JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.79.52.241

34.79.52.241 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	241.52.79.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.79.52.241

Whois 34.79.52.241

IP Abuse Reports for 34.79.52.241:

This IP address has been reported a total of 35 times from 27 distinct sources. 34.79.52.241 was first reported on August 31st 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 10:24:04 (18 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.79.52.241 (241.52.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.79.52.241 (241.52.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:23:56.076011 2026] [security2:error] [pid 20024:tid 20024] [client 34.79.52.241:52146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aics.alitcogroup.com"] [uri "/.env.prod"] [unique_id "apanvDO8SPvI7sjgP3t7lQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 09:22:33 (1 hour ago)	(mod_security) mod_security (id:949110) triggered by 34.79.52.241 (BE/Belgium/241.52.79.34.bc.google ... show more (mod_security) mod_security (id:949110) triggered by 34.79.52.241 (BE/Belgium/241.52.79.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 08:32:25 (2 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.79.52.241 (241.52.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.79.52.241 (241.52.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:32:21.032724 2026] [security2:error] [pid 2073:tid 2073] [client 34.79.52.241:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|map.365soft.top\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "map.365soft.top"] [uri "/storage/logs/laravel.log"] [unique_id "apaNlfUHV7ODhYmXms14lAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-09-01 07:33:53 (3 hours ago)	34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4422 "-" "crusader- ... show more 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4422 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4422 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /.env.backup HTTP/1.1" 404 4420 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /.env.production HTTP/1.1" 404 4420 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /.env.local HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /.env HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /.env.old HTTP/1.1" 404 4420 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /.env.example HTTP/1.1" 404 4420 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:09:33:50 +0200] "GET /.env.save HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.79.52.241 - - [ show less	Web App Attack Brute-Force
🇬🇧 consul.to	2026-09-01 07:32:34 (3 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 voormedia	2026-09-01 07:24:24 (3 hours ago)	Accessed trap at '/actuator/env'	Web App Attack
Anonymous	2026-09-01 07:20:05 (3 hours ago)	Bot / scanning and/or hacking attempts: GET /wp-config.php~ HTTP/1.1, GET /wp-config.php.bak HTTP/1. ... show more Bot / scanning and/or hacking attempts: GET /wp-config.php~ HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.local HTTP/1.1, GET /actuator/env HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env HTTP/1.1, GET /.env.old HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-09-01 07:13:21 (3 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-01 07:06:31 (3 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-01 06:28:24 (4 hours ago)	Web application attack detected.	Web App Attack
🇫🇷 ELYAZ	2026-09-01 05:44:32 (4 hours ago)	(y3) Failed access -byebye- from 34.79.52.241 (BE/Belgium/241.52.79.34.bc.googleusercontent.com): ( ... show more (y3) Failed access -byebye- from 34.79.52.241 (BE/Belgium/241.52.79.34.bc.googleusercontent.com): (CF_ENABLE) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-01 05:07:41 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.79.52.241 (241.52.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.79.52.241 (241.52.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:07:36.545438 2026] [security2:error] [pid 11350:tid 11350] [client 34.79.52.241:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.grainavi.com"] [uri "/.env.old"] [unique_id "apZdmBd0ejtybIxzxFt6ngAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2026-09-01 04:24:31 (6 hours ago)	URL Probing: /wp-config.php~	Web App Attack
🇮🇹 Inartis	2026-09-01 04:12:27 (6 hours ago)	34.79.52.241 - - [01/Sep/2026:06:12:25 +0200] "GET /.env.bak HTTP/1.1" 403 7847 "-" "crusader-worker ... show more 34.79.52.241 - - [01/Sep/2026:06:12:25 +0200] "GET /.env.bak HTTP/1.1" 403 7847 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:06:12:25 +0200] "GET /.env.dev HTTP/1.1" 403 7847 "-" "crusader-worker/1.0" 34.79.52.241 - - [01/Sep/2026:06:12:25 +0200] "GET /.env.backup HTTP/1.1" 403 7847 "-" "crusader-worker/1.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 03:49:18 (6 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.56.101.210

🇷🇴 92.118.39.77

🇳🇱 45.148.10.141

🇺🇸 159.65.166.11

🇺🇸 134.228.205.245

🇬🇧 95.154.198.146

🇸🇪 46.59.91.172

🇺🇸 34.22.40.36

🇫🇷 2400:cb00:538:1000:c4c0:608b:4b75:b164

🇦🇿 217.179.126.43

🇸🇬 152.32.218.30

🇩🇪 142.251.127.84

🇫🇷 138.63.215.119

🇳🇱 89.42.231.200

🇸🇬 84.75.155.175

🇳🇱 45.148.10.15

🇩🇪 43.228.157.53

🇨🇳 27.206.244.186

🇳🇱 185.180.109.243

🇨🇳 123.178.210.221