JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.59.5.149

34.59.5.149 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	149.5.59.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.59.5.149

Whois 34.59.5.149

IP Abuse Reports for 34.59.5.149:

This IP address has been reported a total of 50 times from 31 distinct sources. 34.59.5.149 was first reported on August 25th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-26 22:01:19 (2 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-25. show less	Web App Attack SSH Hacking
🇩🇪 Bedios GmbH	2026-08-26 20:03:18 (4 hours ago)	Login credentials theft attempt	Hacking
🇩🇪 macrob	2026-08-26 19:50:57 (4 hours ago)	2026/08/26 19:50:54 [error] 2096801#2096801: 523943635 access forbidden by rule, client: 34.59.5.14 ... show more 2026/08/26 19:50:54 [error] 2096801#2096801: 523943635 access forbidden by rule, client: 34.59.5.149, server: fn.binixo.es, request: "GET /.git/config HTTP/1.1", host: "binixo.bg" 2026/08/26 19:50:55 [error] 2096801#2096801: 523943634 access forbidden by rule, client: 34.59.5.149, server: binixo.com.ua, request: "GET /.git/config HTTP/1.1", host: "binixo.com.ua" 2026/08/26 19:50:55 [error] 2096797#2096797: 523943675 access forbidden by rule, client: 34.59.5.149, server: binixo.es, request: "GET /.git/config HTTP/1.1", host: "binixo.es" ... show less	Web App Attack
Anonymous	2026-08-26 19:30:12 (4 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-26 19:28:04 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.59.5.149 (149.5.59.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.59.5.149 (149.5.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:27:59.738180 2026] [security2:error] [pid 12849:tid 12849] [client 34.59.5.149:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradleybarefoot.com"] [uri "/.git/config"] [unique_id "ao8-P5vwfVYsDF2d57jWdgAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-08-26 18:37:11 (5 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 BlueWire Hosting	2026-08-26 18:22:45 (6 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇬🇧 consul.to	2026-08-26 17:57:14 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 macrob	2026-08-26 17:53:14 (6 hours ago)	2026/08/26 17:53:11 [error] 2096798#2096798: 523617946 access forbidden by rule, client: 34.59.5.14 ... show more 2026/08/26 17:53:11 [error] 2096798#2096798: 523617946 access forbidden by rule, client: 34.59.5.149, server: binixo.ro, request: "GET /.git/config HTTP/2.0", host: "binixo.ro" 2026/08/26 17:53:11 [error] 2096799#2096799: 523662125 access forbidden by rule, client: 34.59.5.149, server: fn.binixo.es, request: "GET /.git/config HTTP/1.1", host: "binixo.bg" 2026/08/26 17:53:12 [error] 2096799#2096799: 523662147 access forbidden by rule, client: 34.59.5.149, server: binixo.es, request: "GET /.git/config HTTP/1.1", host: "binixo.es" ... show less	Web App Attack
🇩🇪 iNetWorker	2026-08-26 16:50:39 (7 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 Lino Project	2026-08-26 16:47:43 (7 hours ago)	34.59.5.149 - - [26/Aug/2026:18:47:39 +0200] "GET /.git/config HTTP/1.1" 302 5622 "-" "Mozilla/5.0 ( ... show more 34.59.5.149 - - [26/Aug/2026:18:47:39 +0200] "GET /.git/config HTTP/1.1" 302 5622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-08-26 16:37:36 (7 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.59.5.149 (US/United States/149.5 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.59.5.149 (US/United States/149.5.59.34.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 06:33:37 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.59.5.149 (149.5.59.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.59.5.149 (149.5.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:33:32.362808 2026] [security2:error] [pid 13335:tid 13335] [client 34.59.5.149:14810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "patanthony.com"] [uri "/.env"] [unique_id "ao6IvArxBw8zRrMMd0fjewAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 05:35:55 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.59.5.149 (149.5.59.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.59.5.149 (149.5.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 01:35:48.055640 2026] [security2:error] [pid 12997:tid 12997] [client 34.59.5.149:23880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "passwordresearch.com"] [uri "/.env"] [unique_id "ao57NHmW2Yft8qAQy-R2_gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 mindrider	2026-08-26 03:55:22 (20 hours ago)	34.59.5.149 - - [26/Aug/2026:05:55:21 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 ( ... show more 34.59.5.149 - - [26/Aug/2026:05:55:21 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "-" 34.59.5.149 - - [26/Aug/2026:05:55:22 +0200] "GET /.env.bak HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "-" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:119:1000:b09d:6112:614a:bf19

🇱🇹 213.176.26.21

🇷🇼 197.243.14.52

🇦🇷 190.114.187.96

🇩🇪 167.94.146.43

🇭🇰 156.225.1.86

🇫🇮 147.185.133.184

🇨🇳 115.198.142.31

🇮🇳 103.182.132.154

🇺🇦 93.171.214.213

🇫🇷 85.217.140.43

🇺🇸 24.98.83.80

🇺🇸 2400:cb00:988:1000:ecf8:c398:a98a:8fd

🇧🇷 205.210.31.213

🇦🇷 201.212.119.61

🇺🇸 173.239.224.204

🇧🇷 170.247.109.214

🇺🇸 162.216.149.230

🇺🇸 147.185.132.246

🇺🇸 134.209.120.216