JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.52.225.238

34.52.225.238 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	238.225.52.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.52.225.238

Whois 34.52.225.238

IP Abuse Reports for 34.52.225.238:

This IP address has been reported a total of 23 times from 23 distinct sources. 34.52.225.238 was first reported on August 12th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SOC-BR	2026-08-13 07:18:58 (2 days ago)	Attack detected by Fortinet - tools: Nmap.Script.Scanner - 2026-08-12 01:01:17 - Source Port 4752	Port Scan Hacking
🇺🇸 KayCee	2026-08-12 09:27:03 (3 days ago)	34.52.225.238 - - [12/Aug/2026:05:25:29 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xFF\xD1 ... show more 34.52.225.238 - - [12/Aug/2026:05:25:29 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xFF\xD1\xF6\xE8'\x81bb\xB0\xA0h\x86S\xC6U\xF2\xCE\x9C^\xE6\xC2&#\xE2\xDB'\x18O3\xF7nr o\x82\x8F\xDBE\xF9\x1Ci\x9A\x8D{\xA9=\xC9l\xC6}\xC0l\xFF\xE7Yu\x02d/7\x13\xCDa\x5C\x94\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" 34.52.225.238 - - [12/Aug/2026:05:25:34 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-" 34.52.225.238 - - [12/Aug/2026:05:25:34 -0400] "\x94\xAC\xE3\xEF\xD6\xB5\xE8\xA0\x99,k9\xDB\x99\x88\x1FL1l\xBC\x833C\xBDf\xBB\x0E\xC6\x97BV\xC1\xF2\x0B\xFA\x09\xBF\xBAG\xB1\xC3T\x0E,mb8\x02\xEB\xADB\xDD:\xFA\xA6\xF2\xDD\xDC\x1A\xE1\xD1\xE9,\x08" 400 150 "-" "-" "-" 34.52.225.238 - - [12/Aug/2026:05:26:12 -0400] "\x00\x1EV\x81\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x1 ... show less	Web App Attack
🇺🇸 azminawwar	2026-08-12 07:41:11 (3 days ago)	[34.52.225.238] triggered by honeypot on port [80], Timestamp [2026-08-12T07:41:11Z]METHOD=GET PATH= ... show more [34.52.225.238] triggered by honeypot on port [80], Timestamp [2026-08-12T07:41:11Z]METHOD=GET PATH=/ HTTP=HTTP/1.1 UA="Mozilla/5.0 (compatible)" HOST="95.182.92.103" REF="-" show less	Port Scan Hacking
🇨🇳 WMK965	2026-08-12 06:26:12 (3 days ago)	34.52.225.238 - - [12/Aug/2026:14:26:04 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03?\xFEY\x ... show more 34.52.225.238 - - [12/Aug/2026:14:26:04 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03?\xFEY\xD6\x9D\xDC\x22\xEB\xB4" 400 154 "-" "-" "-" 34.52.225.238 - - [12/Aug/2026:14:26:10 +0800] "\xD4\x89o\xF8\x83\xFE\x8D\xDE\xDF\xBC\xD7[\xA7\xBE\xF3`\xE9\xE9P\xF4\x1D\x17\xF3\x1E$^\x87\x00\x1F\xBF\xD5" 400 154 "-" "-" "-" 34.52.225.238 - - [12/Aug/2026:14:26:10 +0800] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 154 "-" "-" "-" show less	Port Scan Web App Attack
🇺🇸 JustMeHere	2026-08-12 06:11:56 (3 days ago)	[Wed Aug 12 02:11:51.579276 2026] [security2:error] [pid 904:tid 955] [client 34.52.225.238:42836] M ... show more [Wed Aug 12 02:11:51.579276 2026] [security2:error] [pid 904:tid 955] [client 34.52.225.238:42836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "anwOp5JwRwNuGe-34PSR1QAAAAI"] ... show less	Web App Attack
