JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.138.59.13

Activity Trending Down

Abuse Confidence Score

100% Critical

392 reports

173 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 13.59.138.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

392 from 173 distinct reporters

First reported

August 30th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 111 🇺🇸 United States of America 62 🇳🇱 Netherlands 38

Most common categories Web App Attack 296 Bad Web Bot 99 Brute-Force 85 Hacking 74 Port Scan 32

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 TheCoon	2026-10-24 16:24:46 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
Anonymous	2026-10-24 14:00:27 (1 week ago)	fail2ban jail apache-secrets-probe: 34.138.59.13 - - [07/Sep/2026:23:07:06 -0700] "GET /.git/config HTTP/1.1" 403 4425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"	Web App Attack
🇨🇭 TheCoon	2026-10-23 06:29:38 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
Anonymous	2026-10-21 13:34:13 (1 week ago)	fail2ban jail apache-secrets-probe: 34.138.59.13 - - [07/Sep/2026:23:07:06 -0700] "GET /.git/config HTTP/1.1" 403 4425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"	Web App Attack
🇨🇭 TheCoon	2026-10-21 06:52:06 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇳🇱 Site.eu	2026-10-15 18:33:21 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇵🇱 Budyn	2026-10-15 07:39:21 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.definitelynotahoneypot.online \| URI: /.env \| ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.definitelynotahoneypot.online \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-15 04:43:25 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 kosada.com	2026-10-15 02:40:53 (2 weeks ago)	Repeated requests for suspicious nonexistent URLs, for example: /config.inc.php (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0")	Web App Attack
🇵🇱 Budyn	2026-10-15 02:10:47 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.goblinpot.online \| URI: /.env \| UA: Mozill ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.goblinpot.online \| URI: /.env \| UA: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇦🇺 rubixstudios	2026-10-14 22:40:03 (2 weeks ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇳🇱 Site.eu	2026-10-14 13:45:59 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Alt255	2026-10-14 09:14:09 (2 weeks ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.138.59.13 - - [14/Oct/2026:11:13:51 +0200] "GET /.env HTTP/1.1" 301 6252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1 ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.138.59.13 - - [14/Oct/2026:11:13:51 +0200] "GET /.env HTTP/1.1" 301 6252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" ... show less	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-10-14 09:05:07 (2 weeks ago)	{"level":"info","ts":1791968692.803993,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.138.59.13","remote_port":"38612","client_ip":"34.138.59.13","proto":"HTTP/1.1","method":"GET","host":"status.webbab.se","uri":"/ ... show more {"level":"info","ts":1791968692.803993,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.138.59.13","remote_port":"38612","client_ip":"34.138.59.13","proto":"HTTP/1.1","method":"GET","host":"status.webbab.se","uri":"/.env","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"]}},"bytes_read":0,"user_id":"","duration":0.00006868,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://status.webbab.se/.env"]}} {"level":"info","ts":1791968693.3379264,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.138.59.13","remote_port":"38624","client_ip":"34.138.59.13","proto":"HTTP/1.1","method":"GET","host":"status.webbab.se","uri":"/.env.local","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"] ... show less	DDoS Attack Web App Attack
Anonymous	2026-10-14 08:32:58 (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking

Showing 1 to 15 of 392 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇪 201.249.192.30

🇻🇪 186.167.177.87

🇳🇱 185.136.15.17

🇳🇱 176.65.148.233

🇵🇰 153.117.34.153

🇺🇸 129.121.143.26

🇮🇳 103.132.243.250

🇨🇦 99.227.208.110

🇺🇸 98.174.59.170

🇹🇷 88.234.246.118

🇮🇹 79.44.146.41

🇺🇸 74.7.242.17

🇵🇰 39.34.143.215

🇺🇸 35.186.174.218

🇯🇵 8.216.6.103

🇮🇹 2.158.188.185

🇳🇱 195.178.110.227

🇮🇹 188.217.238.3

🇦🇷 181.191.65.88

🇧🇷 170.78.2.190