JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.104.199.13

34.104.199.13 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	13.199.104.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.104.199.13

Whois 34.104.199.13

IP Abuse Reports for 34.104.199.13:

This IP address has been reported a total of 39 times from 30 distinct sources. 34.104.199.13 was first reported on June 8th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-06-11 16:19:27 (9 hours ago)	Try to access /.env	Web App Attack
Anonymous	2026-06-11 13:42:49 (12 hours ago)	[11/Jun/2026:13:42:49 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=34.104 ... show more [11/Jun/2026:13:42:49 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=34.104.199.13 method=GET req=/.env.txt uri=/index.php status=200 bytes=2254 rt=0.026 urt=0.025 ref="-" ua="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.25 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3738.400" ... show less	Web App Attack Bad Web Bot
🇳🇱 Cloud86 B.V.	2026-06-11 13:39:06 (12 hours ago)	categories: DDoS Attack	DDoS Attack
🇧🇪 Saec	2026-06-11 12:00:07 (13 hours ago)	Jarvis auto-ban: CF top attacker on saec.me (150 hits, JP)	Port Scan Web App Attack
Anonymous	2026-06-11 11:13:31 (14 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.104.199.13 (JP/Japan/13.199.104.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.104.199.13 (JP/Japan/13.199.104.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇵🇱 dcnet	2026-06-11 06:00:20 (19 hours ago)	FortiGate detected DOS attack from IPv4 address 34.104.199.13	DDoS Attack
🇳🇱 Site.eu	2026-06-11 04:50:05 (21 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-10 23:49:48 (1 day ago)	34.104.199.13 - - [11/Jun/2026:01:49:45 +0200] "GET /.env.local HTTP/1.1" 404 28145 "-" "Mozilla/5.0 ... show more 34.104.199.13 - - [11/Jun/2026:01:49:45 +0200] "GET /.env.local HTTP/1.1" 404 28145 "-" "Mozilla/5.0 (Linux; Android 5.0; SM-G900F Build/LRX21T; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/45.0.2454.95 Mobile Safari/537.36" 34.104.199.13 - - [11/Jun/2026:01:49:45 +0200] "GET /.env.local HTTP/1.1" 404 5706 "-" "Mozilla/5.0 (Linux; Android 5.0; SM-G900F Build/LRX21T; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/45.0.2454.95 Mobile Safari/537.36" 34.104.199.13 - - [11/Jun/2026:01:49:45 +0200] "GET /.env.backup HTTP/1.1" 404 28145 "-" "SonyEricssonW810i/R4EA Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.0.0.0" 34.104.199.13 - - [11/Jun/2026:01:49:45 +0200] "GET /.env.backup HTTP/1.1" 404 5706 "-" "SonyEricssonW810i/R4EA Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.0.0.0" 34.104.199.13 - - [11/Jun/2026:01:49:45 +0200] "GET /.env.backup.txt HTTP/1.1" 404 28145 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWeb ... show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-10 22:01:45 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
Anonymous	2026-06-10 20:32:03 (1 day ago)	Bot / scanning and/or hacking attempts: GET /services/auth/.env HTTP/1.1, GET /build/.env HTTP/1.1, ... show more Bot / scanning and/or hacking attempts: GET /services/auth/.env HTTP/1.1, GET /build/.env HTTP/1.1, GET /.env.development.local HTTP/1.1, GET /backend/.env.prod HTTP/1.1, GET /.env.txt HTTP/1.1, GET /app/.env.prod HTTP/1.1, GET /.env.staging HTTP/1.1, GET /src/.env.production HTTP/1.1, GET /web/.env HTTP/1.1, GET /.env.testing HTTP/1.1, GET /dist/.env HTTP/1.1, GET /storage/.env HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 consul.to	2026-06-10 11:56:14 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-10 10:52:02 (1 day ago)	categories: DDoS Attack	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-10 09:07:19 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.104.199.13 (13.199.104.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.104.199.13 (13.199.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:07:12.692623 2026] [security2:error] [pid 15651:tid 15651] [client 34.104.199.13:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pixacast.com"] [uri "/.env.prod.bak"] [unique_id "aikpQEXfO5EHraBxqJCt4AAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-10 04:21:00 (1 day ago)	(caddyscan) Scanner path probe from 34.104.199.13 (JP/Japan/13.199.104.34.bc.googleusercontent.com): ... show more (caddyscan) Scanner path probe from 34.104.199.13 (JP/Japan/13.199.104.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.104.199.13 - - [10/Jun/2026:04:20:56 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 34.104.199.13 - - [10/Jun/2026:04:20:56 +0000] "GET /.env.default HTTP/1.1" [REDACTED] 200 2627 34.104.199.13 - - [10/Jun/2026:04:20:56 +0000] "GET /.env.docker HTTP/1.1" [REDACTED] 200 2627 34.104.199.13 - - [10/Jun/2026:04:20:56 +0000] "GET /.env.dist HTTP/1.1" [REDACTED] 200 2627 34.104.199.13 - - [10/Jun/2026:04:20:56 +0000] "GET /.env.pre-production HTTP/1.1" show less	Port Scan
🇳🇱 Site.eu	2026-06-09 22:21:26 (2 days ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.104

🇺🇸 167.172.250.65

🇻🇳 123.30.106.64

🇭🇰 103.119.17.14

🇺🇸 47.89.228.142

🇰🇷 39.115.195.164

🇻🇳 27.71.60.22

🇭🇳 190.242.26.141

🇨🇴 186.80.149.6

🇺🇸 162.216.150.83

🇺🇸 162.216.149.241

🇺🇸 147.182.183.153

🇨🇳 112.40.26.196

🇮🇳 103.138.237.18

🇺🇸 93.152.208.26

🇷🇴 92.118.39.236

🇨🇳 58.45.244.157

🇵🇱 20.215.69.195

🇭🇰 2a09:bac1:3180:8::246:7b

🇰🇷 223.194.21.240