JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.90.211.68

34.90.211.68 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	68.211.90.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.90.211.68

Whois 34.90.211.68

IP Abuse Reports for 34.90.211.68:

This IP address has been reported a total of 32 times from 27 distinct sources. 34.90.211.68 was first reported on July 29th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-26 21:16:57 (15 hours ago)	[ti-14al] Web exploit scanning: 160 suspicious requests detected by fail2ban jail <name>. Example: 3 ... show more [ti-14al] Web exploit scanning: 160 suspicious requests detected by fail2ban jail <name>. Example: 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /.git/HEAD HTTP/1.1" 301 521 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /.next/.env HTTP/1.1" 301 523 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /core/.env HTTP/1.1" 301 521 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /.git/config HTTP/1.1" 301 525 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.90.211.68 - - [2 ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-25 13:45:04 (1 day ago)	[ti-14al] Web exploit scanning: 160 suspicious requests detected by fail2ban jail <name>. Example: 3 ... show more [ti-14al] Web exploit scanning: 160 suspicious requests detected by fail2ban jail <name>. Example: 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /.git/HEAD HTTP/1.1" 301 521 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /.next/.env HTTP/1.1" 301 523 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /core/.env HTTP/1.1" 301 521 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.90.211.68 - - [21/Oct/2026:17:35:30 +0200] "GET /.git/config HTTP/1.1" 301 525 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.90.211.68 - - [2 ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-23 04:32:27 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇳🇱 homeshowdomain.nl	2026-10-22 22:02:44 (4 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-21. show less	Web App Attack SSH Hacking
🇹🇷 Jova	2026-10-22 00:44:12 (5 days ago)	Probing a web server for sensitive files (.env, backups, configs): 3 requests.	Web App Attack
Anonymous	2026-10-21 23:57:02 (5 days ago)	Bot / scanning and/or hacking attempts: POST /lib/terminal-xhr.php HTTP/2.0, POST /flowise/api/v1/no ... show more Bot / scanning and/or hacking attempts: POST /lib/terminal-xhr.php HTTP/2.0, POST /flowise/api/v1/node-custom-function HTTP/2.0, POST /api/v1/node-custom-function HTTP/2.0, GET /.env.local HTTP/2.0, POST /flowise/api/v1/node-load-method/customMCP HTTP/2.0 show less	Hacking Web App Attack
🇺🇸 snappic	2026-10-21 22:03:07 (5 days ago)	Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ... show more Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)] show less	Bad Web Bot Web App Attack
🇫🇷 regishoussin	2026-10-21 21:20:04 (5 days ago)	Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ... show more Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-21 21:20 UTC. show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-21 18:24:17 (5 days ago)	[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.90.211.68 - - [21/Oct/2026:20:23:54 +0200] "GET /.env.supabase HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" ... show less	Bad Web Bot Web App Attack
🇩🇪 ardexter	2026-10-21 17:50:48 (5 days ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
🇫🇷 masterguru	2026-10-21 17:47:59 (5 days ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197) show less	Bad Web Bot
🇩🇪 LRob	2026-10-21 17:26:32 (5 days ago)	Wordlist path sweep \| method: POST, GET \| path: /lib/terminal-xhr.php, /assets/manifest.json, /asset ... show more Wordlist path sweep \| method: POST, GET \| path: /lib/terminal-xhr.php, /assets/manifest.json, /asset-manifest.json (+3 more) \| ua: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot), Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/) (+1 more) show less	Port Scan Web App Attack
🇫🇷 regishoussin	2026-10-21 17:23:24 (5 days ago)	Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ... show more Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-21 17:23 UTC. show less	Bad Web Bot Web App Attack
Anonymous	2026-10-21 17:03:07 (5 days ago)	PSCSERV WPSCAN 34.90.211.68	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-10-21 16:55:38 (5 days ago)	15 attempts against mh-modsecurity-ban on ozone	Brute-Force Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:261:18a0::2

🇳🇱 195.178.110.26

🇷🇴 193.46.255.86

🇮🇳 103.248.120.6

🇮🇳 103.25.47.94

🇦🇺 65.254.92.190

🇨🇳 58.242.64.246

🇮🇷 5.239.241.226

🇨🇭 209.99.190.200

🇲🇾 103.71.176.233

🇺🇸 98.174.198.75

🇨🇦 85.217.149.3

🇫🇷 85.217.140.47

🇮🇹 78.134.49.171

🇺🇸 50.6.249.168

🇧🇷 45.235.71.153

🇨🇦 216.26.233.133

🇰🇷 211.33.248.240

🇮🇩 202.46.28.140

🇪🇨 201.182.87.72