JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.68.138.52

34.68.138.52 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	52.138.68.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.68.138.52

Whois 34.68.138.52

IP Abuse Reports for 34.68.138.52:

This IP address has been reported a total of 73 times from 56 distinct sources. 34.68.138.52 was first reported on September 16th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 snappic	2026-09-17 22:23:53 (5 hours ago)	Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhi ... show more Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-17 18:36:15 (9 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇸🇬 Cloudkul Cloudkul	2026-09-17 18:07:57 (9 hours ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇳🇱 Alt255	2026-09-17 15:05:23 (12 hours ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.68.138.52 - - [17/Sep/2026:17:05:19 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 403 372 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 NewWavesApp	2026-09-17 12:28:03 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.68.138.52 (US/United States/52.138.6 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.68.138.52 (US/United States/52.138.68.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇫🇷 venar	2026-09-17 11:44:16 (16 hours ago)	PrestaShop Security Module: directory traversal attempt detected	Web App Attack
🇩🇪 Vegascosmetics	2026-09-17 11:44:00 (16 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env) show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 11:21:02 (16 hours ago)	(mod_security) mod_security (id:243320) triggered by 34.68.138.52 (52.138.68.34.bc.googleusercontent ... show more (mod_security) mod_security (id:243320) triggered by 34.68.138.52 (52.138.68.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:20:54.693024 2026] [security2:error] [pid 30339:tid 30339] [client 34.68.138.52:39978] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)\|\|twccsolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "twccsolutions.com"] [uri "/.profile"] [unique_id "aqvNFjmgg1Js0s94fdouAQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-09-17 10:12:09 (17 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 consul.to	2026-09-17 08:53:19 (19 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 jormaster3k	2026-09-17 08:29:30 (19 hours ago)	Attack against Apache (too many 404s)	Web App Attack
🇬🇧 Aetherweb Ark	2026-09-17 07:15:15 (20 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.68.138.52 (US/United States/52.138.68.34.bc. ... show more (mod_security) mod_security (id:949110) triggered by 34.68.138.52 (US/United States/52.138.68.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇷🇺 ago.su	2026-09-17 06:56:22 (21 hours ago)	F2B blocked nginx bad bot [otd]	Hacking Web App Attack
🇳🇱 debestelapp	2026-09-17 06:50:14 (21 hours ago)		Web App Attack
🇪🇸 robotstxt	2026-09-17 06:34:55 (21 hours ago)	34.68.138.52 - - [17/Sep/2026:06:33:59 +0000] "GET //.env HTTP/2.0" 403 189 "https://noudiari.es/.// ... show more 34.68.138.52 - - [17/Sep/2026:06:33:59 +0000] "GET //.env HTTP/2.0" 403 189 "https://noudiari.es/.//.env" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" "-" edge="34.68.138.52" 34.68.138.52 - - [17/Sep/2026:06:33:59 +0000] "GET /static//app/.env HTTP/2.0" 403 189 "https://noudiari.es/static//app/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" "-" edge="34.68.138.52" 34.68.138.52 - - [17/Sep/2026:06:33:59 +0000] "GET /z9x8c7v6b5-debug-trigger-noudiari.es HTTP/2.0" 403 189 "https://noudiari.es/z9x8c7v6b5-debug-trigger-noudiari.es" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "-" edge="34.68.138.52" 34.68.138.52 - - [17/Sep/2026:06:33:59 +0000] "GET //.env HTTP/2.0" 403 189 "https://noudiari.es//.env" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-" edge="34.68.138.52" 34.68.138.52 - - [17/Sep/2026:06:33:59 +0000] "GET /static//.env HTTP ... show less	Web App Attack

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 45.39.5.13

🇬🇧 2a06:4880:8000::a2

🇩🇪 213.209.159.226

🇳🇱 204.76.203.214

🇳🇱 185.224.128.16

🇺🇸 165.254.234.105

🇳🇵 160.250.255.204

🇻🇳 160.30.157.211

🇮🇹 151.20.56.47

🇺🇸 134.195.89.159

🇧🇬 109.160.32.119

🇿🇦 102.39.10.165

🇭🇰 101.36.116.232

🇺🇸 98.174.39.249

🇺🇸 91.230.168.78

🇪🇸 89.45.242.237

🇸🇬 87.82.253.116

🇸🇪 81.237.155.113

🇧🇬 79.124.59.186

🇱🇹 62.60.130.228