JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.159.7.3

34.159.7.3 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	3.7.159.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.159.7.3

Whois 34.159.7.3

IP Abuse Reports for 34.159.7.3:

This IP address has been reported a total of 31 times from 26 distinct sources. 34.159.7.3 was first reported on October 13th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Caue Henrique	2026-10-16 03:00:01 (17 hours ago)	Multiple common web attacks, XSS, Web Server 500 Error	Web Spam Hacking Web App Attack
Anonymous	2026-10-14 15:37:00 (2 days ago)	Excessive crawling/scraping. Vulnerable file probing.	Brute-Force Bad Web Bot Web App Attack
🇦🇺 clapper	2026-10-14 03:41:59 (2 days ago)	(mod_security) mod_security (id:980001) triggered by 34.159.7.3 (DE/Germany/3.7.159.34.bc.googleuser ... show more (mod_security) mod_security (id:980001) triggered by 34.159.7.3 (DE/Germany/3.7.159.34.bc.googleusercontent.com): 5 in the last 3600 secs; ID: Clar show less	Brute-Force Bad Web Bot
🇸🇪 vaia.cloud	2026-10-14 02:05:02 (2 days ago)	crowdsecurity/grafana-cve-2021-43798	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-10-14 00:51:35 (2 days ago)	excessive HTTP 404 errors	Bad Web Bot
🇦🇺 rubixstudios	2026-10-14 00:06:03 (2 days ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 00:05:38 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.159.7.3 (3.7.159.34.bc.googleusercontent.com ... show more (mod_security) mod_security (id:210492) triggered by 34.159.7.3 (3.7.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:05:28.746490 2026] [security2:error] [pid 13355:tid 13355] [client 34.159.7.3:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pixacast.com"] [uri "/media../.env"] [unique_id "as7HSCkEGL0tUGTuTFrbswAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 0xffffffff	2026-10-13 22:49:03 (2 days ago)	[2026-10-14 01:49:01.388698] [authz_core:error] [pid 2626204:tid 134324188612288] [client 34.159.7.3 ... show more [2026-10-14 01:49:01.388698] [authz_core:error] [pid 2626204:tid 134324188612288] [client 34.159.7.3:36560] AH01630: client denied by server configuration: /var/www//.vite , error_notes:config-files , URI:'/.vite/manifest.json' [2026-10-14 01:49:01.394694] [authz_core:error] [pid 2626204:tid 134324180219584] [client 34.159.7.3:36560] AH01630: client denied by server configuration: /var/www//lib , error_notes:missing-php , URI:'/lib/terminal-xhr.php' [2026-10-14 01:49:01.408842] [authz_core:error] [pid 2626204:tid 134324146648768] [client 34.159.7.3:36560] AH01630: client denied by server configuration: /var/www//dist , error_notes:config-files , URI:'/dist/manifest.json' [2026-10-14 01:49:01.417440] [authz_core:error] [pid 2626204:tid 134324138256064] [client 34.159.7.3:36560] AH01630: client denied by server configuration: /var/www//dist , error_notes:config-files , URI:'/dist/.vite/manifest.json' [2026-10-14 01:49:01.421434] [authz_core:error] [pid 2626204:tid 134324129863360] [client 34.159.7.3:36560] show less	Web App Attack Bad Web Bot
🇷🇴 clauss	2026-10-13 21:57:59 (2 days ago)	34.159.7.3 - - [14/Oct/2026:00:57:58 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 429 162 "-" "Mozi ... show more 34.159.7.3 - - [14/Oct/2026:00:57:58 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 429 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 34.159.7.3 - - [14/Oct/2026:00:57:59 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 301 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" ... show less	Web App Attack
🇺🇸 WizardsToolkit	2026-10-13 21:26:22 (2 days ago)	tried to access forbidden files; attempted to access /portal/.env	Web App Attack
🇦🇺 screwlooseit.com.au	2026-10-13 21:13:47 (2 days ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/3.7.159.34.bc.googleusercontent.c ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/3.7.159.34.bc.googleusercontent.com show less	Web App Attack
🇿🇦 conure.sh	2026-10-13 20:40:47 (2 days ago)	csagent: score 15.9: 404 noise floor x18, php 404 x1, secrets grab x1; 1 domain(s) in 6s	Web App Attack
🇫🇷 Catalin Negru	2026-10-13 20:15:56 (3 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇨🇦 SSH-Admin	2026-10-13 19:00:15 (3 days ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇪🇸 pipeline.es	2026-10-13 18:37:09 (3 days ago)	Web scanning / probing for vulnerable paths \| URL: /.auto.tfvars \| Evidence: 34.159.7.3 - - [13/Oct ... show more Web scanning / probing for vulnerable paths \| URL: /.auto.tfvars \| Evidence: 34.159.7.3 - - [13/Oct/2026:20:35:06 +0200] \"GET /*.auto.tfvars HTTP/1.1\" 404 211 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot\" \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: DE show less	Port Scan Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 112.220.250.20

🇺🇸 205.210.31.98

🇺🇸 205.210.31.95

🇺🇸 195.184.76.54

🇺🇸 195.184.76.53

🇳🇱 185.242.226.61

🇫🇷 169.58.87.143

🇺🇸 157.245.180.141

🇺🇸 147.185.132.15

🇮🇳 122.165.56.162

🇳🇱 109.160.32.30

🇺🇸 66.132.195.123

🇯🇵 219.118.245.161

🇺🇸 205.210.31.93

🇺🇸 205.210.31.89

🇺🇸 205.210.31.73

🇹🇼 198.235.24.33

🇺🇸 162.216.149.187

🇳🇱 89.248.172.9

🇹🇷 88.241.93.173