JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.59.124.148

34.59.124.148 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	148.124.59.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.59.124.148

Whois 34.59.124.148

IP Abuse Reports for 34.59.124.148:

This IP address has been reported a total of 63 times from 45 distinct sources. 34.59.124.148 was first reported on September 15th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkey	2026-09-16 06:44:49 (3 days ago)	[First: 2026-09-15 09:29:09/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempt ... show more [First: 2026-09-15 09:29:09/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempting to connect to a forbidden port show less	Port Scan Hacking Web App Attack
🇩🇪 raph	2026-09-16 05:17:54 (3 days ago)	[PROTECTED PATHS] crawler credentials.ini, aws.ini, aws.yml, etc.	Bad Web Bot Web App Attack
Anonymous	2026-09-16 04:40:00 (3 days ago)		Brute-Force Web App Attack Hacking
🇫🇷 kie	2026-09-16 04:11:33 (3 days ago)	16-09-2026:04:10:09UTC [Nginx Web Server] Suspicious web request: path:/.aws/ path:/.git path:/.env ... show more 16-09-2026:04:10:09UTC [Nginx Web Server] Suspicious web request: path:/.aws/ path:/.git path:/.env path:/.env,/.git path:/.well-known/ path:/api/v1/config path:/actuator/ (105 request(s)). show less	Bad Web Bot Web App Attack
Anonymous	2026-09-16 03:37:12 (3 days ago)	Bot / seems abusive / Apache connections: 27	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-09-16 02:10:09 (3 days ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-09-16 00:37:23 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 34.59.124.148 (148.124.59.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.59.124.148 (148.124.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:37:16.096024 2026] [security2:error] [pid 12534:tid 12534] [client 34.59.124.148:57796] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|zombiekillabob.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zombiekillabob.com"] [uri "/z9x8c7v6b5-debug-trigger-zombiekillabob.com"] [unique_id "aqnkvK5YJPA4Cbkl5Z8VcgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 00:20:31 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 rh24	2026-09-16 00:02:42 (3 days ago)	(badbots) Bad bot user-agent [redacted] from 34.59.124.148 (US/United States/148.124.59.34.bc.google ... show more (badbots) Bad bot user-agent [redacted] from 34.59.124.148 (US/United States/148.124.59.34.bc.googleusercontent.com) show less	Hacking
🇺🇸 Starburst SysOp Team	2026-09-15 23:55:41 (3 days ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-mnz6-1) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-15 23:02:42 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 34.59.124.148 (148.124.59.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.59.124.148 (148.124.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:02:35.528800 2026] [security2:error] [pid 9515:tid 9515] [client 34.59.124.148:51354] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|micahgartman.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "micahgartman.com"] [uri "/z9x8c7v6b5-debug-trigger-micahgartman.com"] [unique_id "aqnOi6819C8DsSeeW-eRGwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-09-15 23:02:03 (3 days ago)	[redacted] 34.59.124.148 - - [15/Sep/2026:23:05:06 +0100] "GET / HTTP/1.1" 200 8108 0/88541 "https:/ ... show more [redacted] 34.59.124.148 - - [15/Sep/2026:23:05:06 +0100] "GET / HTTP/1.1" 200 8108 0/88541 "https://[redacted]/.[redacted]" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://[redacted]/search/[redacted])" 443 [redacted] 34.59.124.148 - - [15/Sep/2026:23:05:05 +0100] "GET / HTTP/1.1" 200 8108 0/107572 "https://[redacted]/api/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://[redacted]/searchbot)" 443 [redacted] 34.59.124.148 - - [15/Sep/2026:23:05:05 +0100] "GET / HTTP/1.1" 200 8107 0/155928 "https://[redacted]/admin/.env" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://[redacted]/)" 443 [redacted] 34.59.124.148 - - [15/Sep/2026:23:05:05 +0100] "GET / HTTP/1.1" 200 8108 0/133593 "https://[redacted]/.[redacted]" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@[redacted])" 443 show less	Bad Web Bot Web App Attack
🇨🇦 lakered	2026-09-15 23:00:00 (3 days ago)	Detectors: [NGINX, SURICATA] \| Reasons: Suricata: Web Server attack \| Automated scan targeting an un ... show more Detectors: [NGINX, SURICATA] \| Reasons: Suricata: Web Server attack \| Automated scan targeting an unauthorized host or default server sinkhole \| Evidence: Verified-Bot-JA4-Match (t13d1516h2) \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m) show less	Web App Attack Hacking Port Scan Bad Web Bot
🇺🇸 interbiznw.com	2026-09-15 22:59:14 (3 days ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 Cuteminded	2026-09-15 22:53:10 (3 days ago)	Highly suspect IP	Web Spam Bad Web Bot

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 116.16.188.35

🇧🇩 103.103.100.56

🇨🇳 223.70.149.210

🇸🇪 212.107.150.103

🇹🇼 198.235.24.79

🇪🇹 196.188.93.169

🇦🇷 190.220.172.154

🇺🇸 172.190.220.228

🇧🇷 131.0.190.152

🇺🇸 71.56.179.86

🇮🇩 43.129.44.66

🇺🇸 20.65.146.48

🇦🇺 16.176.125.169

🇻🇳 14.248.83.33

🇬🇧 5.226.140.53

🇬🇧 185.216.145.175

🇭🇰 152.32.212.226

🇧🇩 103.191.178.42

🇺🇦 91.244.17.128

🇬🇧 86.12.246.211