JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.159.207.5

Activity Trending Down

Abuse Confidence Score

100% Critical

29 reports

25 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 5.207.159.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 25 distinct reporters

First reported

November 6th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 10 🇳🇱 Netherlands 5 🇨🇿 Czechia 3

Most common categories Web App Attack 28 Bad Web Bot 10 Brute-Force 9 Hacking 5 Exploited Host 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-11-06 23:18:20 UTC · (1 week ago)		Brute-Force Web App Attack
Anonymous	2026-11-06 21:18:43 UTC · (1 week ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 Epimetheus	2026-11-06 20:28:21 UTC · (1 week ago)	Zombie network / Bot scanner detected: [GET] /backend/.env [GET] /wrangler.toml [GET] /sendgrid.env [GET] /.output/server/index.mjs [GET] /firebase-service-account.json [GET] /Dockerfile [GET] /gcp-service.json [GET] /firebaseConfig.js [GET] /.dev.v ... show more Zombie network / Bot scanner detected: [GET] /backend/.env [GET] /wrangler.toml [GET] /sendgrid.env [GET] /.output/server/index.mjs [GET] /firebase-service-account.json [GET] /Dockerfile [GET] /gcp-service.json [GET] /firebaseConfig.js [GET] /.dev.vars.production [GET] /config/.env.local UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/) show less	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-11-06 20:25:39 UTC · (1 week ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇩🇪 macrob	2026-11-06 20:14:55 UTC · (1 week ago)	2026/11/06 20:14:54 [error] 4151747#4151747: 10161174 access forbidden by rule, client: 34.159.207.5, server: binixo.lk, request: "GET /img../.env HTTP/2.0", host: "binixo.lk" 2026/11/06 20:14:54 [error] 4151747#4151747: 10161174 access forbidden b ... show more 2026/11/06 20:14:54 [error] 4151747#4151747: 10161174 access forbidden by rule, client: 34.159.207.5, server: binixo.lk, request: "GET /img../.env HTTP/2.0", host: "binixo.lk" 2026/11/06 20:14:54 [error] 4151747#4151747: 10161174 access forbidden by rule, client: 34.159.207.5, server: binixo.lk, request: "GET /assets../.env HTTP/2.0", host: "binixo.lk" 2026/11/06 20:14:54 [error] 4151747#4151747: *10161174 access forbidden by rule, client: 34.159.207.5, server: binixo.lk, request: "GET /js../.env HTTP/2.0", host: "binixo.lk" ... show less	Web App Attack
🇨🇦 Anytech	2026-11-06 20:11:16 UTC · (1 week ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
Anonymous	2026-11-06 19:03:46 UTC · (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇵🇷 HRCOM	2026-11-06 18:22:25 UTC · (1 week ago)	Web attack: probing for sensitive files. 11 malicious requests (24 in total) between 2026-11-06 18:22:20 UTC and 2026-11-06 18:22:26 UTC. Examples: GET /production/.env; GET /old/.env; GET /.docker/.env; GET /api/.env.bak; GET /staging/.env (+6 more) ... show more Web attack: probing for sensitive files. 11 malicious requests (24 in total) between 2026-11-06 18:22:20 UTC and 2026-11-06 18:22:26 UTC. Examples: GET /production/.env; GET /old/.env; GET /.docker/.env; GET /api/.env.bak; GET /staging/.env (+6 more). Attack requests answered 302 x11; no file was disclosed. User-Agent claims to be Applebot, but reverse DNS of the IP does not belong to Applebot (spoofed crawler). Rotated 17 different User-Agent strings during the attack. Burst of 10+ requests at 2+ per second. Target: web server (HTTPS). Blocked automatically after repeated requests for sensitive files. show less	Web App Attack Bad Web Bot
