JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.159.25.255

34.159.25.255 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 66%: ?

66%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	255.25.159.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.159.25.255

Whois 34.159.25.255

IP Abuse Reports for 34.159.25.255:

This IP address has been reported a total of 13 times from 10 distinct sources. 34.159.25.255 was first reported on June 8th 2026, and the most recent report was 27 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-06-08 15:09:04 (27 minutes ago)	Port Scan detected from 34.159.25.255 (DE/Germany/Hesse/Frankfurt am Main/255.25.159.34.bc.googleu ... show more Port Scan detected from 34.159.25.255 (DE/Germany/Hesse/Frankfurt am Main/255.25.159.34.bc.googleusercontent.com). show less	Port Scan
🇨🇭 zynex	2026-06-08 15:06:01 (30 minutes ago)	URL Probing: /api/database.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 14:25:54 (1 hour ago)	(mod_security) mod_security (id:210730) triggered by 34.159.25.255 (255.25.159.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.159.25.255 (255.25.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 10:25:49.585465 2026] [security2:error] [pid 10123:tid 10151] [client 34.159.25.255:49122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gelatoconsapevole.it.theyogicat.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gelatoconsapevole.it.theyogicat.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aibQ7RB9LggbpCAnQvFAEwAAAVg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-08 10:22:30 (5 hours ago)	{"level":"info","ts":1780914149.203639,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1780914149.203639,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.25.255","remote_port":"42446","client_ip":"34.159.25.255","proto":"HTTP/1.1","method":"GET","host":"jihupdate.update.yxwvutsrutsrmlkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/actuator/env","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000063461,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://jihupdate.update.yxwvutsrutsrmlkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/actuator/env"],"Content-Type":[]}} {"level":"info","ts":1780914149.2097979,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159 ... show less	DDoS Attack Web App Attack
🇨🇦 SSH-Admin	2026-06-08 09:00:04 (6 hours ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 08:50:23 (6 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.159.25.255 (255.25.159.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.159.25.255 (255.25.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:50:09.813213 2026] [security2:error] [pid 26170:tid 26170] [client 34.159.25.255:41768] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|frogdesignmexico.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "frogdesignmexico.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiaCQWNjc1wid5e2bz1FTwAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-08 06:56:47 (8 hours ago)	Excessive 404/403 errors	Brute-Force
🇨🇭 Origon	2026-06-08 05:43:34 (9 hours ago)	http-probing - IP: 34.159.25.255 - time="2026-06-08T07:43:33+02:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 34.159.25.255 - time="2026-06-08T07:43:33+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.159.25.255 (DE/396982) : 4h ban on Ip 34.159.25.255" module=db show less	Web App Attack
🇨🇦 SSH-Admin	2026-06-08 04:01:03 (11 hours ago)	Probing for Exploits on ns153	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 02:06:21 (13 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.159.25.255 (255.25.159.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.159.25.255 (255.25.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:06:14.523107 2026] [security2:error] [pid 2257:tid 2273] [client 34.159.25.255:38852] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lasertagandgames.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lasertagandgames.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiYjlloeZZk4-Hnp5gwyqAAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-08 01:44:59 (13 hours ago)	Aggressive web scan	Web App Attack
🇳🇱 Savvii	2026-06-08 01:28:22 (14 hours ago)	20 attempts against mh-misbehave-ban on jva-jammy-dev	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-08 00:40:04 (14 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 185.242.177.4

🇺🇸 66.132.172.105

🇺🇸 64.62.156.201

🇦🇪 20.203.42.204

🇮🇱 5.29.134.31

🇯🇵 172.253.236.154

🇺🇸 165.154.36.71

🇵🇰 153.117.41.54

🇺🇸 137.184.138.237

🇧🇩 103.102.139.214

🇺🇸 98.89.204.118

🇸🇪 95.155.228.189

🇸🇪 91.236.116.50

🇨🇦 85.217.149.29

🇺🇸 66.132.195.86

🇩🇪 194.88.98.104

🇺🇸 184.105.247.202

🇻🇳 152.32.162.15

🇲🇳 103.50.205.131

🇨🇦 66.85.30.4