JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.52.218.36

34.52.218.36 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 43%: ?

43%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	36.218.52.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.52.218.36

Whois 34.52.218.36

IP Abuse Reports for 34.52.218.36:

This IP address has been reported a total of 34 times from 28 distinct sources. 34.52.218.36 was first reported on August 13th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gu-alvareza	2026-10-01 05:05:09 (3 weeks ago)	Java.Debug.Wire.Protocol.Insecure.Configuration	Hacking
🇮🇳 Starburst SysOp Team	2026-09-30 11:39:06 (3 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-bom2-2)	Hacking Bad Web Bot
🇬🇷 setupgr	2026-09-30 10:30:28 (3 weeks ago)	(mod_security) mod_security (id:11000011) triggered by 34.52.218.36 (BE/Belgium/Brussels Capital/Bru ... show more (mod_security) mod_security (id:11000011) triggered by 34.52.218.36 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 30 13:30:26.682042 2026] [security2:error] [pid 1945342:tid 1945503] [client 34.52.218.36:7260] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 36.218.52.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "154.57.7.73"] [uri "/"] [unique_id "arzkwizqUApYLAw9L-agKAAAAFY"] show less	Port Scan
Anonymous	2026-09-30 10:13:36 (3 weeks ago)	Fail2Ban nginx-bad-request: malformed or invalid HTTP request	Port Scan
🇧🇷 mubusys.com	2026-09-30 10:13:36 (3 weeks ago)	34.52.218.36 - - [30/Sep/2026:07:13:31 -0300] "GET / HTTP/1.1" 400 657 "-" "Mozilla/5.0 (Windows NT ... show more 34.52.218.36 - - [30/Sep/2026:07:13:31 -0300] "GET / HTTP/1.1" 400 657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 34.52.218.36 - - [30/Sep/2026:07:13:35 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 157 "-" "-" "-" show less	Hacking Brute-Force
🇺🇸 Starburst SysOp Team	2026-09-30 10:03:34 (3 weeks ago)	Found User-Agent associated with security scanner. Matched phrase "nmap" at REQUEST_HEADERS:User-Age ... show more Found User-Agent associated with security scanner. Matched phrase "nmap" at REQUEST_HEADERS:User-Agent. (913100-mnz6-3) show less	Hacking Bad Web Bot
🇩🇪 hero2026	2026-09-30 07:51:59 (3 weeks ago)	Blocked by Fail2ban	Web App Attack
🇺🇸 Starburst SysOp Team	2026-09-30 07:31:57 (3 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇩🇪 bescared	2026-09-30 07:30:37 (3 weeks ago)	F2B - Malicious activity detected. URL Probing. -151302cd-	Hacking Bad Web Bot Web App Attack
🇫🇷 id2i	2026-09-30 06:55:04 (3 weeks ago)	2026-09-30T08:55:04.069048+02:00 coraza-spoa[262622]: [client "34.52.218.36"] Coraza: Access denied ... show more 2026-09-30T08:55:04.069048+02:00 coraza-spoa[262622]: [client "34.52.218.36"] Coraza: Access denied (phase 2). Inbound Anomaly Score Exceeded (Total Score: 8) show less	Hacking Web App Attack
🇧🇷 diego	2026-09-30 05:15:44 (3 weeks ago)	[probe-68-69] 2026-09-30 05:00:28, Client: 34.52.218.36, Protocol: 6, Unauthorized activity to HTTP: ... show more [probe-68-69] 2026-09-30 05:00:28, Client: 34.52.218.36, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 gu-alvareza	2026-09-30 05:07:35 (3 weeks ago)	Java.Debug.Wire.Protocol.Insecure.Configuration	Hacking
🇦🇹 vikal	2026-09-30 04:08:13 (3 weeks ago)	34.52.218.36 - - [30/Sep/2026:06:07:52 +0200] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x01 ... show more 34.52.218.36 - - [30/Sep/2026:06:07:52 +0200] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 34.52.218.36 - - [30/Sep/2026:06:08:02 +0200] "0:\x02\x04\x1B7\xA9e`2\x02\x01\x03\x04\x17cn=lswyvscweeicztuihugw\x80\x14lswyvscweeicztuihugw" 400 150 "-" "-" 34.52.218.36 - - [30/Sep/2026:06:08:10 +0200] "\x10\x11\x00\x04MQTT\x03\x02\x00<\x00\x05AAAAA" 400 150 "-" "-" 34.52.218.36 - - [30/Sep/2026:06:08:11 +0200] "*1" 400 150 "-" "-" 34.52.218.36 - - [30/Sep/2026:06:08:12 +0200] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-" ... show less	Brute-Force SSH
🇹🇼 tyebstx	2026-09-30 04:01:35 (3 weeks ago)	Wazuh Alert Evidence: 34.52.218.36 - - [30/Sep/2026:04:01:32 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ... show more Wazuh Alert Evidence: 34.52.218.36 - - [30/Sep/2026:04:01:32 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" show less	Web App Attack
🇺🇸 NXTwoThou	2026-09-30 02:41:48 (3 weeks ago)	174.78	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.233

🇳🇱 195.178.110.26

🇺🇸 162.216.150.109

🇩🇪 155.133.203.126

🇸🇪 83.255.211.115

🇺🇸 74.82.47.3

🇳🇱 31.59.220.26

🇻🇳 210.86.226.51

🇺🇦 176.103.2.229

🇺🇸 172.185.24.228

🇧🇴 166.114.173.201

🇬🇧 86.38.187.26

🇸🇪 83.254.172.36

🇮🇹 83.224.186.2

🇬🇧 77.67.26.204

🇺🇸 66.132.195.125

🇬🇧 64.205.72.147

🇩🇪 64.89.160.43

🇸🇬 47.128.120.229

🇸🇬 47.128.120.159