JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.64.223.252

34.64.223.252 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 52%: ?

52%

ISP	Google Asia Pacific Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	252.223.64.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.64.223.252

Whois 34.64.223.252

IP Abuse Reports for 34.64.223.252:

This IP address has been reported a total of 11 times from 8 distinct sources. 34.64.223.252 was first reported on September 15th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-09-16 08:49:19 (5 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-16 08:33:07 (5 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 00:22:07 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:22:01.804457 2026] [security2:error] [pid 16339:tid 16406] [client 34.64.223.252:57200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mdbscommercialcleaning.com"] [uri "/.env"] [unique_id "aqnhKUM5CexTQD6NBHC6ogAAApU"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-09-15 22:05:25 (16 hours ago)	Abuse Detected (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:13:02 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:12:49.335605 2026] [security2:error] [pid 14448:tid 14448] [client 34.64.223.252:37236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gmsdigita.com"] [uri "/.env"] [unique_id "aqmYsQ7_Q_iFBwRKhpuRkgAAABE"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 15:11:54 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 11:11:50.571956 2026] [security2:error] [pid 20550:tid 20550] [client 34.64.223.252:39548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "demberdatabase.com"] [uri "/.env"] [unique_id "aqlgNpcMllbCMTzRSmjXVwAAABQ"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 13:28:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.223.252 (252.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:28:05.268021 2026] [security2:error] [pid 13666:tid 13666] [client 34.64.223.252:60496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bestprostate.com"] [uri "/.env"] [unique_id "aqlH5dslsdcPx9URJfPj8AAAAAs"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-09-15 10:50:10 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-15 10:28:33 (1 day ago)	34.64.223.252 - - [15/Sep/2026:12:28:28 +0200] "GET /.local HTTP/1.1" 404 513 "https://www.google.co ... show more 34.64.223.252 - - [15/Sep/2026:12:28:28 +0200] "GET /.local HTTP/1.1" 404 513 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_1) Gecko/20041907 Firefox/15.0" 34.64.223.252 - - [15/Sep/2026:12:28:28 +0200] "GET /.production HTTP/1.1" 301 590 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_1) Gecko/20041907 Firefox/15.0" 34.64.223.252 - - [15/Sep/2026:12:28:28 +0200] "GET /.production HTTP/1.1" 404 513 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_1) Gecko/20041907 Firefox/15.0" 34.64.223.252 - - [15/Sep/2026:12:28:28 +0200] "GET //vendor/.env HTTP/1.1" 301 590 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_1) Gecko/20041907 Firefox/15.0" 34.64.223.252 - - [15/Sep/2026:12:28:29 +0200] "GET /vendor/.env HTTP/1.1" 404 513 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_1) Gecko/20041907 Firefox/15.0" 34.64.223.252 - - [15/Sep/2026:12:28:29 +0200] "GET //lib/.env HTTP/1.1" 3 show less	Web App Attack Hacking
🇸🇪 vaia.cloud	2026-09-15 10:20:03 (1 day ago)	crowdsecurity/CVE-2017-9841	Brute-Force Web App Attack
Anonymous	2026-09-15 04:34:30 (1 day ago)	Aggressive web scan	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.35

🇧🇷 200.155.76.14

🇩🇪 169.150.201.16

🇵🇰 119.152.102.54

🇮🇳 117.247.51.66

🇺🇸 74.207.241.99

🇱🇹 62.60.130.242

🇺🇸 35.237.94.18

🇨🇳 27.24.141.160

🇩🇪 196.251.121.220

🇺🇸 192.159.99.144

🇲🇽 187.145.125.91

🇬🇧 178.79.184.209

🇰🇷 112.164.209.55

🇺🇸 104.168.118.241

🇮🇪 95.45.94.41

🇺🇸 71.105.93.146

🇱🇹 62.60.130.238

🇳🇱 45.148.10.212

🇨🇭 37.120.213.13