JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.90.189.253

Recent Activity

Abuse confidence score ?

100% Critical

32 reports

30 reporters · latest 4 days ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	253.189.90.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.90.189.253

Export CSV

This IP address has been reported a total of 32 times from 30 distinct sources. 34.90.189.253 was first reported on October 20th 2026, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Germany with 9 reports; Netherlands with 9 reports; United States of America with 4 reports. The most common categories in these recent reports were: Web App Attack 23 times; Brute-Force 10 times; Hacking 9 times; Bad Web Bot 8 times; DDoS Attack 3 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-21 22:01:36 (4 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20. show less	Web App Attack SSH Hacking
🇩🇪 JCB	2026-10-21 15:44:00 (4 days ago)	34.90.189.253 - - [21/Oct/2026:08:57:30 +0300] "GET /client/.env HTTP/1.1" 403 239 "-" "Mozilla/5.0 ... show more 34.90.189.253 - - [21/Oct/2026:08:57:30 +0300] "GET /client/.env HTTP/1.1" 403 239 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.90.189.253 - - [21/Oct/2026:08:57:30 +0300] "GET /apps/.env HTTP/1.1" 403 239 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" ... show less	Web App Attack
🇧🇷 ICS Labs	2026-10-21 14:39:44 (4 days ago)	ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force, Exploited Host. Last observed 2026-1 ... show more ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force, Exploited Host. Last observed 2026-10-21 UTC. show less	Hacking Brute-Force Exploited Host
🇸🇰 Shadow77	2026-10-21 11:51:00 (4 days ago)	34.90.189.253 - - [21/Oct/2026:08:17:50 +0200] "GET /.htpasswd HTTP/2.0" 403 227 "-" "Mozilla/5.0 (c ... show more 34.90.189.253 - - [21/Oct/2026:08:17:50 +0200] "GET /.htpasswd HTTP/2.0" 403 227 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.90.189.253 - - [21/Oct/2026:08:17:50 +0200] "GET /.env.staging.local HTTP/2.0" 403 227 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 34.90.189.253 - - [21/Oct/2026:08:17:50 +0200] "GET /serviceAccountKey.json HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 3 show less	Brute-Force Web App Attack Hacking
🇳🇱 ConsulHosting	2026-10-21 11:46:02 (4 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇳🇱 Alt255	2026-10-21 11:24:02 (4 days ago)	[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.90.189.253 - - [21/Oct/2026:13:23:51 +0200] "GET /static/manifest.json HTTP/2.0" 404 367 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.90.189.253 - - [21/Oct/2026:13:23:51 +0200] "GET /dist/manifest.json HTTP/2.0" 404 345 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.90.189.253 - - [21/Oct/2026:13:23:51 +0200] "GET /manifest.json HTTP/2.0" 404 345 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.90.189.253 - - [21/Oct/2026:13:23:51 +0200] "GET /webpack-stats.json HTTP/2.0" 404 345 "-" "Mozilla/5. ... show less	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-10-21 11:21:06 (4 days ago)	Blocked by UFW (TCP on 8080) Source port: 58170 TTL: 60 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8080) Source port: 58170 TTL: 60 Packet length: 60 TOS: 0x00 This report (for 34.90.189.253) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 LotPhantom	2026-10-21 10:37:22 (4 days ago)	2026-10-21T10:37:21.418330+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-10-21T10:37:21.418330+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=34.90.189.253 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=54374 DF PROTO=TCP SPT=58978 DPT=8080 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-21T10:37:21.418356+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=34.90.189.253 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=18355 DF PROTO=TCP SPT=39824 DPT=8443 WINDOW=65320 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇧🇪 cmbplf	2026-10-21 08:36:04 (5 days ago)	4.336 requests with url.path .env 967 requests with url.path /@fs/* 308 requests with url.path ... show more 4.336 requests with url.path .env 967 requests with url.path /@fs/* 308 requests with url.path .ssh/ 266 requests with url.path credentials.json 207 requests with url.path .aws/* 185 requests with url.path config.json 104 requests with url.path config.toml 104 requests with url.path *compose.yml show less	Brute-Force Bad Web Bot
Anonymous	2026-10-21 07:37:03 (5 days ago)	Bot / scanning and/or hacking attempts: [402/401] done: stream 803, GET /config/.env, GET /config/fi ... show more Bot / scanning and/or hacking attempts: [402/401] done: stream 803, GET /config/.env, GET /config/firebase-admin.json HTTP/2.0, GET /gcp-key.json HTTP/2.0, POST /icecoder/lib/file-control.php HTTP/2.0, GET /static../.env HTTP/2.0, GET /config/gcp-credentials.json HTTP/2.0, GET /keys/service-account.json HTTP/2.0, GET /google-credentials.json HTTP/2.0, GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2., GET /google-service-account.json HTTP/2.0, GET /.env.old HTTP/2.0, GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0 show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-10-21 07:15:31 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 FeG Deutschland	2026-10-21 06:56:06 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248	Exploited Host Web App Attack
🇩🇪 Nerdscave Hosting	2026-10-21 06:40:01 (5 days ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇩🇪 updown.io	2026-10-21 05:42:31 (5 days ago)	{"level":"info","ts":1792561350.0946105,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1792561350.0946105,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.90.189.253","remote_port":"45638","client_ip":"34.90.189.253","proto":"HTTP/2.0","method":"GET","host":"status.nethercuttcollection.net","uri":"/.dev.vars","headers":{"Accept":["/"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.nethercuttcollection.net","ech":false}},"bytes_read":0,"user_id":"","duration":0.000150848,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":179256 ... show less	DDoS Attack Web App Attack
🇫🇮 paissangroup	2026-10-21 05:03:10 (5 days ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:4459:a001

🇰🇷 106.251.244.178

🇭🇰 101.36.126.239

🇺🇸 50.6.204.52

🇧🇪 34.38.216.93

🇵🇰 203.124.61.84

🇧🇴 200.105.172.184

🇧🇷 138.204.227.154

🇺🇸 129.121.122.86

🇩🇪 109.160.32.41

🇧🇩 103.174.193.151

🇺🇸 43.153.88.229

🇧🇷 35.198.1.42

🇺🇸 2604:a880:400:d1:0:5:4402:e001

🇹🇭 223.206.234.24

🇧🇷 200.175.149.58

🇺🇦 193.56.12.110

🇧🇬 193.24.211.219

🇵🇪 190.119.63.98

🇱🇹 185.214.173.207