JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.128.87.13

34.128.87.13 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 77%: ?

77%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	13.87.128.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.128.87.13

Whois 34.128.87.13

IP Abuse Reports for 34.128.87.13:

This IP address has been reported a total of 22 times from 14 distinct sources. 34.128.87.13 was first reported on September 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-29 07:59:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 03:59:40.332838 2026] [security2:error] [pid 24205:tid 24205] [client 34.128.87.13:45998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.truthbeam.org.amybeam.com"] [uri "/.git/config"] [unique_id "artv7Gk_4pU88xrPbaUgFQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-27 00:28:35 (3 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-26 15:47:11 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-26 15:11:37 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:11:33.617232 2026] [security2:error] [pid 9329:tid 9329] [client 34.128.87.13:34332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.artigelisim.com"] [uri "/.git/config"] [unique_id "arfgpZZkj2_dnIFyQROSogAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-26 14:15:01 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:14:54.125175 2026] [security2:error] [pid 9949:tid 9949] [client 34.128.87.13:57756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.arthuregau.com"] [uri "/.git/config"] [unique_id "arfTXlcDuWtafUyqAr6FRQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-26 12:15:44 (4 days ago)	[SatSep2614:15:39.4057682026][security2:error][pid2248866:tid2248908][client34.128.87.13:0]ModSecuri ... show more [SatSep2614:15:39.4057682026][security2:error][pid2248866:tid2248908][client34.128.87.13:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"www.titancapital.ch\"][uri\"/\"][unique_id\"are3awHjO7ZkuootpHiwjgAAAYE\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 consul.to	2026-09-25 23:09:34 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-25 23:00:03 (4 days ago)	Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.en ... show more Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.dist HTTP/1.1, GET /.env.live HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 21:14:59 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:14:53.179383 2026] [security2:error] [pid 15269:tid 15269] [client 34.128.87.13:41782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.troop698.org.nilestree.com"] [uri "/.git/config"] [unique_id "arbkTS9zMRaqACodcUPVKgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-25 20:31:36 (4 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇩🇪 konseptit	2026-09-25 20:22:13 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.128.87.13 (ID/Indonesia/13.87.128.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.128.87.13 (ID/Indonesia/13.87.128.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-25 04:32:57 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.128.87.13 (13.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:32:52.303367 2026] [security2:error] [pid 10803:tid 10803] [client 34.128.87.13:34918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tla.diegolaje.com"] [uri "/.git/config"] [unique_id "arX5dHDrSF57h-cMqMRK9wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-09-24 17:39:00 (5 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.128.87.13 (ID/Indonesia/Jakarta/Jaka ... show more (mod_security) mod_security triggered on hostname [redacted] 34.128.87.13 (ID/Indonesia/Jakarta/Jakarta/13.87.128.34.bc.googleusercontent.com) show less	SQL Injection
🇫🇷 Octopuce	2026-09-22 13:13:39 (1 week ago)	Aggressive web search of vulnerable pages: / /.env /.env.local /app/.env /apps/.env ...	Web App Attack
🇳🇱 Site.eu	2026-09-22 11:45:08 (1 week ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.119.42.248

🇨🇳 220.188.168.219

🇲🇽 101.44.187.210

🇫🇷 85.217.140.44

🇮🇷 85.198.19.217

🇺🇸 52.3.102.51

🇳🇱 45.148.10.141

🇩🇪 216.25.126.12

🇫🇷 195.154.107.115

🇨🇳 183.252.199.17

🇩🇪 151.243.11.139

🇳🇱 45.148.10.183

🇭🇰 218.102.198.69

🇻🇳 171.231.179.179

🇦🇷 142.249.122.36

🇦🇲 88.218.92.31

🇫🇮 45.144.52.239

🇰🇪 41.203.213.8

🇩🇪 213.209.159.154

🇺🇦 213.174.21.237