JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.159.51.79

Activity Trending Down

Abuse confidence score ?

85% Critical

35 reports

29 reporters · latest 3 weeks ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	79.51.159.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.159.51.79

Export CSV

This IP address has been reported a total of 35 times from 29 distinct sources. 34.159.51.79 was first reported on October 6th 2026, and the most recent report was 3 weeks ago. In the last 60 days, the top reporter locations were: Germany with 12 reports; Netherlands with 6 reports; France with 4 reports. The most common categories in these recent reports were: Web App Attack 24 times; Brute-Force 13 times; Bad Web Bot 12 times; Hacking 6 times; Port Scan 3 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-10-07 04:26:41 (3 weeks ago)	414 requests with url.path .env 199 requests with url.path /@fs/*	Brute-Force Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-10-07 03:39:00 (3 weeks ago)	2026-10-07T03:39:00+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-10-07T03:39:00+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.159.51.79 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=16131 DF PROTO=TCP SPT=50726 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-07T03:39:01+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.159.51.79 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=16132 DF PROTO=TCP SPT=50726 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-07T03:39:02+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.159.51.79 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=16133 DF PROTO=TCP SPT=50726 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-10-07 01:09:42 (3 weeks ago)	34.159.51.79 - - [07/Oct/2026:02:09:40 +0100] "POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_p ... show more 34.159.51.79 - - [07/Oct/2026:02:09:40 +0100] "POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" show less	Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-10-07 00:47:09 (3 weeks ago)	34.159.51.79 - - [07/Oct/2026:01:47:02 +0100] "GET //.env HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compat ... show more 34.159.51.79 - - [07/Oct/2026:01:47:02 +0100] "GET //.env HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 34.159.51.79 - - [07/Oct/2026:01:47:03 +0100] "GET /.env HTTP/2.0" 404 994 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.159.51.79 - - [07/Oct/2026:01:47:07 +0100] "GET //.env HTTP/2.0" 404 994 "http://files.betatechnologies.info:8080/.//.env" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" show less	Brute-Force Web App Attack
🇩🇪 Philister11	2026-10-07 00:09:16 (3 weeks ago)	CrowdSec: crowdsecurity/http-bad-user-agent (DE/AS396982)	Bad Web Bot Web App Attack
Anonymous	2026-10-06 17:01:24 (3 weeks ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
Anonymous	2026-10-06 16:36:39 (3 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇳🇱 RobotOilInc	2026-10-06 15:48:25 (3 weeks ago)	[Coraza - Automated] Restricted URL Access Attempt. Data: Matched URL found: /config.js	Hacking Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-10-06 15:48:23 (3 weeks ago)	2026/10/06 16:48:19 [error] 3069275#3069275: 599710 access forbidden by rule, client: 34.159.51.79, ... show more 2026/10/06 16:48:19 [error] 3069275#3069275: 599710 access forbidden by rule, client: 34.159.51.79, server: bot.betatechnologies.info, request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "bot.betatechnologies.info" 2026/10/06 16:48:19 [error] 3069275#3069275: 599710 access forbidden by rule, client: 34.159.51.79, server: bot.betatechnologies.info, request: "GET /api/data/..%2f..%2f.env HTTP/2.0", host: "bot.betatechnologies.info" 2026/10/06 16:48:21 [error] 3069275#3069275: 599710 access forbidden by rule, client: 34.159.51.79, server: bot.betatechnologies.info, request: "GET /cache/original/%2e%2e/.env HTTP/2.0", host: "bot.betatechnologies.info" show less	Brute-Force Web App Attack
🇺🇸 hyena	2026-10-06 12:03:16 (3 weeks ago)	Repeated mod_security events.	Web App Attack
Anonymous	2026-10-06 11:51:22 (3 weeks ago)	Portscan: TCP/8080 (5x), TCP/8443 (5x)	Port Scan
Anonymous	2026-10-06 11:24:36 (3 weeks ago)	[Tue Oct 06 13:24:32.337974 2026] [access_compat:error] [pid 2281144:tid 2281144] [client 34.159.51. ... show more [Tue Oct 06 13:24:32.337974 2026] [access_compat:error] [pid 2281144:tid 2281144] [client 34.159.51.79:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.aws, referer: https://loretlargent.info/.aws/credentials [Tue Oct 06 13:24:32.348789 2026] [access_compat:error] [pid 2281267:tid 2281267] [client 34.159.51.79:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.aws, referer: https://loretlargent.info/.aws/config [Tue Oct 06 13:24:33.605371 2026] [authz_core:error] [pid 2281276:tid 2281276] [client 34.159.51.79:0] AH01630: client denied by server configuration: /var/www/wordpress/loretlargent.info/server-status, referer: https://loretlargent.info/server-status [Tue Oct 06 13:24:34.310805 2026] [access_compat:error] [pid 2281278:tid 2281278] [client 34.159.51.79:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.npmrc, referer: https://loretlargent.info/.npmrc [Tue Oct 06 13 ... show less	Web Spam Web App Attack
Anonymous	2026-10-06 11:05:22 (3 weeks ago)	[Tue Oct 06 13:05:21.008785 2026] [access_compat:error] [pid 2279678:tid 2279678] [client 34.159.51. ... show more [Tue Oct 06 13:05:21.008785 2026] [access_compat:error] [pid 2279678:tid 2279678] [client 34.159.51.79:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.npmrc, referer: https://loretlargent.info/.npmrc [Tue Oct 06 13:05:21.058768 2026] [access_compat:error] [pid 2277842:tid 2277842] [client 34.159.51.79:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.ssh, referer: https://loretlargent.info/.ssh/config [Tue Oct 06 13:05:21.077115 2026] [access_compat:error] [pid 2279915:tid 2279915] [client 34.159.51.79:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/server.key, referer: https://loretlargent.info/server.key [Tue Oct 06 13:05:21.081692 2026] [access_compat:error] [pid 2279503:tid 2279503] [client 34.159.51.79:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/key.pem, referer: https://loretlargent.info/key.pem [Tue Oct 06 13:05:21.10 ... show less	Web Spam Web App Attack
🇳🇱 Site.eu	2026-10-06 11:02:09 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-10-06 10:54:11 (3 weeks ago)	Crawler ignoring refusals \| ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claud ... show more Crawler ignoring refusals \| ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]), Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 (+8 more) \| path: /.npmrc, /.htpasswd, /dist/manifest.json (+13 more) show less	Bad Web Bot

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.216.172.182

🇳🇱 200.138.46.95

🇷🇴 193.46.255.86

🇻🇪 190.142.132.43

🇺🇸 185.191.171.19

🇧🇷 177.126.45.146

🇵🇱 172.225.187.79

🇩🇪 167.94.145.20

🇺🇸 153.75.225.110

🇯🇵 118.194.236.142

🇲🇹 92.251.124.73

🇫🇷 85.217.140.52

🇺🇸 50.6.205.47

🇦🇲 45.159.75.239

🇳🇱 45.148.10.240

🇨🇳 27.24.141.217

🇰🇷 211.46.188.16

🇨🇴 190.253.76.203

🇳🇱 185.136.15.82

🇪🇨 157.100.203.196