JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.159.90.158

Activity Trending Down

Abuse Confidence Score

100% Critical

96 reports

71 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 158.90.159.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

96 from 71 distinct reporters

First reported

November 1st 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 22 🇳🇱 Netherlands 13 🇺🇸 United States of America 11

Most common categories Web App Attack 71 Brute-Force 28 Bad Web Bot 25 Hacking 18 SQL Injection 7

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 floyd_dk	2026-11-06 21:56:14 UTC · (1 week ago)	34.159.90.158 - - [06/Nov/2026:21:56:13 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.159.90.158 - - [06/Nov/2026:21:56:13 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/ ... show more 34.159.90.158 - - [06/Nov/2026:21:56:13 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.159.90.158 - - [06/Nov/2026:21:56:13 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 34.159.90.158 - - [06/Nov/2026:21:56:14 +0000] "GET /assets/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.159.90.158 - - [06/Nov/2026:21:56:14 +0000] "GET /webpack-stats.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.159.90.158 - - [06/Nov/2026:21:56:14 +0000] "GET /z9x8c7v6b5-debug-trigger-app.floyd.dk HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.159.90.158 - - [06/Nov/2026:21:56:1 ... show less	Web App Attack
🇬🇧 pinguin	2026-11-06 21:35:49 UTC · (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /serviceAccountKey.json UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) This report was generated ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /serviceAccountKey.json UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇰 floyd_dk	2026-11-06 20:11:44 UTC · (1 week ago)	34.159.90.158 - - [06/Nov/2026:20:11:42 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.159.90.158 - - [06/Nov/2026:20:11:42 +000 ... show more 34.159.90.158 - - [06/Nov/2026:20:11:42 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.159.90.158 - - [06/Nov/2026:20:11:42 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.159.90.158 - - [06/Nov/2026:20:11:43 +0000] "GET /assets/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.159.90.158 - - [06/Nov/2026:20:11:43 +0000] "GET /webpack-stats.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.159.90.158 - - [06/Nov/2026:20:11:43 +0000] "GET /2ungxambq29dk64y47n7 HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/) ... show less	Web App Attack
Anonymous	2026-11-06 19:17:39 UTC · (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.159.90.158 (DE/Germany/158.90.159.34.bc.googleusercontent.com)	SQL Injection
🇩🇪 Gwyneth Llewelyn	2026-11-06 17:23:18 UTC · (1 week ago)	34.159.90.158 - - [06/Nov/2026:17:23:17 +0000] "GET /roundcube/sitemap.xml HTTP/2.0" 404 994 "https://mail.alzulej.pt/sitemap.xml" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"	Bad Web Bot
Anonymous	2026-11-06 16:57:35 UTC · (1 week ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇩🇪 Gwyneth Llewelyn	2026-11-06 15:20:56 UTC · (1 week ago)	2026/11/06 15:20:54 [error] 3084#3084: 1235977 access forbidden by rule, client: 34.159.90.158, server: alzulej.pt, request: "GET /autodiscover.xml/apps/docs/.env HTTP/2.0", host: "alzulej.pt", referrer: "https://autodiscover.alzulej.pt/apps/docs/.e ... show more 2026/11/06 15:20:54 [error] 3084#3084: 1235977 access forbidden by rule, client: 34.159.90.158, server: alzulej.pt, request: "GET /autodiscover.xml/apps/docs/.env HTTP/2.0", host: "alzulej.pt", referrer: "https://autodiscover.alzulej.pt/apps/docs/.env" 2026/11/06 15:20:54 [error] 3084#3084: 1235977 access forbidden by rule, client: 34.159.90.158, server: alzulej.pt, request: "GET /autodiscover.xml/apps/web/.env HTTP/2.0", host: "alzulej.pt", referrer: "https://autodiscover.alzulej.pt/apps/web/.env" 2026/11/06 15:20:54 [error] 3084#3084: 1235977 access forbidden by rule, client: 34.159.90.158, server: alzulej.pt, request: "GET /autodiscover.xml/apps/admin/.env HTTP/2.0", host: "alzulej.pt", referrer: "https://autodiscover.alzulej.pt/apps/admin/.env" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 13:56:50 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.159.90.158 (158.