🇩🇪 Serpentex	2026-08-12 06:09:42 (3 days ago)	34.52.225.238 - - [12/Aug/2026:08:09:34 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03_\xD6\xD ... show more 34.52.225.238 - - [12/Aug/2026:08:09:34 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03_\xD6\xDF\xE0q??:\xE7\x9F\xD97\xFF`tB\xB0\xFF;\x09\x87sU\xEC\x94K\xD9r#\xA4g\x83 I\x12\xEC\xBB\x1C\x94\x8Eq\xA3n\x86\xDE\x15\x87P\xBF\xF7\x07\xDA\xBF\xDB\xCF_\xAC\x15\|\x03\xD4\xCE3\xC58\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 34.52.225.238 - - [12/Aug/2026:08:09:39 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 34.52.225.238 - - [12/Aug/2026:08:09:41 +0200] "\xDA\xCF@\xC4\xD9\x83\x14oV\x84\xB1\xCEU\xEF_\x87\x02f\x83\xF2A\xFE\xF6\x07m\x1Cu\xA4\xEAD\xFA\xDD\xD7\xAE\x9FO\x89\xCA\xE5iKxN\xDE\xC6\xB6\xE1\xA4@\xEA\x05\xCC+\xF74&i\xA8\xE0$r" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-08-12 06:03:56 (3 days ago)	Fail2Ban triggered	Web App Attack
Anonymous	2026-08-12 05:37:34 (3 days ago)	34.52.225.238 - - [12/Aug/2026:07:37:29 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x12\x82 ... show more 34.52.225.238 - - [12/Aug/2026:07:37:29 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x12\x82M\x90\xB6\xD7\xCA\xC2\xCE\xB8\xFF\x19\xA7\xD0\x07A\x1C%\x12\xEB%&\x91\xB0Tb\xC2'p\x07\x94A \xC9\xF4x\x05\x1AAn\xE4\x19\x92^w\xFC\xDEn\xB0Rb\xDD^O\xF890I\x9A7R\xBF\xB7\x00/\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" 34.52.225.238 - - [12/Aug/2026:07:37:34 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-" 34.52.225.238 - - [12/Aug/2026:07:37:34 +0200] "Vx,Iz\x90\x7F\xE6\xD3\xA5\xBDxJh\xDFR\xA7\xE80\x91\xBAL\xD7\x10\x8Al\xBF\xAB\xA00\x95\xA4V\x1A" 400 150 "-" "-" "-" ... show less	Hacking Web App Attack
🇳🇱 donarev419	2026-08-12 05:37:11 (3 days ago)	Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:80 User ... show more Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:80 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW show less	Port Scan Hacking
🇧🇷 SOC Blue Team	2026-08-12 05:26:33 (3 days ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇺🇸 antlac1	2026-08-12 05:18:46 (3 days ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 gu-alvareza	2026-08-12 05:05:27 (3 days ago)	Java.Debug.Wire.Protocol.Insecure.Configuration	Hacking
🇫🇷 Thaliruth	2026-08-12 05:02:36 (3 days ago)	[12/Aug/2026:07:02:35.788533 +0200] anv-ayfdyBqey2Kj0lqmZwAAAA4 34.52.225.238 43348 127.0.0.1 7080 . ... show more [12/Aug/2026:07:02:35.788533 +0200] anv-ayfdyBqey2Kj0lqmZwAAAA4 34.52.225.238 43348 127.0.0.1 7080 ... show less	Hacking
🇺🇸 xxkodedxx	2026-08-12 04:49:56 (3 days ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 2× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 2× edge-block in 10m window. Origin: BE / AS396982 Google LLC Active: 04:49:46→04:49:52 UTC Volume: 2 HTTP req Probed: / Status mix: 444×2 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
Anonymous	2026-08-12 04:41:20 (3 days ago)	🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.123

🇬🇧 172.70.163.27

🇧🇷 168.90.24.68

🇨🇮 154.0.30.137

🇮🇳 223.228.237.75

🇧🇪 198.235.24.166

🇬🇧 194.50.235.145

🇳🇱 188.166.10.98

🇵🇾 186.12.184.133

🇺🇸 172.58.132.159

🇺🇸 167.71.87.14

🇺🇸 162.216.150.66

🇩🇪 130.12.180.126

🇰🇷 121.189.198.60

🇨🇳 120.85.182.227

🇮🇳 114.143.111.39

🇲🇾 47.250.132.49

🇸🇬 45.78.194.186

🇺🇸 20.65.105.233

🇺🇸 216.25.89.103