JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.6.215.213

Recent Activity

Abuse Confidence Score

100% Critical

39 reports

31 reporters · latest 20 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 213.215.6.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇳🇱 Netherlands
City: Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

39 from 31 distinct reporters

First reported

October 29th 2026

Most recent report

20 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 6 🇳🇱 Netherlands 6

Most common categories Web App Attack 31 Bad Web Bot 19 Brute-Force 12 Hacking 7 Email Spam 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-11-06 23:00:52 UTC · (20 hours ago)	Auto-ban: >3000 req/min op 2026-11-06	Web App Attack SSH Hacking
Anonymous	2026-11-06 19:07:05 UTC · (1 day ago)	Automated web scanner. Requested suspicious paths: /.env. UTC: 2026-11-06 18:32:10.	Web App Attack
🇩🇪 McClay	2026-11-06 18:36:18 UTC · (1 day ago)	HTTP-404 spam:34.6.215.213 - - [06/Nov/2026:19:36:16 +0100] "GET /webpack.json HTTP/1.1" 404 5173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.6.215.213 - - [06/Nov/2026:19:3 ... show more HTTP-404 spam:34.6.215.213 - - [06/Nov/2026:19:36:16 +0100] "GET /webpack.json HTTP/1.1" 404 5173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.6.215.213 - - [06/Nov/2026:19:36:16 +0100] "GET /.vite/manifest.json HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.6.215.213 - - [06/Nov/2026:19:36:16 +0100] "GET /vite.config.js HTTP/1.1" 404 5173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.6.215.213 - - [06/Nov/2026:19:36:16 +0100] "GET /asset-manifest.json HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.6.215.213 - - [06/Nov/2026:19:36:16 +0100] "GET /static/js/main.js HTTP/1.1" 404 5173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C ... show less	Web App Attack
🇩🇪 wittig.me	2026-11-06 18:17:07 UTC · (1 day ago)	Repeated blocked connection attempts to mail, webmail or SSH: 50 in 24 h	Port Scan Brute-Force
🇦🇺 Klaverstyn	2026-11-06 16:50:50 UTC · (1 day ago)	Excessive HTTP request rate	Web App Attack
🇵🇱 Budyn	2026-11-06 15:12:01 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: auth.teddypot.cloud \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: auth.teddypot.cloud \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-06 13:04:31 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: pma.goblinpot.site \| Path: /.git/lfs/config \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win6 ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: pma.goblinpot.site \| Path: /.git/lfs/config \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 srebrakowski.com	2026-11-06 12:55:23 UTC · (1 day ago)	crowdsec/crowdsecurity/appsec-vpatch	Brute-Force
🇿🇦 Megasurf	2026-11-06 12:55:05 UTC · (1 day ago)	web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).	Web App Attack
Anonymous	2026-11-06 11:15:03 UTC · (1 day ago)	Probing for exposed secret / credential files	Hacking Web App Attack
🇳🇱 ConsulHosting	2026-11-06 10:07:58 UTC · (1 day ago)	Automatically blocked due to distributed attack	Hacking
🇨🇦 Anytech	2026-11-06 08:34:50 UTC · (1 day ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇬🇧 consul.to	2026-11-06 07:49:17 UTC · (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 06:14:40 UTC · (1 day ago)	(mod_security) mod_security (id:248270) triggered by 34.6.215.213 (213.215.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:14:33.855307 2026] [security2:error] [pid 20103:tid 20 ... show more (mod_security) mod_security (id:248270) triggered by 34.6.215.213 (213.215.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:14:33.855307 2026] [security2:error] [pid 20103:tid 20184] [client 34.6.215.213:29482] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?\|rmi\|dns\|iiop\|nis\|nds\|corba\|\\\\$\\\\{(?:lower\|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j\|\|oldpl8s.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oldpl8s.com"] [uri "/"] [unique_id "au1wSSHMvGECtBt6fHYezwAAAUM"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe} show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 altenglaner	2026-11-06 05:37:40 UTC · (1 day ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 213.209.159.199

🇺🇸 152.32.205.153

🇺🇸 20.106.60.19

🇳🇱 2a0f:ca80:b00b:eff9::5

🇳🇱 195.178.110.26

🇷🇺 185.33.140.85

🇺🇸 162.216.150.216

🇨🇳 157.18.135.76

🇫🇷 90.127.135.28

🇸🇬 85.203.23.25

🇧🇬 79.124.58.22

🇧🇬 79.124.40.114

🇧🇪 34.38.141.52

🇵🇱 31.76.118.241

🇷🇴 2.57.122.168

🇳🇱 193.29.139.152

🇧🇷 187.9.232.170

🇧🇷 186.238.242.194

🇳🇱 185.218.86.20

🇺🇸 157.245.129.140