JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.94.118.13

34.94.118.13 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	13.118.94.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.94.118.13

Whois 34.94.118.13

IP Abuse Reports for 34.94.118.13:

This IP address has been reported a total of 34 times from 27 distinct sources. 34.94.118.13 was first reported on August 31st 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 14:09:38 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.94.118.13 (13.118.94.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.94.118.13 (13.118.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 10:09:31.813328 2026] [security2:error] [pid 30953:tid 30953] [client 34.94.118.13:37026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.seebeexee.com"] [uri "/.env"] [unique_id "apbcm_sCMMUI4NDDbUkY2gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 leo1305	2026-09-01 13:04:40 (16 hours ago)	CrowdSec detection \| scenario: http-sensitive-files	Web App Attack Exploited Host
🇩🇪 raph	2026-09-01 12:22:22 (17 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇩🇪 mravb	2026-09-01 12:03:53 (17 hours ago)	34.94.118.13 - - [01/Sep/2026:15:03:53 +0300] "GET /.env HTTP/1.1" 404 143 "-" "crusader-worker/1.0" ... show more 34.94.118.13 - - [01/Sep/2026:15:03:53 +0300] "GET /.env HTTP/1.1" 404 143 "-" "crusader-worker/1.0" ... show less	Web App Attack Hacking
Anonymous	2026-09-01 12:03:27 (17 hours ago)	git/env leak probe	Web App Attack
🇩🇪 FD-IX	2026-09-01 11:09:14 (18 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 11:07:32 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.94.118.13 (13.118.94.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.94.118.13 (13.118.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:07:26.287570 2026] [security2:error] [pid 31339:tid 31339] [client 34.94.118.13:44280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wagsgrooming.com"] [uri "/.env"] [unique_id "apax7pWpVDO4KjgPr7UtqgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kommunos	2026-09-01 09:39:55 (19 hours ago)	/.env.production	Web App Attack
🇺🇸 factor1	2026-09-01 09:29:18 (19 hours ago)	CrowdSec at saturn Reports Abuse	Web App Attack
🇫🇮 kumiko	2026-09-01 08:52:46 (20 hours ago)	[2026-09-01 11:52:46] Apache auth failure: brute force attempt, file probing	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-09-01 07:45:06 (21 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.94.118.13 (13.118.94.34.bc.googleu ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.94.118.13 (13.118.94.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-01 07:38:18 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.94.118.13 (13.118.94.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.94.118.13 (13.118.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:38:13.829076 2026] [security2:error] [pid 2132:tid 2132] [client 34.94.118.13:51646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yoshiyukiya.com"] [uri "/.env.example"] [unique_id "apaA5fTOhR8VaTontNxFgwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇰🇷 doll.gl	2026-09-01 07:33:53 (21 hours ago)	CrowdSec: Ip 34.94.118.13 performed 'crowdsecurity/http-sensitive-files' (5 events over 47.650152ms) ... show more CrowdSec: Ip 34.94.118.13 performed 'crowdsecurity/http-sensitive-files' (5 events over 47.650152ms) at 2026-09-01 07:33:52.589286506 +0000 UTC (scenario: crowdsecurity/http-sensitive-files) show less	Port Scan Web App Attack
🇮🇹 CoreTech srl	2026-09-01 07:28:56 (21 hours ago)	cloudlinux2 fail2ban: 2026-09-01 09:23:55,881 fail2ban.filter [1605]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-01 09:23:55,881 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 223.181.105.192 - 2026-09-01 09:23:55cloudlinux2 fail2ban: 2026-09-01 09:23:50,846 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 170.101.96.56 - 2026-09-01 09:23:50cloudlinux2 fail2ban: 2026-09-01 09:24:59,471 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 223.181.105.192 - 2026-09-01 09:24:58cloudlinux2 fail2ban: 2026-09-01 09:25:35,037 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Unban 110.226.238.72cloudlinux2 fail2ban: 2026-09-01 09:26:02,285 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Ban 223.181.105.192cloudlinux2 fail2ban: 2026-09-01 09:26:01,955 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 223.181.105.192 - 2026-09-01 09:26:01cloudlinux2 fail2ban: 2026-09-01 09:26:02,292 fail2ban.filter [1605]: INFO [recidive] Found 223.181.105.192 - 2026-09-01 09:26:02cloudlinux2 fail2ban: 2026-09-01 09:26: show less	Web App Attack
🇳🇱 e.fierstra	2026-09-01 06:18:45 (23 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:1ca8:889f:b922:b485:260b:ea0d

🇨🇴 181.129.41.162

🇨🇳 116.179.32.232

🇩🇪 69.5.169.101

🇩🇪 69.5.169.79

🇮🇳 34.180.29.218

🇧🇪 34.34.159.174

🇨🇳 223.199.191.216

🇫🇷 213.136.68.185

🇺🇸 195.184.76.194

🇳🇱 193.47.62.69

🇧🇷 186.235.254.40

🇳🇱 185.242.226.74

🇺🇸 170.187.143.221

🇩🇪 167.94.146.76

🇨🇳 117.13.169.250

🇺🇸 109.105.210.72

🇳🇱 89.248.172.10

🇸🇪 81.227.46.137

🇺🇸 66.132.195.55