JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.159.105.134

34.159.105.134 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	134.105.159.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.159.105.134

Whois 34.159.105.134

IP Abuse Reports for 34.159.105.134:

This IP address has been reported a total of 39 times from 26 distinct sources. 34.159.105.134 was first reported on September 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Blexyel	2026-09-17 12:57:32 (1 hour ago)	34.159.105.134 - - [17/Sep/2026:14:57:31 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ... show more 34.159.105.134 - - [17/Sep/2026:14:57:31 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-17 12:30:07 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-17 11:02:48 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:02:44.091415 2026] [security2:error] [pid 17124:tid 17124] [client 34.159.105.134:58558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blushhairstyling.com.piratecostumesonline.com"] [uri "/.git/config"] [unique_id "aqvI1DZP54n_f-GVLsD3MAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 10:17:31 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:17:26.944736 2026] [security2:error] [pid 6144:tid 6154] [client 34.159.105.134:42356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blurmypic.com"] [uri "/.git/config"] [unique_id "aqu-NmKNlz0pffqq2xIsFgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 marten_o	2026-09-17 08:56:02 (5 hours ago)	34.159.105.134 - - [17/Sep/2026:10:56:02 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla ... show more 34.159.105.134 - - [17/Sep/2026:10:56:02 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 330 458 ... show less	Web App Attack
Anonymous	2026-09-17 08:54:03 (5 hours ago)	Bot / scanning and/or hacking attempts: GET /sendgrid/.env HTTP/1.1, GET /ses/.env HTTP/1.1, GET /ca ... show more Bot / scanning and/or hacking attempts: GET /sendgrid/.env HTTP/1.1, GET /ses/.env HTTP/1.1, GET /cache/.env HTTP/1.1, GET /transactional/.env HTTP/1.1, GET /campaign/.env HTTP/1.1, GET /local/.env HTTP/1.1, GET /azure/.env HTTP/1.1, GET /postmark/.env HTTP/1.1, GET /sparkpost/.env HTTP/1.1, GET /mailgun/.env HTTP/1.1, GET /brevo/.env HTTP/1.1, GET /gcp/.env HTTP/1.1, GET /bulk/.env HTTP/1.1, GET /sender/.env HTTP/1.1, GET /exapi/.env HTTP/1.1, GET /mailing/.env HTTP/1.1, GET /mailjet/.env HTTP/1.1, GET /notifications/.env HTTP/1.1, GET /newsletter/.env HTTP/1.1, GET /aws/.env HTTP/1.1, GET /lab/.env HTTP/1.1, GET /.env.backup2 HTTP/1.1, GET /mandrill/.env HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 FD-IX	2026-09-17 08:50:24 (5 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 revslowmo	2026-09-17 08:30:53 (5 hours ago)	Bot attempt ssh bruteforce	Brute-Force SSH
🇿🇦 conure.sh	2026-09-17 08:26:17 (5 hours ago)	csagent: score 21.5: 404 noise floor x6, secrets grab x2; 1 domain(s) in 1s	Web App Attack
🇫🇷 omartin	2026-09-17 07:46:35 (6 hours ago)	Critical Vulnerability Scan detected	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 04:35:45 (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:35:40.586639 2026] [security2:error] [pid 10805:tid 10805] [client 34.159.105.134:59246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoinbtcshop.com\|F\|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinbtcshop.com"] [uri "/.env.bak"] [unique_id "aqtuHGSjsDjFLzavjQ_PvQAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-17 04:04:42 (10 hours ago)	[ThuSep1706:04:38.7547442026][security2:error][pid1617322:tid1617457][client34.159.105.134:0]ModSecu ... show more [ThuSep1706:04:38.7547442026][security2:error][pid1617322:tid1617457][client34.159.105.134:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"fit-easy.com.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"aqtm1qLSHHEJY9-f8yTDewAAAQ0\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-17 03:35:44 (10 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
Anonymous	2026-09-16 16:20:40 (21 hours ago)	Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, Bad ... show more Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=23,9, Rate=20, Diversity=19,8. show less	Web App Attack DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 16:09:25 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.159.105.134 (134.105.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:09:17.079570 2026] [security2:error] [pid 1635:tid 1635] [client 34.159.105.134:33154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baysidechiropractic.net"] [uri "/.git/config"] [unique_id "aqq_LbMnz8UrVrxeiY5aSgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 204.199.57.196

🇨🇭 34.65.222.81

🇺🇸 216.180.246.128

🇵🇦 200.46.151.238

🇮🇳 182.48.211.33

🇦🇷 181.228.92.160

🇰🇷 165.154.52.159

🇺🇸 137.184.176.73

🇧🇬 109.160.32.106

🇰🇿 95.58.221.186

🇺🇦 94.179.1.38

🇺🇸 74.82.47.51

🇺🇸 65.49.20.108

🇨🇿 46.36.44.201

🇷🇴 2.57.121.25

🇺🇿 198.163.195.13

🇰🇷 168.107.28.249

🇳🇱 149.3.170.137

🇧🇩 103.74.230.95

🇫🇷 88.178.42.165