JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.38.105.13

34.38.105.13 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	13.105.38.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.38.105.13

Whois 34.38.105.13

IP Abuse Reports for 34.38.105.13:

This IP address has been reported a total of 26 times from 23 distinct sources. 34.38.105.13 was first reported on September 21st 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 smtp.com.es	2026-09-21 07:16:14 (3 minutes ago)	Brute force attempt.	Brute-Force Email Spam
🇵🇱 nfsec.pl	2026-09-21 07:07:27 (12 minutes ago)	Detected: TCP scan on port: 23 with flags: SYN	Port Scan
🇺🇸 chronos	2026-09-21 06:52:37 (27 minutes ago)	[AUTORAVALT][[21/09/2026 - 03:52:37 -03:00 UTC] Attack from [Google LLC] [34.38.105.13][13.105.38.34 ... show more [AUTORAVALT][[21/09/2026 - 03:52:37 -03:00 UTC] Attack from [Google LLC] [34.38.105.13][13.105.38.34.bc.googleusercontent.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-F] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇨🇦 Daniel Gomez	2026-09-21 06:28:04 (51 minutes ago)	Sep 20 23:28:03 smtp.dgsmailer.cc postfix/postscreen/postscreen[109106]: PREGREET 18 after 0.09 from ... show more Sep 20 23:28:03 smtp.dgsmailer.cc postfix/postscreen/postscreen[109106]: PREGREET 18 after 0.09 from [34.38.105.13]:38904: EHLO example.com\r\n Sep 20 23:28:03 smtp.dgsmailer.cc postfix/dnsblog[109107]: addr 34.38.105.13 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 20 23:28:03 smtp.dgsmailer.cc postfix/dnsblog[109107]: addr 34.38.105.13 listed by domain zen.spamhaus.org as 127.0.0.4 ... show less	Email Spam
🇪🇸 loadsoporte	2026-09-21 06:16:25 (1 hour ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇮🇱 auth.ink	2026-09-21 05:54:22 (1 hour ago)	Malicious activity detected	Port Scan Brute-Force Hacking
🇺🇸 001hermes	2026-09-21 05:50:06 (1 hour ago)	Honeypot evidence: Source: Cowrie honeypot (SSH/telnet). 6 session(s). Last activity 2026-09-21T05:1 ... show more Honeypot evidence: Source: Cowrie honeypot (SSH/telnet). 6 session(s). Last activity 2026-09-21T05:18:11Z. tried creds: GET / HTTP/1.0:?;OPTIONS sip:nm SIP/2.0:Via: SIP/2.0/TCP nm;branch=foo;From: <sip:nm@nm>;tag=root:To: <sip:nm2@nm2>;Call-ID: 50000:CSeq: 42 OPTIONS;Max-Forwards: 70:Content-Length: 0;Contact: <sip:nm@nm>:Accept: application/sdp show less	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-09-21 05:36:36 (1 hour ago)	Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials used: GET / HTTP/1.1:Host: [SOM ... show more Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials used: GET / HTTP/1.1:Host: [SOME-IP]:23, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36:Accept-Encoding: gzip, *1:$4, OPTIONS rtsp://example.com RTSP/1.0:Cseq: 8042 • Number of login attempts: 4 show less	Hacking Brute-Force IoT Targeted
🇩🇪 Kejult	2026-09-21 05:24:09 (1 hour ago)	Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activi ... show more Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed. show less	Hacking
🇺🇸 001hermes	2026-09-21 05:20:32 (1 hour ago)	Honeypot evidence: Source: Cowrie honeypot (SSH/telnet). 6 session(s). Last activity 2026-09-21T05:1 ... show more Honeypot evidence: Source: Cowrie honeypot (SSH/telnet). 6 session(s). Last activity 2026-09-21T05:18:11Z. tried creds: GET / HTTP/1.0:?;OPTIONS sip:nm SIP/2.0:Via: SIP/2.0/TCP nm;branch=foo;From: <sip:nm@nm>;tag=root:To: <sip:nm2@nm2>;Call-ID: 50000:CSeq: 42 OPTIONS;Max-Forwards: 70:Content-Length: 0;Contact: <sip:nm@nm>:Accept: application/sdp \| credentials=GET / HTTP/1.0:?;OPTIONS sip:nm SIP/2.0:Via: SIP/2.0/TCP nm;branch=foo;From: <sip:nm@nm>;tag=root:To: <sip:nm2@nm2>;Call-ID: 50000:CSeq: 42 OPTIONS;Max-Forwards: 70:Content-Length: 0;Contact: <sip:nm@nm>:Accept: application/sdp show less	Brute-Force SSH
🇺🇸 xmission.com	2026-09-21 04:49:55 (2 hours ago)	IP triggered Postscreen SMTP Filter	Email Spam
🇵🇱 bart@	2026-09-21 04:32:03 (2 hours ago)	Automated scan detection against redacted protected targets. Hits=32; port 23 proto 6 detection hone ... show more Automated scan detection against redacted protected targets. Hits=32; port 23 proto 6 detection honeypot_tcp show less	Port Scan
Anonymous	2026-09-21 04:29:36 (2 hours ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 Marc	2026-09-21 03:59:26 (3 hours ago)	2026-09-21T05:59:25.541011+02:00 mx1 postfix/smtp/smtpd[2243922]: improper command pipelining after ... show more 2026-09-21T05:59:25.541011+02:00 mx1 postfix/smtp/smtpd[2243922]: improper command pipelining after CONNECT from 13.105.38.34.bc.googleusercontent.com[34.38.105.13]: HELP 2026-09-21T05:59:25.575603+02:00 mx1 postfix/smtp/smtpd[2245507]: improper command pipelining after CONNECT from 13.105.38.34.bc.googleusercontent.com[34.38.105.13]: 2026-09-21T05:59:25.607895+02:00 mx1 postfix/smtp/smtpd[2243922]: improper command pipelining after CONNECT from 13.105.38.34.bc.googleusercontent.com[34.38.105.13]: GET / HTTP/1.0 show less	Brute-Force Email Spam
🇺🇸 cybsecaoccol	2026-09-21 03:54:41 (3 hours ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2409:40e3:4003:dc91:2193:b5f7:1a97:cb23

🇮🇳 223.188.51.145

🇺🇿 213.230.87.38

🇲🇽 187.251.123.104

🇮🇳 182.77.70.200

🇨🇴 179.1.113.65

🇫🇷 161.97.84.172

🇮🇳 157.20.138.59

🇨🇳 122.142.122.49

🇰🇷 112.217.220.2

🇳🇬 102.88.137.80

🇺🇸 85.8.130.55

🇸🇦 84.8.97.123

🇺🇸 73.34.17.163

🇺🇸 70.183.233.68

🇱🇹 62.60.130.253

🇺🇸 47.42.234.181

🇨🇳 36.212.31.122

🇺🇸 207.168.22.191

🇩🇪 194.88.98.83