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:56:44.169494 2026] [security2:error] [pid 1483741:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.159.90.158 (158.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:56:44.169494 2026] [security2:error] [pid 1483741:tid 1483872] [client 34.159.90.158:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ajbruner.com"] [uri "/assets../.env"] [unique_id "au3cnD8eTp1WPpDYasx0pgAAAQ4"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 mscode.pl	2026-11-06 13:03:18 UTC · (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Zone: stats.mscode.pl Endpoint: /img../.env UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Zone: stats.mscode.pl Endpoint: /img../.env UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-06 12:49:30 UTC · (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.159.90.158 (158.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:49:26.826756 2026] [security2:error] [pid 30564:tid ... show more (mod_security) mod_security (id:210730) triggered by 34.159.90.158 (158.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:49:26.826756 2026] [security2:error] [pid 30564:tid 30564] [client 34.159.90.158:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|antitribu.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "antitribu.com"] [uri "/z9x8c7v6b5-debug-trigger-antitribu.com"] [unique_id "au3M1jWGbFv6kICi2OfmYQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 putputlaw	2026-11-06 12:41:59 UTC · (1 week ago)	34.159.90.158 - - [06/Nov/2026:12:41:58 +0000] "GET /admin HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.159.90.158 - - [06/Nov/2026:12:4 ... show more 34.159.90.158 - - [06/Nov/2026:12:41:58 +0000] "GET /admin HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.159.90.158 - - [06/Nov/2026:12:41:58 +0000] "GET /admin/users HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.159.90.158 - - [06/Nov/2026:12:41:58 +0000] "GET /.env?raw HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.159.90.158 - - [06/Nov/2026:12:41:59 +0000] "GET /.env.production?import&raw HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.159.90.158 - - [06/Nov/2026:12:41:59 +0000] "GET /.env?import&raw HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 12:28:26 UTC · (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.159.90.158 (158.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:28:20.598835 2026] [security2:error] [pid 23891:tid ... show more (mod_security) mod_security (id:210730) triggered by 34.159.90.158 (158.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:28:20.598835 2026] [security2:error] [pid 23891:tid 23891] [client 34.159.90.158:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|alpha-hk.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alpha-hk.com"] [uri "/z9x8c7v6b5-debug-trigger-alpha-hk.com"] [unique_id "au3H5MN91YrU2Ydn2rC2_wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 NotCool	2026-11-06 11:34:26 UTC · (1 week ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 34.159.90.158 (158.90.159.34.bc.googleusercontent.com): 50 in the last 3600 secs	Bad Web Bot
🇩🇪 snhosting	2026-11-06 11:28:46 UTC · (1 week ago)	34.159.90.158 - - [06/Nov/2026:12:28:36 +0100] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.159.90.158 - - [06/Nov/2026:12:28:36 +0100] "GET /sitemap.xml HTTP/2.0" 404 0 "-" "DuckAssistBot/1.1 (ht ... show more 34.159.90.158 - - [06/Nov/2026:12:28:36 +0100] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.159.90.158 - - [06/Nov/2026:12:28:36 +0100] "GET /sitemap.xml HTTP/2.0" 404 0 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.159.90.158 - - [06/Nov/2026:12:28:37 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.159.90.158 - - [06/Nov/2026:12:28:37 +0100] "GET /build/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.159.90.158 - - [06/Nov/2026:12:28:37 +0100] "GET /dist/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇵🇱 strefapi_com	2026-11-06 11:22:29 UTC · (1 week ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 185.61.221.88

🇫🇮 178.20.210.152

🇨🇳 106.227.76.197

🇺🇸 50.84.211.204

🇺🇸 50.6.193.167

🇳🇱 45.148.10.157

🇺🇸 3.129.187.38

🇮🇳 2400:6180:100:d0:0:1:4774:9001

🇳🇱 204.76.203.4

🇬🇧 185.216.145.177

🇩🇪 49.13.49.235

🇳🇱 45.148.10.152

🇶🇦 34.18.194.244

🇳🇱 204.76.203.213

🇫🇮 196.244.192.202

🇨🇭 185.191.236.38

🇺🇸 162.216.150.247

🇮🇪 146.70.189.169

🇩🇪 83.97.116.91

🇺🇸 66.132.209.193