JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.159.75.63

Activity Trending Down

Abuse Confidence Score

93% Critical

27 reports

21 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 63.75.159.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

27 from 21 distinct reporters

First reported

November 2nd 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 4 🇩🇪 Germany 4 🇳🇱 Netherlands 4

Most common categories Web App Attack 23 Bad Web Bot 10 Brute-Force 7 Hacking 6 SQL Injection 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-03 12:04:48 UTC · (1 week ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2026-11-03 06:18:09 UTC · (1 week ago)	180 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, env grabbing URLs (type 2), VC URLs: GET /laravel../config/database.php HTTP/1.1 GET /.git-credentials HTTP/1.1 GET /producti ... show more 180 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, env grabbing URLs (type 2), VC URLs: GET /laravel../config/database.php HTTP/1.1 GET /.git-credentials HTTP/1.1 GET /production/.env HTTP/1.1 GET /secrets.yml HTTP/1.1 GET /..%2f.env HTTP/1.1 GET /proc/self/environ HTTP/1.1 GET /.git/config HTTP/1.1 show less	Web App Attack Hacking
🇫🇷 masterguru	2026-11-02 13:49:42 UTC · (1 week ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197) show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-11-02 13:35:28 UTC · (1 week ago)	(mod_security) mod_security (id:949110) triggered by 34.159.75.63 (DE/Germany/63.75.159.34.bc.googleusercontent.com): N in the last X secs	Web App Attack
Anonymous	2026-11-02 12:22:02 UTC · (1 week ago)	Bot / scanning and/or hacking attempts: GET /public/.env HTTP/2.0, GET /server/.env HTTP/2.0, GET /src/.env HTTP/2.0, GET /.env.backup HTTP/2.0, GET /core/.env HTTP/2.0	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-11-02 12:00:11 UTC · (1 week ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/63.75.159.34.bc.googleusercontent.com	Web App Attack
Anonymous	2026-11-02 11:54:57 UTC · (1 week ago)	[ns65.kdns.gr] httpd-config-scan: sites=rodolivosbooks.gr; logs=/var/log/httpd/domains/rodolivosbooks.gr.log; samples=/files../.env \| /uploads../.env \| /static../.env	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-11-02 11:44:11 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.159.75.63 (63.75.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:44:04.491030 2026] [security2:error] [pid 6385:tid 638 ... show more (mod_security) mod_security (id:210492) triggered by 34.159.75.63 (63.75.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:44:04.491030 2026] [security2:error] [pid 6385:tid 6385] [client 34.159.75.63:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rodelife.com"] [uri "/.env.development"] [unique_id "auh3hPP_1QYWJca5e5OSBgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Saec	2026-11-02 11:32:00 UTC · (1 week ago)	Cloudflare WAF blocked 107 requests in 1h from DE. Top paths probed: /.env.backup, /wp-config.php~, /.git/HEAD. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor.	Brute-Force Web App Attack
🇪🇸 robotstxt	2026-11-02 11:03:12 UTC · (1 week ago)	34.159.75.63 - - [02/Nov/2026:11:02:53 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" 34.159.75.63 ... show more 34.159.75.63 - - [02/Nov/2026:11:02:53 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" 34.159.75.63 - - [02/Nov/2026:11:02:53 +0000] "GET /public../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" 34.159.75.63 - - [02/Nov/2026:11:02:53 +0000] "GET /js../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-" 34.159.75.63 - - [02/Nov/2026:11:02:53 +0000] "GET /static../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" 34.159.75.63 - - [02/Nov/2026:11:02:53 +0000] "GET /dist../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "-" ... show less	Web App Attack
🇧🇪 Saec	2026-11-02 10:10:03 UTC · (1 week ago)	Jarvis auto-ban: CF honeypot path /.env.php.bak (1× on saec.me)	Port Scan Web App Attack
🇳🇱 e.fierstra	2026-11-02 10:04:22 UTC · (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-11-02 09:29:25 UTC · (1 week ago)	{"level":"info","ts":1793611762.647074,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.75.63","remote_port":"41646","client_ip":"34.159.75.63","proto":"HTTP/2.0","method":"GET","host":"status.somoshunter.com.br" ... show more {"level":"info","ts":1793611762.647074,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.75.63","remote_port":"41646","client_ip":"34.159.75.63","proto":"HTTP/2.0","method":"GET","host":"status.somoshunter.com.br","uri":"/public../.env","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"],"Accept":["/"],"Cookie":["REDACTED"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.somoshunter.com.br","ech":false}},"bytes_read":0,"user_id":"","duration":0.000136822,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}} {"level":"info","ts":1793611762.6487498,"logger":"http.log.ac ... show less	DDoS Attack Web App Attack
🇫🇷 masterguru	2026-11-02 08:16:51 UTC · (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-193)	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-11-02 08:08:34 UTC · (1 week ago)	Scanning for web/db/file exploits on www.robomatic.nl	SQL Injection Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇾 113.211.126.122

🇺🇸 70.183.235.24

🇳🇱 45.148.10.238

🇧🇪 35.210.38.107

🇺🇸 2400:cb00:14:1000:1c53:1ac4:44ab:baf0

🇺🇸 172.236.228.227

🇳🇱 158.173.3.232

🇺🇸 151.240.205.27

🇨🇳 120.203.25.201

🇸🇬 47.128.60.115

🇧🇪 35.210.218.50

🇧🇪 35.210.156.191

🇧🇪 34.156.229.26

🇺🇸 20.98.153.153

🇨🇦 216.232.226.40

🇺🇸 199.165.159.42

🇦🇷 186.57.79.218

🇨🇦 149.22.95.134

🇨🇦 144.217.61.131

🇳🇱 109.160.32.158