JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.159.63.213

34.159.63.213 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 90%: ?

90%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	213.63.159.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.159.63.213

Whois 34.159.63.213

IP Abuse Reports for 34.159.63.213:

This IP address has been reported a total of 17 times from 16 distinct sources. 34.159.63.213 was first reported on June 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-16 22:03:49 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-15. show less	Web App Attack SSH Hacking
🇧🇾 lns.bz	2026-06-15 14:44:16 (2 days ago)	Too many 404 requests [BY]	Web App Attack
🇳🇱 Savvii	2026-06-15 10:58:57 (2 days ago)	30 attempts against mh-modsecurity-ban on neon	Brute-Force Web App Attack
🇩🇪 BlueWire Hosting	2026-06-15 09:23:33 (2 days ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-15 07:44:45 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.159.63.213 (213.63.159.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.159.63.213 (213.63.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:44:39.019149 2026] [security2:error] [pid 9094:tid 9094] [client 34.159.63.213:54578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hierrosbernal.com"] [uri "/.env.staging"] [unique_id "ai-tZ7gYc-78Y0qQSMmw5gAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-15 07:39:49 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 thedreamer.nl	2026-06-15 06:52:33 (3 days ago)	34.159.63.213 - - [15/Jun/2026:08:46:55 +0200] "GET /.env.prod HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Lin ... show more 34.159.63.213 - - [15/Jun/2026:08:46:55 +0200] "GET /.env.prod HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Linux; Android 9; moto g(7) power) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" 34.159.63.213 - - [15/Jun/2026:08:46:55 +0200] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Linux; Android 9; motorola one vision) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" 34.159.63.213 - - [15/Jun/2026:08:46:55 +0200] "GET /.env.prod.bak HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" 34.159.63.213 - - [15/Jun/2026:08:46:55 +0200] "GET /.env.backup.txt HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Linux; Android 9; Redmi K20 Pro Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0. ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 bluematrix	2026-06-15 04:27:09 (3 days ago)	crowdsecurity/http-sensitive-files - Ip 34.159.63.213 performed 'crowdsecurity/http-sensitive-files' ... show more crowdsecurity/http-sensitive-files - Ip 34.159.63.213 performed 'crowdsecurity/http-sensitive-files' (5 events over 30.203539ms) at 2026-06-15 04:27:09.816204297 +0000 UTC show less	Port Scan Hacking Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-06-15 02:47:38 (3 days ago)	Web scanning / probing for vulnerable paths \| URL: /sendgrid/.env.production \| Evidence: rosanaturis ... show more Web scanning / probing for vulnerable paths \| URL: /sendgrid/.env.production \| Evidence: rosanaturismo.com.br 34.159.63.213 - - [15/Jun/2026:04:47:13 +0200] \"GET /sendgrid/.env.production HTTP/1.1\" 404 18825 \"-\" \"Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2b) Gecko/20021001 Phoenix/0.2\" GEOIP_COUNTRY_CODE=DE \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: DE show less	Port Scan Web App Attack
Anonymous	2026-06-15 01:46:47 (3 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 00:08:45 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.159.63.213 (213.63.159.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.159.63.213 (213.63.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:08:38.517122 2026] [security2:error] [pid 18155:tid 18155] [client 34.159.63.213:50940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crewspacer.com.coalminer.com"] [uri "/.env.docker"] [unique_id "ai9Chi4AhQ4mN2eCAWP6iwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 WebNiraj	2026-06-14 22:09:32 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 34.159.63.213 (213.63.159.34.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 34.159.63.213 (213.63.159.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇨🇭 Origon	2026-06-14 06:28:17 (4 days ago)	http-sensitive-files - IP: 34.159.63.213 - time="2026-06-14T08:28:16+02:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 34.159.63.213 - time="2026-06-14T08:28:16+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.159.63.213 (DE/396982) : 4h ban on Ip 34.159.63.213" module=db show less	Web App Attack
🇺🇸 mnsf	2026-06-14 05:07:26 (4 days ago)	Scanning/Probing (44)	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-06-14 04:05:38 (4 days ago)	Web vulnerability probing: /.env.staging	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.50.194.182

🇺🇸 162.216.150.188

🇨🇳 111.198.53.188

🇺🇸 93.177.94.247

🇫🇷 91.196.152.217

🇵🇰 103.232.143.26

🇫🇷 91.196.152.191

🇫🇷 91.196.152.177

🇳🇱 91.92.40.46

🇷🇺 91.79.168.21

🇦🇪 83.110.139.168

🇺🇸 47.189.182.17

🇩🇪 43.228.157.10

🇧🇪 34.62.156.69

🇬🇧 165.227.226.15

🇫🇷 158.220.126.52

🇹🇭 124.156.245.127

🇮🇩 182.253.133.172

🇺🇸 136.109.92.123

🇱🇾 102.203.197.6