JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.159.90.214

Activity Trending Down

Abuse Confidence Score

90% Critical

28 reports

24 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 214.90.159.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

28 from 24 distinct reporters

First reported

October 29th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇳🇱 Netherlands 5 🇨🇿 Czechia 2

Most common categories Web App Attack 21 Bad Web Bot 14 Brute-Force 7 Hacking 5 DDoS Attack 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 paissangroup	2026-10-30 15:00:27 UTC · (1 week ago)	Multiple WAF Violations	Web App Attack
🇺🇸 kelvin0505	2026-10-30 14:58:20 UTC · (1 week ago)	Blocked by web application firewall: exploit payload, repeated malicious requests, sensitive path probe (254 requests)	Web App Attack Hacking
🇺🇸 dot.mg	2026-10-30 14:17:03 UTC · (1 week ago)	Bad behaviour	Web Spam
🇺🇸 TPI-Abuse	2026-10-30 13:33:32 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.159.90.214 (214.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:33:26.166421 2026] [security2:error] [pid 32693:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.159.90.214 (214.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:33:26.166421 2026] [security2:error] [pid 32693:tid 32693] [client 34.159.90.214:48676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.platinummedicalevaluations.com"] [uri "/.git/config"] [unique_id "auScpq3oKbNDtxTKDnvxoAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-30 12:10:43 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.159.90.214 (214.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 08:10:40.139959 2026] [security2:error] [pid 8491:tid 8 ... show more (mod_security) mod_security (id:210492) triggered by 34.159.90.214 (214.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 08:10:40.139959 2026] [security2:error] [pid 8491:tid 8491] [client 34.159.90.214:59926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pleasanthillfarms.com"] [uri "/.htpasswd"] [unique_id "auSJQIrujWEDSvtTLmSRCgAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ams_sec_user	2026-10-30 11:05:33 UTC · (1 week ago)	Automated requests against a hosted website: 345 requests between 10:00 and 10:59 UTC; 168 probes for exposed secrets/config files (/userfiles, /userfiles/x, /wp-admin/.env). Reported automatically.	Hacking Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-30 10:57:49 UTC · (1 week ago)	[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.159.90.214 - - [30/Oct/2026:11:57:40 +0100] "GET /static//app/.env HTTP/2.0" 403 55 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Apple ... show more [ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.159.90.214 - - [30/Oct/2026:11:57:40 +0100] "GET /static//app/.env HTTP/2.0" 403 55 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" ... show less	Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-10-30 10:55:04 UTC · (1 week ago)	csagent: score 21.5: 404 noise floor x6, secrets grab x2; 1 domain(s) in 5s	Web App Attack
🇩🇪 updown.io	2026-10-30 09:52:33 UTC · (1 week ago)	{"level":"info","ts":1793353950.4188278,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.90.214","remote_port":"36272","client_ip":"34.159.90.214","proto":"HTTP/2.0","method":"GET","host":"status.plusreed.com","u ... show more {"level":"info","ts":1793353950.4188278,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.90.214","remote_port":"36272","client_ip":"34.159.90.214","proto":"HTTP/2.0","method":"GET","host":"status.plusreed.com","uri":"/build../.env","headers":{"Accept":["/"],"Accept-Encoding":["gzip"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.plusreed.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000123596,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":17 ... show less	DDoS Attack Web App Attack
🇨🇦 AEITS	2026-10-30 09:42:34 UTC · (1 week ago)	Fail2Ban www	Bad Web Bot Web App Attack
Anonymous	2026-10-30 09:11:09 UTC · (1 week ago)	34.159.90.214 - - [30/Oct/2026:04:10:25 -0500] "GET /.env.shared HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.159.90.214 34.159.90.214 - - [30/Oct/2026:04:10:25 -0500] "GET /.env.common HTTP/1.1" 403 199 "-" "Mozil ... show more 34.159.90.214 - - [30/Oct/2026:04:10:25 -0500] "GET /.env.shared HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.159.90.214 34.159.90.214 - - [30/Oct/2026:04:10:25 -0500] "GET /.env.common HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.159.90.214 34.159.90.214 - - [30/Oct/2026:04:10:25 -0500] "GET /.env.monorepo HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.159.90.214 34.159.90.214 - - [30/Oct/2026:04:10:26 -0500] "GET /.env.php.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.159.90.214 34.159.90.214 - - [30/Oct/2026:04:10:27 -0500] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.159.90.214 34.159.90.214 - - [30/Oct/2026:04:10:27 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-30 08:05:38 UTC · (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.159.90.214 (214.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:05:31.967124 2026] [security2:error] [pid 12461:tid ... show more (mod_security) mod_security (id:210730) triggered by 34.159.90.214 (214.90.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:05:31.967124 2026] [security2:error] [pid 12461:tid 12461] [client 34.159.90.214:45108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|register.playvinyltap.com\|F\|2"] [data ".playvinyltap.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "register.playvinyltap.com"] [uri "/z9x8c7v6b5-debug-trigger-register.playvinyltap.com"] [unique_id "auRPy6DZnXqoOfO9k2BJoAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-30 07:15:00 UTC · (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-10-30 06:58:12 UTC · (1 week ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇺🇸 Blamdom	2026-10-30 05:58:12 UTC · (1 week ago)	Secret/config-file recon: requested /cache/original/%2e%2e/%2e%2e/.env. 183 HTTP request(s), 2026-10-30 05:58:12 to 05:58:19 UTC (7s). Requests (method path -> status xcount): GET [site page] -> 404 x87 GET /_next/... -> 404 x11 GET /_next/... ... show more Secret/config-file recon: requested /cache/original/%2e%2e/%2e%2e/.env. 183 HTTP request(s), 2026-10-30 05:58:12 to 05:58:19 UTC (7s). Requests (method path -> status xcount): GET [site page] -> 404 x87 GET /_next/... -> 404 x11 GET /_next/... -> 200 x9 GET /api/... -> 404 x9 POST [site page] -> 404 x2 GET / -> 200 GET /dashboard%2F.env -> 404 GET /settings%2F.env -> 404 ...+62 more distinct requests UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 (+31 other UAs) show less	Hacking Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 167.71.25.194

🇧🇬 79.124.56.254

🇧🇪 198.235.24.181

🇺🇸 172.56.109.73

🇨🇳 117.50.44.85

🇪🇬 41.40.86.142

🇺🇸 38.148.92.89

🇻🇳 222.255.184.114

🇨🇳 171.220.244.134

🇳🇱 160.119.76.138

🇫🇷 82.228.241.147

🇮🇳 47.247.73.99

🇧🇪 34.140.194.215

🇧🇪 34.77.241.117

🇺🇸 216.25.90.75

🇰🇿 172.68.207.166

🇩🇴 154.88.132.60

🇮🇳 128.185.36.59

🇺🇸 104.130.31.39

🇹🇷 104.28.164.118