JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.9.52.97

34.9.52.97 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	97.52.9.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.9.52.97

Whois 34.9.52.97

IP Abuse Reports for 34.9.52.97:

This IP address has been reported a total of 83 times from 60 distinct sources. 34.9.52.97 was first reported on September 16th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-19 04:28:47 (2 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.9.52.97 (97.52.9.34.bc.googleusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 34.9.52.97 (97.52.9.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:28:39.122583 2026] [security2:error] [pid 28989:tid 28989] [client 34.9.52.97:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|backend.grainavi.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "backend.grainavi.com"] [uri "/ssl/server.key"] [unique_id "aq4Pd7OpgTuO4IBwEKvNDAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-09-18 22:27:12 (8 hours ago)	POST /lib/terminal-xhr.php	Web App Attack
🇧🇷 dermatovirtual	2026-09-18 20:50:16 (9 hours ago)	Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ... show more Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 259 unauthorized requests recorded between 2026-09-17 20:47:12 UTC and 2026-09-17 20:48:21 UTC (rate: ~225,2 req/min). Edge perimeter firewall drop active. Log sample: [2026-09-17 20:48:19 UTC] IP: 34.9.52.97 - W3C IIS (Port 443): GET /model/.env -> HTTP 404 [CLIENT: 34.9.52.97] [2026-09-17 20:48:19 UTC] IP: 34.9.52.97 - W3C IIS (Port 443): GET /portal/.env -> HTTP 404 [CLIENT: 34.9.52.97] [2026-09-17 20:48:20 UTC] IP: 34.9.52.97 - W3C IIS (Port 443): GET /.github/.env -> HTTP 404 [CLIENT: 34.9.52.97] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-18 19:49:20 (10 hours ago)	Aggressive web scan	Web App Attack
🇺🇸 deskpass.com	2026-09-18 18:55:31 (11 hours ago)	POST /icecoder/lib/terminal-xhr.php	Web App Attack
Anonymous	2026-09-18 04:01:25 (1 day ago)	SIEM ALERT AUTO REPORT	Email Spam
Anonymous	2026-09-18 03:14:54 (1 day ago)	34.9.52.97 - - [18/Sep/2026:03:14:53 +0000] "GET /en-ca/api/proc/self/environ HTTP/2.0" 200 24439 " ... show more 34.9.52.97 - - [18/Sep/2026:03:14:53 +0000] "GET /en-ca/api/proc/self/environ HTTP/2.0" 200 24439 "https://blog.ivonne.ca/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" "34.9.52.97" "-" ... show less	Web App Attack
🇳🇱 Site.eu	2026-09-18 02:49:44 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 SpaceHost-Server	2026-09-17 22:21:53 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-09-17 21:22:42 (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇧🇷 dermatovirtual	2026-09-17 20:49:42 (1 day ago)	Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ... show more Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 131 unauthorized requests recorded between 2026-09-17 20:47:12 UTC and 2026-09-17 20:47:19 UTC (rate: ~131 req/min). Edge perimeter firewall drop active. Log sample: [2026-09-17 20:47:18 UTC] IP: 34.9.52.97 - W3C IIS (Port 443): GET /common/.env -> HTTP 404 [CLIENT: 34.9.52.97] [2026-09-17 20:47:18 UTC] IP: 34.9.52.97 - W3C IIS (Port 443): GET /public../.env -> HTTP 404 [CLIENT: 34.9.52.97] [2026-09-17 20:47:18 UTC] IP: 34.9.52.97 - W3C IIS (Port 443): GET /private/.env -> HTTP 404 [CLIENT: 34.9.52.97] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-17 19:22:02 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
Anonymous	2026-09-17 18:20:25 (1 day ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇮🇩 Burayot	2026-09-17 16:41:29 (1 day ago)	LF_APACHE_403: 34.9.52.97 (US/United States/97.52.9.34.bc.googleusercontent.com), more than 10 Apach ... show more LF_APACHE_403: 34.9.52.97 (US/United States/97.52.9.34.bc.googleusercontent.com), more than 10 Apache 403 hits in the last 3600 secs show less	Web App Attack
🇺🇸 billyw0nka	2026-09-17 15:09:42 (1 day ago)	pattern: .env	Hacking

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.180.211.214

🇨🇳 139.170.141.170

🇨🇳 115.190.213.72

🇮🇳 103.248.120.6

🇺🇸 70.169.11.216

🇳🇱 45.148.10.240

🇺🇸 40.124.186.184

🇧🇪 34.79.40.62

🇩🇪 2a01:7e01::2000:c2ff:fea5:6058

🇸🇳 213.154.77.61

🇺🇬 196.0.34.106

🇨🇴 190.67.232.220

🇸🇪 171.25.158.82

🇩🇪 165.154.138.34

🇮🇩 128.14.233.38

🇮🇳 117.247.193.27

🇧🇩 103.152.105.209

🇮🇳 103.149.197.34

🇫🇷 85.217.140.12

🇬🇷 83.235.21.125