JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.13.138.186

Activity Trending Down

Abuse Confidence Score

32% Elevated

21 reports

18 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 186.138.13.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇳🇱 Netherlands
City: Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

21 from 18 distinct reporters

First reported

September 20th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 6 🇩🇪 Germany 3 🇳🇱 Netherlands 3

Most common categories Web App Attack 16 Brute-Force 9 Bad Web Bot 7 Hacking 5 Port Scan 3

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-30 04:56:51 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.13.138.186 (186.138.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:56:47.505841 2026] [security2:error] [pid 21090:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.13.138.186 (186.138.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:56:47.505841 2026] [security2:error] [pid 21090:tid 21114] [client 34.13.138.186:60672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iamfluff.com"] [uri "/.git/config"] [unique_id "aryWj_aRMwdfGP80bvLskwAAAVY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 zcampbell	2026-09-29 18:45:30 UTC · (1 month ago)	Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automatically.	Web App Attack Bad Web Bot
🇫🇷 Stara	2026-09-29 07:39:35 UTC · (1 month ago)	ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)	Brute-Force Hacking Web App Attack
🇨🇭 🇨🇭 Hosting	2026-09-29 05:10:30 UTC · (1 month ago)	Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 16:38:41 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.13.138.186 (186.138.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:38:33.621005 2026] [security2:error] [pid 6934:tid 6 ... show more (mod_security) mod_security (id:210492) triggered by 34.13.138.186 (186.138.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:38:33.621005 2026] [security2:error] [pid 6934:tid 6934] [client 34.13.138.186:46754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harwoodmechanical.com"] [uri "/.git/config"] [unique_id "arqYCUo0uiMSJ8cjM2gs4AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-09-28 10:04:03 UTC · (1 month ago)	Web scanning / probing for vulnerable paths	Port Scan Web App Attack
🇪🇸 pipeline.es	2026-09-28 03:29:30 UTC · (1 month ago)	Web scanning / probing for vulnerable paths \| URL: /_phpinfo.php \| Evidence: idealtours.pt 34.13.138.186 - - [28/Sep/2026:05:29:14 +0200] \"GET /_phpinfo.php HTTP/1.1\" 404 22548 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ... show more Web scanning / probing for vulnerable paths \| URL: /_phpinfo.php \| Evidence: idealtours.pt 34.13.138.186 - - [28/Sep/2026:05:29:14 +0200] \"GET /_phpinfo.php HTTP/1.1\" 404 22548 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=NL \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: NL show less	Port Scan Web App Attack
🇳🇱 debestelapp	2026-09-27 08:00:11 UTC · (1 month ago)		Web App Attack
🇩🇪 konseptit	2026-09-27 06:12:22 UTC · (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 34.13.138.186 (186.138.13.34.bc.googleusercontent.com)	SQL Injection
🇺🇸 TPI-Abuse	2026-09-26 10:02:13 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.13.138.186 (186.138.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:02:05.579955 2026] [security2:error] [pid 19350:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.13.138.186 (186.138.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:02:05.579955 2026] [security2:error] [pid 19350:tid 19350] [client 34.13.138.186:50328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "innatmichaellynns.com"] [uri "/.git/config"] [unique_id "areYHWhHdoQIQf-iqJdW0wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-26 06:21:21 UTC · (1 month ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)	Hacking
🇬🇧 noise.agency	2026-09-25 16:53:32 UTC · (1 month ago)	34.13.138.186 (186.138.13.34.bc.googleusercontent.com), more than 10 Apache 403 hits	Hacking
🇺🇸 markawes	2026-09-25 16:29:44 UTC · (1 month ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 34.13.138.186 - - [25/Sep/2026:17:29:43 +0100] "GET /.git/config HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 34.13.138.186 - - [25/Sep/2026:17:29:43 +0100] "GET /.git/config HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.138.186 - - [25/Sep/2026:17:29:43 +0100] "GET /.env HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.138.186 - - [25/Sep/2026:17:29:43 +0100] "GET /.env.local HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Port Scan Hacking Web App Attack
Anonymous	2026-09-24 18:40:50 UTC · (1 month ago)	34.13.138.186 - - [24/Sep/2026:13:40:48 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.138.186 34.13.138.186 - - [24/Sep/2026:13:40:48 -0500] "GET ... show more 34.13.138.186 - - [24/Sep/2026:13:40:48 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.138.186 34.13.138.186 - - [24/Sep/2026:13:40:48 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.138.186 34.13.138.186 - - [24/Sep/2026:13:40:48 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.138.186 34.13.138.186 - - [24/Sep/2026:13:40:48 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.138.186 34.13.138.186 - - [24/Sep/2026:13:40:48 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 XICTRON	2026-09-24 16:00:06 UTC · (1 month ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 223.15.228.240

🇺🇸 195.184.76.114

🇯🇵 189.81.127.149

🇨🇳 182.38.127.212

🇵🇱 172.64.198.222

🇺🇸 152.163.101.125

🇺🇸 2607:f298:5:119a:f816:3eff:fe9a:6813

🇺🇸 2400:cb00:650:1000:e443:4f23:3332:b3f

🇳🇱 195.178.110.217

🇱🇻 187.14.82.250

🇻🇳 165.99.16.17

🇺🇸 154.51.243.86

🇷🇴 92.118.39.14

🇷🇺 88.84.209.146

🇩🇪 69.5.169.222

🇩🇪 69.5.169.131

🇺🇸 45.250.254.13

🇧🇷 45.229.91.2

🇺🇸 20.121.65.178

🇺🇿 213.230.93.67