JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.59.158.21

Recent Activity

Abuse Confidence Score

100% Critical

36 reports

28 reporters · latest 6 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 21.158.59.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

36 from 28 distinct reporters

First reported

November 5th 2026

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 7 🇳🇱 Netherlands 7 🇨🇿 Czechia 4

Most common categories Web App Attack 26 Bad Web Bot 15 Brute-Force 13 Hacking 8 Port Scan 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Roderic	2026-11-06 10:01:34 UTC · (6 days ago)	Insights: web vulnerability probing, 58 requests on 1 site, e.g. /.env.bak, /laravel../.env, /logs/.env (rotating 29 fake bot names, e.g. Meta-ExternalFetcher, Googlebot (fake), Browser via	Web App Attack
🇩🇪 mondor.ro	2026-11-06 09:44:45 UTC · (6 days ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.59.158.21, Reason:[(mod_security) mod_security (id:210832) triggered by 34.59.158.21 (US/United States/21.158.59.34.bc.googleusercontent.com): 3 in the last 3600 secs]; ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.59.158.21, Reason:[(mod_security) mod_security (id:210832) triggered by 34.59.158.21 (US/United States/21.158.59.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇷🇴 gtheo99	2026-11-06 09:39:57 UTC · (6 days ago)	(CT) IP 34.59.158.21 (US/United States/21.158.59.34.bc.googleusercontent.com) found to have 142 connections	Port Scan
🇵🇱 mkey	2026-11-06 09:10:24 UTC · (6 days ago)	[First: 2026-11-05 16:46:02/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempting to connect to a forbidden port	Port Scan Hacking Web App Attack
🇫🇮 iamxorum	2026-11-06 09:02:54 UTC · (6 days ago)	Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-11-06T09:02:53.981935+00:00 XRM-00 kernel: [513248.884514] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=34.59.158.21 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID ... show more Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-11-06T09:02:53.981935+00:00 XRM-00 kernel: [513248.884514] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=34.59.158.21 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=41582 DF PROTO=TCP SPT=60612 DPT=8443 WINDOW=65320 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 Alt255	2026-11-06 05:52:35 UTC · (6 days ago)	[mx01aln] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.59.158.21 - - [06/Nov/2026:06:52:25 +0100] "GET /.docker/.env HTTP/2.0" 403 543 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.59.158.21 - ... show more [mx01aln] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.59.158.21 - - [06/Nov/2026:06:52:25 +0100] "GET /.docker/.env HTTP/2.0" 403 543 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.59.158.21 - - [06/Nov/2026:06:52:25 +0100] "GET /.env.docker HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.59.158.21 - - [06/Nov/2026:06:52:25 +0100] "GET /portal/.env HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.59.158.21 - - [06/Nov/2026:06:52:25 +0100] "GET /.env.supabase HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://devel ... show less	Bad Web Bot Web App Attack
🇺🇸 gu-alvareza	2026-11-06 05:05:36 UTC · (6 days ago)	Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass	Web App Attack
🇩🇪 raph	2026-11-06 05:00:08 UTC · (6 days ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇬🇧 Marten Mark	2026-11-06 04:42:30 UTC · (6 days ago)	34.59.158.21 - - [06/Nov/2026:04:42:27 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 23059 "https://www.cfi.co/.vite/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34. ... show more 34.59.158.21 - - [06/Nov/2026:04:42:27 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 23059 "https://www.cfi.co/.vite/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34.59.158.21 - - [06/Nov/2026:04:42:28 +0000] "GET /ngsw.json HTTP/2.0" 404 23059 "https://www.cfi.co/ngsw.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34.59.158.21 - - [06/Nov/2026:04:42:28 +0000] "GET /ngsw.json HTTP/2.0" 404 23059 "https://www.cfi.co/ngsw.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34.59.158.21 - - [06/Nov/2026:04:42:28 +0000] "GET /build/manifest.json HTTP/2.0" 404 23059 "https://www.cfi.co/build/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 34.59.158.21 - - [06/Nov/2026:04:42:28 +0000] "GET / ... show less	Port Scan Web App Attack
🇳🇱 Savvii	2026-11-06 04:39:09 UTC · (6 days ago)	20 attempts against mh-misbehave-ban on solar	Brute-Force Bad Web Bot Web App Attack
🇩🇪 creoline GmbH	2026-11-06 04:20:18 UTC · (6 days ago)	[WAF] Multiple suspicious HTTP requests has been blocked	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 03:26:01 UTC · (6 days ago)	(mod_security) mod_security (id:210492) triggered by 34.59.158.21 (21.158.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:25:53.874707 2026] [security2:error] [pid 21957:tid 21 ... show more (mod_security) mod_security (id:210492) triggered by 34.59.158.21 (21.158.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:25:53.874707 2026] [security2:error] [pid 21957:tid 21957] [client 34.59.158.21:44654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ozkanturker.com"] [uri "/.env.supabase"] [unique_id "au1IwU2PQxIqTOma8h5nuAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-11-06 01:50:13 UTC · (1 week ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-06 01:30:06 UTC · (1 week ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Web App Attack Hacking SQL Injection
🇨🇦 Mediashaker	2026-11-06 01:04:46 UTC · (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.59.158.21 (US/United States/21.158.59.34.bc.googleusercontent.com)	Bad Web Bot

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 175.203.61.49

🇧🇷 168.194.167.70

🇺🇸 162.216.150.236

🇬🇧 158.46.158.138

🇨🇳 121.15.7.100

🇷🇺 95.174.113.237

🇻🇪 45.182.141.162

🇵🇱 45.138.12.47

🇬🇧 35.203.211.92

🇨🇳 220.167.233.103

🇸🇬 212.73.148.5

🇩🇪 212.30.36.152

🇺🇸 206.189.217.192

🇺🇸 199.165.159.11

🇫🇷 163.172.9.219

🇬🇧 82.39.6.131

🇬🇧 35.203.210.171

🇰🇾 23.188.0.236

🇷🇴 2.57.122.150

🇳🇱 195.178.110.30