JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.90.198.57

34.90.198.57 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 57%: ?

57%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	57.198.90.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.90.198.57

Whois 34.90.198.57

IP Abuse Reports for 34.90.198.57:

This IP address has been reported a total of 11 times from 9 distinct sources. 34.90.198.57 was first reported on July 26th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-26 14:31:49 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 10:31:45.338605 2026] [security2:error] [pid 2841001:tid 2841001] [client 34.90.198.57:62145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.americanexportimport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanexportimport.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amYaUaEYDkuShl10k87XdwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-26 14:21:15 (1 hour ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 14:10:05 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 10:09:55.725052 2026] [security2:error] [pid 2762776:tid 2762776] [client 34.90.198.57:63317] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|allfloridamedia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "allfloridamedia.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amYVM64rR_HWKSQMvS4ZmwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-26 14:05:32 (2 hours ago)	Wordpress vulnerability scanning ...	Web App Attack
🇩🇪 SCHAPPY	2026-07-26 14:03:10 (2 hours ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
🇨🇭 backslash	2026-07-26 13:42:00 (2 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-26 13:41:39 (2 hours ago)	(mod_security) mod_security (id:225170) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 09:41:33.528442 2026] [security2:error] [pid 71327:tid 71447] [client 34.90.198.57:53077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aiegroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aiegroup.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "amYOjUFzUyRbO_LIBkb4DAAAAhc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-26 13:40:58 (2 hours ago)	[SunJul2615:40:54.8865662026][security2:error][pid266776:tid267071][client34.90.198.57:0]ModSecurity ... show more [SunJul2615:40:54.8865662026][security2:error][pid266776:tid267071][client34.90.198.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.aid-web.ch\"][uri\"/xmlrpc.php\"][unique_id\"amYOZtDDNROXUwbl-cjqKAAAAMk\"] show less	Hacking Web App Attack
🇩🇪 lolyay	2026-07-26 13:39:09 (2 hours ago)	34.90.198.57 - - [26/Jul/2026:13:39:08 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 203 " ... show more 34.90.198.57 - - [26/Jul/2026:13:39:08 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 34.90.198.57 - - [26/Jul/2026:13:39:08 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 200 203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇮🇹 VHosting	2026-07-26 13:35:03 (2 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇬🇧 Apache	2026-07-26 13:33:59 (2 hours ago)	(mod_security) mod_security (id:210410) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210410) triggered by 34.90.198.57 (57.198.90.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force SSH Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 92.205.184.118

🇮🇳 59.91.162.26

🇨🇳 223.100.59.128

🇮🇹 212.105.155.206

🇧🇷 179.183.114.175

🇲🇱 154.118.186.112

🇹🇼 101.13.5.32

🇺🇸 35.235.96.81

🇺🇸 20.168.120.248

🇳🇱 20.56.146.118

🇺🇸 216.218.206.80

🇵🇰 203.101.190.109

🇺🇸 107.172.139.234

🇺🇸 98.213.142.168

🇭🇰 43.242.203.160

🇦🇪 5.194.67.77

🇦🇪 198.38.94.66

🇩🇪 193.32.248.244

🇨🇦 170.9.40.164

🇻🇳 160.22.171.138