JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.59.5.102

34.59.5.102 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	102.5.59.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.59.5.102

Whois 34.59.5.102

IP Abuse Reports for 34.59.5.102:

This IP address has been reported a total of 16 times from 13 distinct sources. 34.59.5.102 was first reported on August 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-22 06:46:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.59.5.102 (102.5.59.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.59.5.102 (102.5.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:46:26.794365 2026] [security2:error] [pid 19721:tid 19721] [client 34.59.5.102:48656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.tckgbookkeeping.biz"] [uri "/.git/HEAD"] [unique_id "aolFwksvJpeiZiZJ6M0f3wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-08-22 06:06:26 (1 day ago)	Web vulnerability scanning / probing from 34.59.5.102: automated requests for CMS admin paths, login ... show more Web vulnerability scanning / probing from 34.59.5.102: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 2 hits; paths: /.git/HEAD. show less	Port Scan Hacking Web App Attack
🇩🇪 webanyone	2026-08-22 06:02:33 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:59:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.59.5.102 (102.5.59.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.59.5.102 (102.5.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:59:32.914358 2026] [security2:error] [pid 27353:tid 27357] [client 34.59.5.102:38778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.super-8mm.com"] [uri "/.git/HEAD"] [unique_id "aok6xBryB5Hd2G6TYLSdPgAAAUI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-08-22 05:22:19 (1 day ago)	Accessed trap at '/.git/HEAD'	Web App Attack
🇬🇧 consul.to	2026-08-22 05:11:02 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-22 04:42:08 (2 days ago)	[22/Aug/2026:07:42:07 +0300] -- 34.59.5.102 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/H ... show more [22/Aug/2026:07:42:07 +0300] -- 34.59.5.102 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/HEAD HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 03:44:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.59.5.102 (102.5.59.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.59.5.102 (102.5.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 23:44:23.918060 2026] [security2:error] [pid 2253:tid 2255] [client 34.59.5.102:48034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dulemba.com"] [uri "/.git/HEAD"] [unique_id "aokbF-muM01cGkRMkbvKZQAAAYA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-08-22 02:10:44 (2 days ago)	[SatAug2204:10:40.2647932026][security2:error][pid423591:tid423772][client34.59.5.102:0]ModSecurity: ... show more [SatAug2204:10:40.2647932026][security2:error][pid423591:tid423772][client34.59.5.102:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.aidconsultancy.ch\"][uri\"/.git/HEAD\"][unique_id\"aokFIFXSRf9w_uzc1RZ6FwAAAIQ\"] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-08-22 01:53:30 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.astropot.website \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 leasj	2026-08-18 18:50:08 (5 days ago)	Observed Scanned 1 known-sensitive endpoint(s), e.g.: /.git/HEAD.	Hacking Bad Web Bot Web App Attack
🇳🇱 middelkoopcc	2026-08-18 03:30:58 (6 days ago)	2026-08-18 05:11:13 GET /.git/HEAD [404] && 2026-08-18 05:11:13 GET /.git/HEAD [404] && 2026-08-18 0 ... show more 2026-08-18 05:11:13 GET /.git/HEAD [404] && 2026-08-18 05:11:13 GET /.git/HEAD [404] && 2026-08-18 05:11:14 GET /.svn/wc.db [404] && 146 more within 20 minutes show less	Web App Attack
🇨🇭 backslash	2026-08-17 09:42:09 (6 days ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
Anonymous	2026-08-17 04:35:01 (1 week ago)	suspicious request in access.log	Web App Attack
🇵🇱 Budyn	2026-08-17 01:13:54 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dev.teddypot.store \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.28.234.10

🇬🇧 35.203.210.85

🇺🇸 216.25.89.155

🇧🇪 207.175.16.249

🇨🇳 202.102.231.17

🇹🇼 198.235.24.56

🇬🇧 193.163.125.254

🇳🇱 185.93.89.118

🇵🇰 110.38.0.210

🇻🇳 103.9.205.62

🇫🇷 91.196.152.123

🇹🇷 78.191.98.200

🇺🇸 64.62.197.50

🇦🇺 61.245.129.41

🇬🇧 35.203.210.82

🇬🇧 35.203.210.81

🇶🇦 2600:1900:4260:40e::a6

🇦🇷 200.59.70.236

🇩🇪 194.88.98.85

🇮🇳 172.217.38.19