JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.76.252.92

34.76.252.92

Recent Activity

17 reports found in our database

88% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Google LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396982

Hostname(s)

92.252.76.34.bc.googleusercontent.com

Domain Name

google.com

Country

🇧🇪 Belgium

City

Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.76.252.92:

This IP address has been reported a total of 17 times from 16 distinct sources. 34.76.252.92 was first reported on September 11th 2026, and the most recent report was 15 hours ago. In the last 60 days, the top reporter locations were: Germany with 5 reports; Netherlands with 3 reports; United States of America with 3 reports. The most common categories in these recent reports were: Web App Attack 11 times; Hacking 4 times; Bad Web Bot 3 times; Brute-Force 3 times; SQL Injection 2 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Nixwig	2026-09-12 21:25:55 (15 hours ago)	34.76.252.92 - - [12/Sep/2026:21:25:54 +0000] "GET /static../.env HTTP/1.1" 404 749 "-" "Mozilla/5.0 ... show more 34.76.252.92 - - [12/Sep/2026:21:25:54 +0000] "GET /static../.env HTTP/1.1" 404 749 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 34.76.252.92 - - [12/Sep/2026:21:25:54 +0000] "GET /media../.env HTTP/1.1" 404 749 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]) Chrome/128.0.6647.220 Mobile Safari/537.36" 34.76.252.92 - - [12/Sep/2026:21:25:54 +0000] "GET /@fs/root/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 404 757 "-" "Mozilla/5.0 (Windows NT 10.0; rv:127.6) Gecko/20100101 Firefox/127.6; compatible; GPTBot/1.2; +https://openai.com/gptbot" ... show less	Web App Attack
🇩🇪 gadix	2026-09-12 17:14:40 (19 hours ago)	[12/Sep/2026:19:14:40.382887 +0200] aqWIgN3ntUTjzr5-RQ-okgAAAJA 34.76.252.92 52426 127.0.0.1 7081 [1 ... show more [12/Sep/2026:19:14:40.382887 +0200] aqWIgN3ntUTjzr5-RQ-okgAAAJA 34.76.252.92 52426 127.0.0.1 7081 [12/Sep/2026:19:14:40.514867 +0200] aqWIgN3ntUTjzr5-RQ-okwAAAIc 34.76.252.92 52440 127.0.0.1 7081 [12/Sep/2026:19:14:40.535396 +0200] aqWIgN3ntUTjzr5-RQ-olAAAAIw 34.76.252.92 52542 127.0.0.1 7081 ... show less	Web App Attack
Anonymous	2026-09-12 13:43:43 (22 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.76.252.92 (BE/Belgium/92.252.76.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.76.252.92 (BE/Belgium/92.252.76.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇳🇱 tpjg	2026-09-12 11:12:24 (1 day ago)	Automated: 15 requests with error status in 120s window from 34.76.252.92. Evidence: /@fs/home/ec2-u ... show more Automated: 15 requests with error status in 120s window from 34.76.252.92. Evidence: /@fs/home/ec2-user/.aws/credentials:404,/static../.aws/credentials:404,/assets../../../etc/passwd:404,/@fs/etc/passwd:404,/files../etc/passwd:404,/.env:404,/static../etc/passwd:404,/app/.env:404,/.env.local:404,/@fs/proc/self/environ:404,/@fs/proc/self/environ:404,/media../etc/passwd:404,/media../.env:404,/static../.env:404,/__aws_leak_probe_d6338532__:404 show less	Web App Attack
🇳🇱 Savvii	2026-09-12 11:01:41 (1 day ago)	20 attempts against mh_ha-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-09-12 11:00:00 (1 day ago)	.env scanning [BY]	Web App Attack
🇺🇸 brightenfield	2026-09-12 10:03:31 (1 day ago)	Web App Attack	Web App Attack
🇦🇺 artful	2026-09-12 09:28:00 (1 day ago)	Excessive errors ~1.3k in recent hours	Web App Attack
🇺🇸 xmission.com	2026-09-12 08:50:15 (1 day ago)	Blocked by UFW (TCP on 8443) Source port: 26412 TTL: 60 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8443) Source port: 26412 TTL: 60 Packet length: 60 TOS: 0x00 This report (for 34.76.252.92) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-12 08:25:33 (1 day ago)	$f2bV_matches	Port Scan Hacking Brute-Force
🇧🇬 Filipe Dávila	2026-09-12 08:24:46 (1 day ago)	[Sat Sep 12 04:24:40.333240 2026] [core:error] [pid 603355:tid 140699156354816] [client 34.76.252.92 ... show more [Sat Sep 12 04:24:40.333240 2026] [core:error] [pid 603355:tid 140699156354816] [client 34.76.252.92:50980] AH00126: Invalid URI in request GET /assets../../../etc/passwd HTTP/1.1 [Sat Sep 12 04:24:43.976329 2026] [core:error] [pid 603568:tid 140698925868800] [client 34.76.252.92:51194] AH00126: Invalid URI in request GET /assets../../../.env HTTP/1.1 show less	Web App Attack
Anonymous	2026-09-12 07:40:02 (1 day ago)	\| Common web attack.	Web App Attack Hacking SQL Injection
🇳🇱 Savvii	2026-09-12 07:17:13 (1 day ago)	10 attempts against mh_ha-misc-ban on mars	Brute-Force Web App Attack
🇳🇿 Antinson	2026-09-12 06:05:15 (1 day ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-09-12 00:07:43 (1 day ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-7)	Hacking Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 51.116.2.82

🇵🇰 203.128.6.156

🇫🇷 200.13.207.144

🇫🇷 200.13.207.84

🇫🇷 200.13.206.138

🇫🇷 200.13.206.110

🇳🇱 195.178.110.101

🇬🇧 188.240.59.60

🇵🇾 181.91.84.60

🇺🇸 174.105.15.219

🇦🇹 152.53.67.96

🇭🇰 121.202.201.174

🇺🇸 43.166.242.53

🇬🇧 35.203.210.239

🇬🇧 35.203.210.19

🇺🇸 31.56.216.10

🇺🇸 20.84.153.7

🇧🇷 2803:9810:6458:9b10:203a:3680:4e45:3ea3

🇷🇺 217.65.3.240

🇺🇸 216.152.156.26