JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.128.79.59

34.128.79.59 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	59.79.128.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.128.79.59

Whois 34.128.79.59

IP Abuse Reports for 34.128.79.59:

This IP address has been reported a total of 34 times from 25 distinct sources. 34.128.79.59 was first reported on August 31st 2026, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-01 12:48:39 (46 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 4server	2026-09-01 11:00:39 (2 hours ago)	[TueSep0113:00:34.0735162026][security2:error][pid4082254:tid4082279][client34.128.79.59:0]ModSecuri ... show more [TueSep0113:00:34.0735162026][security2:error][pid4082254:tid4082279][client34.128.79.59:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webdisk.bluwater.ch\"][uri\"/wp-config.php.bak\"][unique_id\"apawUr3SceT-F82zpVaCngAAAAw\"] show less	Port Scan Brute-Force Web App Attack
🇵🇱 nakordoni.eu	2026-09-01 10:30:04 (3 hours ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Google LLC (ID), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-01 09:34:11 (4 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.128.79.59 (ID/Indonesia/59.79.128. ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.128.79.59 (ID/Indonesia/59.79.128.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇳🇱 MyGlobalFlowers	2026-09-01 09:23:51 (4 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 pinguin	2026-09-01 09:18:14 (4 hours ago)	Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /.env.bak UA: crusader-worker/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇬 simpeg-adm.bandung.go.id	2026-09-01 06:31:54 (7 hours ago)	...	Web Spam Brute-Force Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-09-01 06:29:47 (7 hours ago)	2026/09/01 07:29:32 [error] 380596#380596: 2014350 access forbidden by rule, client: 34.128.79.59, ... show more 2026/09/01 07:29:32 [error] 380596#380596: 2014350 access forbidden by rule, client: 34.128.79.59, server: superiorinnercore.game-host.org, request: "GET /.env HTTP/1.1", host: "superiorinnercore.game-host.org" 34.128.79.59 - - [01/Sep/2026:07:29:32 +0100] "GET /.env HTTP/1.1" 403 2599 "-" "crusader-worker/1.0" 2026/09/01 07:29:44 [error] 380597#380597: *2014364 access forbidden by rule, client: 34.128.79.59, server: superiorinnercore.game-host.org, request: "GET //.env HTTP/1.1", host: "superiorinnercore.game-host.org" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 05:43:02 (7 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:42:55.682060 2026] [security2:error] [pid 30427:tid 30427] [client 34.128.79.59:40036] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|edgecomix.edgeimprov.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edgecomix.edgeimprov.com"] [uri "/storage/logs/laravel.log"] [unique_id "apZl32NFrLcYG7FkS7kk9wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-09-01 05:24:28 (8 hours ago)	(nginxENVSCAN) nginx environment-file scanner detected from 34.128.79.59 (ID/Indonesia/Jakarta/Jakar ... show more (nginxENVSCAN) nginx environment-file scanner detected from 34.128.79.59 (ID/Indonesia/Jakarta/Jakarta/59.79.128.34.bc.googleusercontent.com) show less	Hacking
Anonymous	2026-09-01 05:12:14 (8 hours ago)	[osotir.org] httpd-config-scan: sites=www.ear-books.com; logs=/var/log/httpd/domains/ear-books.com.l ... show more [osotir.org] httpd-config-scan: sites=www.ear-books.com; logs=/var/log/httpd/domains/ear-books.com.log; samples=/.env \| /.env.production \| /wp-config.php.swp show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 05:05:38 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:05:29.685433 2026] [security2:error] [pid 6598:tid 6598] [client 34.128.79.59:47150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.carinsteen.com"] [uri "/.env.local"] [unique_id "apZdGdQg1yMcT-jBDAfPZAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-09-01 04:16:48 (9 hours ago)	34.128.79.59 - - [01/Sep/2026:14:16:47 +1000] "GET /wp-config.php~ HTTP/1.1" 404 999 "-" "crusader-w ... show more 34.128.79.59 - - [01/Sep/2026:14:16:47 +1000] "GET /wp-config.php~ HTTP/1.1" 404 999 "-" "crusader-worker/1.0" 34.128.79.59 - - [01/Sep/2026:14:16:47 +1000] "GET /.env.production HTTP/1.1" 404 999 "-" "crusader-worker/1.0" 34.128.79.59 - - [01/Sep/2026:14:16:47 +1000] "GET /.env HTTP/1.1" 404 999 "-" "crusader-worker/1.0" 34.128.79.59 - - [01/Sep/2026:14:16:47 +1000] "GET /.env.old HTTP/1.1" 404 999 "-" "crusader-worker/1.0" 34.128.79.59 - - [01/Sep/2026:14:16:47 +1000] "GET /env HTTP/1.1" 404 999 "-" "crusader-worker/1.0" 34.128.79.59 - - [01/Sep/2026:14:16:47 +1000] "GET /.env.local HTTP/1.1" 404 999 "-" "crusader-worker/1.0" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-01 03:56:12 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:56:05.507483 2026] [security2:error] [pid 6394:tid 6394] [client 34.128.79.59:48148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laura-stone.com"] [uri "/wp-config.php.swp"] [unique_id "apZM1YsQkJaXlqCZKkWiCgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 03:37:18 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.79.59 (59.79.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:37:14.587380 2026] [security2:error] [pid 6107:tid 6107] [client 34.128.79.59:38188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americaaborn.com"] [uri "/.env.save"] [unique_id "apZIang2vh-LBZXHcCYHaQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.67.158.16

🇨🇴 181.54.165.57

🇨🇳 171.217.70.151

🇺🇸 104.168.90.90

🇹🇭 58.11.82.89

🇨🇳 223.85.251.55

🇮🇩 202.10.37.135

🇳🇱 192.42.116.17

🇨🇴 181.129.133.130

🇦🇪 145.241.119.114

🇺🇸 138.43.94.83

🇨🇳 111.0.81.84

🇺🇸 108.170.12.182

🇳🇱 77.239.124.122

🇺🇸 71.229.43.123

🇺🇸 45.194.67.44

🇧🇬 5.188.206.34

🇬🇧 2.57.17.220

🇰🇪 197.248.207.139

🇻🇳 103.143.206.78