hacking
🇺🇸 TPI-Abuse	2026-09-22 11:33:14 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:33:08.498539 2026] [security2:error] [pid 32566:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.52.150.123 (123.150.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:33:08.498539 2026] [security2:error] [pid 32566:tid 32566] [client 34.52.150.123:55996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaire-construction-4-0.com"] [uri "/.env.save"] [unique_id "arJndG6zCQZNgcFNXKS6nwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-22 11:24:59 UTC · (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.158.36.50

🇲🇽 189.129.185.154

🇧🇷 189.28.246.167

🇬🇧 185.92.25.73

🇩🇪 69.5.169.75

🇺🇸 66.132.195.28

🇳🇱 45.148.10.162

🇳🇱 45.148.10.141

🇺🇸 34.174.165.213

🇺🇸 34.162.32.170

🇺🇸 34.74.241.59

🇺🇸 206.189.195.145

🇮🇹 194.60.212.187

🇳🇱 185.4.114.189

🇮🇳 167.71.227.139

🇩🇪 151.243.11.136

🇺🇸 136.119.174.64

🇺🇸 136.109.173.232

🇺🇸 136.64.67.153

🇨🇳 113.80.100.92