JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.159.159.102

Recent Activity

Abuse Confidence Score

100% Critical

109 reports

78 reporters · latest 1 day ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 102.159.159.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

109 from 78 distinct reporters

First reported

November 1st 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 24 🇩🇪 Germany 23 🇺🇸 United States of America 20

Most common categories Web App Attack 90 Bad Web Bot 35 Brute-Force 31 Hacking 21 DDoS Attack 7

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-07 11:34:25 UTC · (1 day ago)	Web scanning or attack attempt	DDoS Attack Ping of Death Web Spam Hacking
🇫🇷 SpaceHost-Server	2026-11-06 23:18:20 UTC · (1 day ago)		Brute-Force Web App Attack
🇺🇸 jormaster3k	2026-11-06 21:17:44 UTC · (1 day ago)	Attack against Apache (too many 404s)	Web App Attack
Anonymous	2026-11-06 20:46:26 UTC · (2 days ago)	Automatically blocked after 16 security events. Observed sensitive configuration-file probes. Source: Cloudflare security controls.	Hacking Bad Web Bot Web App Attack
🇩🇪 wpadm4	2026-11-06 16:45:26 UTC · (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇦 jacqueskruger	2026-11-06 16:31:08 UTC · (2 days ago)	Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-06T02:07:22Z. Evidence: repeated distinct requests matchin ... show more Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-06T02:07:22Z. Evidence: repeated distinct requests matching our high-confidence scanner rules. show less	Bad Web Bot
🇳🇱 Alt255	2026-11-06 16:13:22 UTC · (2 days ago)	[ti-02ov] Web exploit scanning: 6 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.159.159.102 - - [06/Nov/2026:17:13:04 +0100] "GET /.env.docker HTTP/2.0" 301 488 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compa ... show more [ti-02ov] Web exploit scanning: 6 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.159.159.102 - - [06/Nov/2026:17:13:04 +0100] "GET /.env.docker HTTP/2.0" 301 488 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 34.159.159.102 - - [06/Nov/2026:17:13:04 +0100] "GET /staging/.env HTTP/2.0" 301 488 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.159.159.102 - - [06/Nov/2026:17:13:04 +0100] "GET /dev/.env HTTP/2.0" 301 488 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.159.159.102 - - [06/Nov/2026:17:13:04 +0100] "GET /production/.env HTTP/2.0" 301 488 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://develo ... show less	Bad Web Bot Web App Attack
🇧🇪 madeit	2026-11-06 15:52:12 UTC · (2 days ago)		Web App Attack
🇻🇮 Axel	2026-11-06 15:11:31 UTC · (2 days ago)	WAF/ModSecurity blocked 131 malicious request(s) (HTTP 403) from this IP. Activity: Crawler - ClaudeBot x47; Crawler - OpenAI x43; request_uri: .ENV Files x23; Crawler - ChatGPT x7; request_uri: directory travel x4; blocked sensitive path x3; Apache ... show more WAF/ModSecurity blocked 131 malicious request(s) (HTTP 403) from this IP. Activity: Crawler - ClaudeBot x47; Crawler - OpenAI x43; request_uri: .ENV Files x23; Crawler - ChatGPT x7; request_uri: directory travel x4; blocked sensitive path x3; Apache - Path Traversal x2; request_uri: hidden .php execute x1; request_uri: .PHP backup files x1. Latest: 2026-11-06T15:11:31Z. show less	Hacking Web App Attack
🇩🇪 Hary74656	2026-11-06 14:25:28 UTC · (2 days ago)	Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30. [earlier text truncated] nt 34.159.159.102] [realclient 34.159.159.102] - - [06/Nov/2026:15:25:27 +0100] [vhost schani.hostmi.at] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/ ... show more Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30. [earlier text truncated] nt 34.159.159.102] [realclient 34.159.159.102] - - [06/Nov/2026:15:25:27 +0100] [vhost schani.hostmi.at] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 326 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" [client 34.159.159.102] [realclient 34.159.159.102] - - [06/Nov/2026:15:25:27 +0100] [vhost schani.hostmi.at] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 326 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" [client 34.159.159.102] [realclient 34.159.159.102] - - [06/Nov/2026:15:25:27 +0100] [vhost schani.hostmi.at] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 326 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" show less	Web App Attack
🇩🇪 dbmwebdesign	2026-11-06 14:15:13 UTC · (2 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇻🇮 Axel	2026-11-06 12:54:37 UTC · (2 days ago)	WAF/ModSecurity blocked 169 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x55; Crawler - OpenAI x46; Crawler - ClaudeBot x18; Crawler - ChatGPT x18; request_uri: directory travel x9; Block .env x9; cPGuard - Bad Bot ... show more WAF/ModSecurity blocked 169 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x55; Crawler - OpenAI x46; Crawler - ClaudeBot x18; Crawler - ChatGPT x18; request_uri: directory travel x9; Block .env x9; cPGuard - Bad Bot/UserAgent detected and blocked. x5; blocked sensitive path x3; ModSecurity rule x2; request_uri: read joomla configuration file x1; request_uri: .PHP backup files x1; Block /env.* x1; Apache - Path Traversal x1. Latest: 2026-11-06T12:54:37Z. show less	Hacking Brute-Force Web App Attack
🇳🇱 Savvii	2026-11-06 11:38:27 UTC · (2 days ago)	25 attempts against mh-misbehave-ban on lunar	Brute-Force Bad Web Bot Web App Attack
🇳🇱 olen.net	2026-11-06 11:19:19 UTC · (2 days ago)	Fail2Ban - apollo: Web exploit probing (WordPress, .env, .git, CGI, ...)	Web App Attack
🇬🇧 consul.to	2026-11-06 11:11:32 UTC · (2 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 185.194.178.81

🇦🇷 148.222.222.0

🇦🇺 144.172.64.83

🇺🇸 45.156.129.83

🇨🇳 36.148.73.97

🇺🇸 34.9.195.250

🇺🇸 143.246.215.90

🇳🇱 86.38.187.95

🇨🇳 219.159.79.49

🇩🇪 167.99.131.245

🇬🇧 146.70.61.37

🇺🇸 100.37.46.139

🇧🇬 79.124.40.142

🇺🇸 43.166.248.223

🇺🇸 3.141.10.164

🇸🇬 2406:da18:a1e:c10e:67ec::5

🇸🇬 2406:da18:a1e:c10c:b36::a

🇨🇦 216.209.185.34

🇨🇭 172.161.40.129

🇺🇸 150.136.20.229