JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.94.160.252

34.94.160.252 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 61%: ?

61%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	252.160.94.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.94.160.252

Whois 34.94.160.252

IP Abuse Reports for 34.94.160.252:

This IP address has been reported a total of 13 times from 10 distinct sources. 34.94.160.252 was first reported on August 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 simpeg-adm.bandung.go.id	2026-09-01 06:32:09 (1 day ago)	...	Web Spam Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 03:45:27 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 Mangelot Hosting	2026-09-01 02:16:23 (1 day ago)	(modsecurity) srv102 ModSecurity 34.94.160.252 (252.160.94.34.bc.googleusercontent.com): 30 in the l ... show more (modsecurity) srv102 ModSecurity 34.94.160.252 (252.160.94.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Site.eu	2026-09-01 02:05:52 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇸🇬 Cloudkul Cloudkul	2026-09-01 01:25:22 (1 day ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
Anonymous	2026-09-01 01:13:02 (1 day ago)	Bot / scanning and/or hacking attempts: GET /info.php.bak HTTP/1.1, GET /preview/phpinfo.php HTTP/1. ... show more Bot / scanning and/or hacking attempts: GET /info.php.bak HTTP/1.1, GET /preview/phpinfo.php HTTP/1.1, GET /phpinfo.php~ HTTP/1.1, GET /qa/phpinfo.php HTTP/1.1, GET /www/phpinfo.php HTTP/1.1, GET /staging/phpinfo.php HTTP/1.1, GET /phpinfo.php.bak HTTP/1.1, GET /phpinfo.php.old HTTP/1.1, GET /webmail/phpinfo.php HTTP/1.1, GET /_phpinfo.php HTTP/1.1, GET /smtp/phpinfo.php HTTP/1.1, GET /cpanel/phpinfo.php HTTP/1.1, GET /beta/phpinfo.php HTTP/1.1, GET /uat/phpinfo.php HTTP/1.1, GET /phpinfo.php.save HTTP/1.1, GET /api/v1/.env HTTP/1.1, GET /api/v2/.env HTTP/1.1, GET /gateway/.env HTTP/1.1, GET /kafka/.env HTTP/1.1, GET /worker/.env HTTP/1.1, GET /gitlab/.env HTTP/1.1, GET /queue/.env HTTP/1.1, GET /circleci/.env HTTP/1.1, GET /travis/.env HTTP/1.1, GET /mysql/.env HTTP/1.1, GET /rabbitmq/.env HTTP/1.1, GET /elasticsearch/.env HTTP/1.1, GET /actions/.env HTTP/1.1, GET /.git/.env HTTP/1.1, GET /redis/.env HTTP/1.1, GET /cd/.env HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 01:10:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.94.160.252 (252.160.94.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.94.160.252 (252.160.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:10:49.271686 2026] [security2:error] [pid 29241:tid 29241] [client 34.94.160.252:33776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wedeliverstrippers.com"] [uri "/.git/config"] [unique_id "apYmGfSp0zkBrqeCbN772AAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Dunham Support	2026-09-01 00:45:11 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.94.160.252 (US/United States/252.160 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.94.160.252 (US/United States/252.160.94.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-08-31 04:43:11 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.94.160.252 (252.160.94.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.94.160.252 (252.160.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:43:05.258283 2026] [security2:error] [pid 2411:tid 2435] [client 34.94.160.252:43188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woadwellness.com"] [uri "/.git/config"] [unique_id "apUGWXNBOqNvLGPxyCH8NwAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 04:20:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.94.160.252 (252.160.94.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.94.160.252 (252.160.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:20:50.448296 2026] [security2:error] [pid 27332:tid 27358] [client 34.94.160.252:42038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wnsi.org"] [uri "/.git/config"] [unique_id "apUBIu06-gZ9LQmbsF2RTQAAARY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-30 08:45:03 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 mravb	2026-08-30 07:12:58 (3 days ago)	34.94.160.252 - - [30/Aug/2026:10:12:57 +0300] "GET /.git/config HTTP/1.1" 404 3083 "-" "Mozilla/5.0 ... show more 34.94.160.252 - - [30/Aug/2026:10:12:57 +0300] "GET /.git/config HTTP/1.1" 404 3083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-30 06:27:18 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 34.94.160.252 (252.160.94.34.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 34.94.160.252 (252.160.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 02:27:12.536347 2026] [security2:error] [pid 9310:tid 9310] [client 34.94.160.252:59960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sunstrongmetal.com"] [uri "/.git/config"] [unique_id "apPNQKhoFiHgpREMqKX_ZQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.67

🇺🇸 155.94.164.102

🇺🇸 66.132.195.54

🇻🇳 45.119.214.98

🇹🇼 35.201.251.103

🇨🇳 220.154.131.135

🇹🇷 212.64.211.148

🇦🇷 201.176.205.242

🇲🇽 186.96.145.241

🇹🇭 171.7.251.120

🇵🇰 153.117.1.166

🇺🇸 143.42.1.201

🇸🇬 140.245.100.10

🇻🇳 113.177.27.200

🇲🇽 93.189.39.7

🇩🇪 91.92.240.38

🇩🇪 81.14.174.138

🇺🇸 40.124.186.138

🇩🇪 35.246.179.252

🇧🇪 34.156.156.224