Anonymous	2026-11-06 18:19:46 UTC · (1 week ago)	2026-11-07: auto (probe_watch autoblock): api_enumeration,probe_path_traversal,probe_secret_config, 263 requests on consumer-host-unavailable, nginx-only + Data C. Observed against Billease APIs; source blocked. Datacenter IP (Google LLC), no legitim ... show more 2026-11-07: auto (probe_watch autoblock): api_enumeration,probe_path_traversal,probe_secret_config, 263 requests on consumer-host-unavailable, nginx-only + Data C. Observed against Billease APIs; source blocked. Datacenter IP (Google LLC), no legitimate customer traffic. Automated report. show less	Web App Attack Hacking
🇩🇪 kkw	2026-11-06 18:19:11 UTC · (1 week ago)	[REDACTED] 34.159.207.5 - - [06/Nov/2026:19:19:10 +0100] "GET /.//.env HTTP/2.0" 404 366 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" ... (mode: searching http-sensitive-files)	Bad Web Bot Web App Attack
🇩🇪 kernel-error.de	2026-11-06 17:11:04 UTC · (1 week ago)	::ffff:34.159.207.5 - - [06/Nov/2026:18:11:02 +0100] "GET /wp-content/themes/hemingway/assets/js/global.js.map HTTP/2.0" 404 7954 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537. ... show more ::ffff:34.159.207.5 - - [06/Nov/2026:18:11:02 +0100] "GET /wp-content/themes/hemingway/assets/js/global.js.map HTTP/2.0" 404 7954 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" www.kernel-error.de HTTP/2.0 https 0.151 0.151 404 unix:/var/run/php-fpm.sock TLSv1.3 TLS_CHACHA20_POLY1305_SHA256 X25519MLKEM768 MISS ::ffff:34.159.207.5 - - [06/Nov/2026:18:11:02 +0100] "GET /wp-content/plugins/enlighter/cache/enlighterjs.min.js.map HTTP/2.0" 404 7954 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" www.kernel-error.de HTTP/2.0 https 0.137 0.138 404 unix:/var/run/php-fpm.sock TLSv1.3 TLS_CHACHA20_POLY1305_SHA256 X25519MLKEM768 MISS ::ffff:34.159.207.5 - - [06/Nov/2026:18:11:02 +0100] "GET /wp-includes/js/comment-reply.min.js.map HTTP/2.0" 404 7954 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show less	Web App Attack
🇩🇪 macrob	2026-11-06 17:05:29 UTC · (1 week ago)	2026/11/06 17:05:27 [error] 4151751#4151751: 9615540 access forbidden by rule, client: 34.159.207.5, server: binixo.com, request: "GET /laravel../.env HTTP/2.0", host: "binixo.com" 2026/11/06 17:05:27 [error] 4151751#4151751: 9615540 access forbidd ... show more 2026/11/06 17:05:27 [error] 4151751#4151751: 9615540 access forbidden by rule, client: 34.159.207.5, server: binixo.com, request: "GET /laravel../.env HTTP/2.0", host: "binixo.com" 2026/11/06 17:05:27 [error] 4151751#4151751: 9615540 access forbidden by rule, client: 34.159.207.5, server: binixo.com, request: "GET /css../.env HTTP/2.0", host: "binixo.com" 2026/11/06 17:05:27 [error] 4151751#4151751: *9615540 access forbidden by rule, client: 34.159.207.5, server: binixo.com, request: "GET /uploads../.env HTTP/2.0", host: "binixo.com" ... show less	Web App Attack
🇳🇱 Savvii	2026-11-06 16:27:22 UTC · (1 week ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-06 16:20:11 UTC · (1 week ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Web App Attack Hacking SQL Injection
🇳🇱 Site.eu	2026-11-06 16:17:59 UTC · (1 week ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇴 200.105.141.172

🇳🇱 195.178.110.217

🇨🇭 179.43.153.2

🇵🇱 162.158.102.48

🇺🇸 100.29.192.72

🇮🇹 91.80.93.130

🇭🇰 13.70.4.78

🇳🇱 195.178.110.227

🇳🇱 195.178.110.30

🇻🇳 123.31.31.125

🇻🇳 118.70.182.193

🇨🇳 116.53.130.4

🇳🇱 80.82.65.202

🇨🇳 60.12.106.119

🇳🇱 46.151.178.14

🇬🇧 35.203.210.224

🇫🇷 2a01:e0a:8d0:4b60:f75f:47f5:38f3:fe7c

🇺🇸 2607:f8b0:4003:c44::16

🇺🇸 194.187.179.196

🇺🇸 192.159.99.224