34.13.140.156

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
113 reports
77 reporters · latest 4 hours ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
156.140.13.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇳🇱 Netherlands
City
Groningen, Groningen
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
113 from 77 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 20 🇺🇸 United States of America 20 🇳🇱 Netherlands 15
Most common categories Web App Attack 98 Brute-Force 44 Bad Web Bot 38 Hacking 27 Port Scan 10
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇷 Little Iguana
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇳🇱 tmiland
Brute-Force
🇺🇸 factor1
CrowdSec at apollo Reports Abuse
Web App Attack
🇵🇱 miriks
Automated scan detected: GET /.git/config — UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Port Scan Web App Attack
🇬🇧 eXcalibre
[Fri Nov 06 16:36:58.471257 2026] [proxy_fcgi:error] [pid 1073:tid 1235] [client 34.13.140.156:60624] AH01071: Got error 'Primary script unknown' ...
Hacking
🇺🇸 factor1
CrowdSec at saturn Reports Abuse
Web App Attack
🇫🇷 Batz
Automated, Web, Bot, hunting, for, hidden, .env, /, AI, API, Credentials
Port Scan Bad Web Bot Web App Attack
🇩🇪 SCHAPPY
Brute-force attack to non-existent web resources, HTTP code 404.
Brute-Force Web App Attack
Anonymous
fail2ban:mail3:19
Bad Web Bot
🇩🇪 ghostwarriors
Attempts against non-existent wp-login
Brute-Force Web App Attack
🇩🇪 throny
Web App Attack
🇩🇪 TheDjRider
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-11-06T14:14:11.779357259Z. Context: http_status=200
Web App Attack
🇩🇪 febrian.de
Malicious HTTP(S) probing detected by Fail2Ban
Web App Attack
🇩🇪 DyhnenTv
CrowdSec webserver: crowdsecurity/http-sensitive-files
Web App Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 66.132.195.205
🇩🇪 64.89.163.251
🇧🇷 205.210.31.198
🇧🇷 187.73.183.211
🇨🇳 182.92.204.91
🇷🇺 95.108.213.181
🇷🇺 95.79.57.221
🇷🇺 94.159.81.102
🇺🇸 35.254.94.87
🇩🇪 23.132.164.185
🇺🇸 20.65.219.69
🇺🇸 16.216.88.51
🇧🇷 205.210.31.192
🇺🇸 162.216.149.45
🇦🇷 161.22.18.167
🇨🇳 153.35.209.8
🇺🇸 152.32.149.47
🇺🇸 142.93.204.108
🇳🇱 109.160.32.32
🇸🇬 94.231.206.202
feedback