JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.34.99.157

34.34.99.157 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	157.99.34.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.34.99.157

Whois 34.34.99.157

IP Abuse Reports for 34.34.99.157:

This IP address has been reported a total of 37 times from 26 distinct sources. 34.34.99.157 was first reported on August 28th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-08-29 12:28:47 (3 minutes ago)	(modsecurity) srv103 ModSecurity 34.34.99.157 (NL/The Netherlands/157.99.34.34.bc.googleusercontent. ... show more (modsecurity) srv103 ModSecurity 34.34.99.157 (NL/The Netherlands/157.99.34.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 webanyone	2026-08-29 11:31:51 (59 minutes ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 webanyone	2026-08-29 11:16:38 (1 hour ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-29 11:02:58 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.34.99.157 (157.99.34.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.34.99.157 (157.99.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 07:02:54.277012 2026] [security2:error] [pid 31121:tid 31121] [client 34.34.99.157:15358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vfflag.info"] [uri "/@fs/app/.env"] [unique_id "apK8Xig7ayDPtdz5nk74uwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-08-29 10:28:15 (2 hours ago)	(y3) Failed access -byebye- from 34.34.99.157 (157.99.34.34.bc.googleusercontent.com): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-08-29 10:27:15 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.34.99.157 (157.99.34.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.34.99.157 (157.99.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 06:27:10.322380 2026] [security2:error] [pid 6757:tid 6757] [client 34.34.99.157:31200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.slpawb.com"] [uri "/@fs/app/.env"] [unique_id "apKz_sBZpJWHRwhbcT55NAAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-29 09:59:03 (2 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-29 09:58:02 (2 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Hary74656	2026-08-29 09:26:07 (3 hours ago)	Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3. No raw log data included.	Web App Attack
🇺🇸 WellSpring	2026-08-29 08:53:27 (3 hours ago)	env leak on 504.today/@fs/usr/src/app/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇨🇭 4server	2026-08-29 08:50:46 (3 hours ago)	[SatAug2910:50:40.0721542026][security2:error][pid1175700:tid1175926][client34.34.99.157:0]ModSecuri ... show more [SatAug2910:50:40.0721542026][security2:error][pid1175700:tid1175926][client34.34.99.157:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mail.hostingsvizzera.com\"][uri\"/@fs/src/.env\"][unique_id\"apKdYAEZPdPjPmUCe1OniwAAAMg\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-08-29 08:35:59 (3 hours ago)	Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇩🇪 dom4k	2026-08-29 08:16:25 (4 hours ago)	34.34.99.157 - - [29/Aug/2026:08:16:24 +0000] "GET /.env?raw?? HTTP/1.1" 444 0 "https://api.tonpx.fu ... show more 34.34.99.157 - - [29/Aug/2026:08:16:24 +0000] "GET /.env?raw?? HTTP/1.1" 444 0 "https://api.tonpx.fun/@fs/../.env?raw??" "Mozilla/5.0 (Windows NT 10.0; rv:150.15) Gecko/20100101 Firefox/150.15; compatible; TelegramBot/1.0" ... show less	Web Spam Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-08-29 07:55:55 (4 hours ago)	webserver:80 [29/Aug/2026] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ... show more webserver:80 [29/Aug/2026] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" webserver:443 [29/Aug/2026] "GET /@fs/home/ubuntu/.ovh.conf?raw?? HTTP/1.1" 404 5442 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.2006.30 Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" webserver:443 [29/Aug/2026] "GET /@fs/root/.ovh.conf?raw?? HTTP/1.1" 404 5442 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1249.20 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" webserver:443 [29/Aug/2026] "GET /@fs/home/ubuntu/.oci/config?raw?? HTTP/1.1" 404 5442 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" webserver:443 [29/Aug/2026] "GET /@fs/root/.config/hcloud/cli.toml?raw?? HTTP/1.1" 404 5442 "-" "Mozilla/5.0... show less	Web App Attack
🇳🇱 middelkoopcc	2026-08-29 06:40:02 (5 hours ago)	2026-08-29 08:38:23 GET /@fs/app/.env?raw?? [301] && 2026-08-29 08:38:23 GET /@fs/proc/self/environ? ... show more 2026-08-29 08:38:23 GET /@fs/app/.env?raw?? [301] && 2026-08-29 08:38:23 GET /@fs/proc/self/environ?raw?? [301] && 2026-08-29 08:38:23 GET /@fs/src/.env?raw?? [301] && 118 more within 20 minutes show less	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 136.109.5.146

🇰🇷 119.205.210.139

🇮🇩 103.122.2.93

🇮🇩 103.66.196.235

🇲🇾 47.250.182.231

🇰🇪 41.204.161.214

🇵🇱 37.109.168.149

🇺🇸 2600:8805:8a99:a400:d15c:3a76:b6a5:46c0

🇸🇻 201.247.242.210

🇬🇧 159.65.94.135

🇫🇷 141.101.97.47

🇨🇳 122.13.25.186

🇮🇳 103.248.121.61

🇧🇩 103.20.55.34

🇳🇱 91.92.40.239

🇵🇱 83.13.12.178

🇺🇸 34.186.9.165

🇬🇧 2a06:4880:2000::3c

🇺🇸 207.183.141.251

🇧🇪 198.235.24.181