JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.62.254.152

Recent Activity

Abuse Confidence Score

100% Critical

521 reports

338 reporters · latest 5 minutes ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 152.254.62.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

521 from 338 distinct reporters

First reported

November 7th 2026

Most recent report

5 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 167 🇺🇸 United States of America 71 🇫🇷 France 51

Most common categories Web App Attack 429 Bad Web Bot 141 Brute-Force 133 Hacking 112 Port Scan 33

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NetShield-DE	2026-11-10 05:07:29 UTC · (5 minutes ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-11-10T06:07:02+0100. Last: 2026-11-10T06:07:02+0100. Samples: - 2026-11-08 00:36:55,652 fail2ban.actions [855]: NOTICE [abuseipdb] Ban 34.62.254.1 ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-11-10T06:07:02+0100. Last: 2026-11-10T06:07:02+0100. Samples: - 2026-11-08 00:36:55,652 fail2ban.actions [855]: NOTICE [abuseipdb] Ban 34.62.254.152 show less	Web App Attack
🇨🇦 CentiDevOps	2026-11-10 05:02:25 UTC · (10 minutes ago)	Web app scan: 91 requests in 1 s across 2 domains (301/404/444). Paths: /.git/config, /.git/index, /.git/logs/HEAD (+53 more). Sample: 2026-11-10T05:02:25Z "GET /.aws/config" 301	Hacking Web App Attack
Anonymous	2026-11-10 04:57:26 UTC · (15 minutes ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇩🇪 Marco711	2026-11-10 04:55:03 UTC · (17 minutes ago)	CrowdSec: crowdsecurity/http-sensitive-files	Web App Attack
🇩🇪 Callum	2026-11-10 04:48:17 UTC · (24 minutes ago)	probing for exposed files and admin pages and remote code execution attempts: 69 attempts within 1 minutes, seen by web server log	Web App Attack Hacking
🇬🇧 consul.to	2026-11-10 04:29:18 UTC · (43 minutes ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 Budyn	2026-11-10 04:25:21 UTC · (47 minutes ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: cache.dont-eat-the-pudding.xyz \| Path: /.claude/settings.local.json \| User-Agent: Mozilla/5.0 ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: cache.dont-eat-the-pudding.xyz \| Path: /.claude/settings.local.json \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇯🇵 bokumin.org	2026-11-10 04:22:43 UTC · (50 minutes ago)	[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.cursor/mcp.json"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]	Web App Attack
🇫🇷 Feelautom	2026-11-10 04:07:53 UTC · (1 hour ago)	[FeelAutom Auto-Ban] PathScan: /.env.anthropic (Score: 202)	Port Scan
🇮🇩 zam	2026-11-10 03:15:18 UTC · (1 hour ago)	34.62.254.152 - - [10/Nov/2026:03:15:06 +0000] 5062 ms "GET /.env-example HTTP/1.1" 404 28092 34.62.254.152 - - [10/Nov/2026:03:15:07 +0000] 4580 ms "GET /.docker/config.json HTTP/1.1" 404 28092 34.62.254.152 - - [10/Nov/2026:03:15:07 +0000] 4789 ms ... show more 34.62.254.152 - - [10/Nov/2026:03:15:06 +0000] 5062 ms "GET /.env-example HTTP/1.1" 404 28092 34.62.254.152 - - [10/Nov/2026:03:15:07 +0000] 4580 ms "GET /.docker/config.json HTTP/1.1" 404 28092 34.62.254.152 - - [10/Nov/2026:03:15:07 +0000] 4789 ms "GET /.aws/credentials.bak HTTP/1.1" 404 28092 34.62.254.152 - - [10/Nov/2026:03:15:06 +0000] 5379 ms "GET /.claude/settings.json HTTP/1.1" 404 28092 34.62.254.152 - - [10/Nov/2026:03:15:07 +0000] 5288 ms "GET /.env-sample HTTP/1.1" 404 28092 {"log":"34.62.254.152 - - [10/Nov/2026:03:15:07 +0000] 5280 ms "GET /.docker/.env HTTP/1.1" show less	Web App Attack
Anonymous	2026-11-10 03:10:36 UTC · (2 hours ago)	IP matched detection query more than 2 hosts and only bad rq long ban.	Brute-Force Web App Attack Hacking
🇸🇪 vaia.cloud	2026-11-10 03:10:01 UTC · (2 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇳🇱 Alt255	2026-11-10 03:07:49 UTC · (2 hours ago)	[mx01aln] Web exploit scanning: 68 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.62.254.152 - - [10/Nov/2026:04:07:36 +0100] "GET /.env.live HTTP/2.0" 301 508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ... show more [mx01aln] Web exploit scanning: 68 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.62.254.152 - - [10/Nov/2026:04:07:36 +0100] "GET /.env.live HTTP/2.0" 301 508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.254.152 - - [10/Nov/2026:04:07:36 +0100] "GET /.env.old HTTP/2.0" 301 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.254.152 - - [10/Nov/2026:04:07:36 +0100] "GET /.env.openai HTTP/2.0" 301 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.254.152 - - [10/Nov/2026:04:07:36 +0100] "GET /.env.prod HTTP/2.0" 301 508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.254.152 - - [10/Nov/2026:04:07:36 +0100] "GET /.env.docker HTTP/2.0" 301 512 "-" "Mozilla/5.0 (Window ... show less	Bad Web Bot Web App Attack
🇩🇪 yvoictra	2026-11-10 03:06:51 UTC · (2 hours ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 jcbriar	2026-11-10 03:03:14 UTC · (2 hours ago)	Searching for vulnerable scripts	Hacking Web App Attack

Showing 1 to 15 of 521 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.210.31.164

🇩🇪 172.71.144.118

🇺🇸 162.216.149.145

🇸🇬 152.42.227.86

🇺🇸 104.248.125.167

🇺🇸 104.248.117.36

🇺🇸 104.152.52.135

🇧🇩 103.153.211.92

🇳🇱 89.21.67.182

🇺🇸 64.62.197.137

🇮🇳 49.36.41.14

🇧🇪 35.210.184.14

🇺🇸 34.42.206.233

🇨🇳 2408:4004:c0:5d00:ed3:dc9c:cd3e:20da

🇺🇸 199.165.159.31

🇺🇸 147.185.132.21

🇸🇬 68.183.181.88

🇦🇺 45.76.126.169

🇺🇦 37.57.242.242

🇬🇧 35.203.211.222