JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.230.13.21

8.230.13.21 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 99%: ?

99%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	21.13.230.8.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.230.13.21

Whois 8.230.13.21

IP Abuse Reports for 8.230.13.21:

This IP address has been reported a total of 20 times from 17 distinct sources. 8.230.13.21 was first reported on September 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-09-16 15:15:40 (6 hours ago)	🔥 VERY AGGRESSIVE SCANNER probed over 300 inexistent files and PHP scripts in less than an hour.	Hacking Web App Attack
🇳🇱 middelkoopcc	2026-09-16 14:12:07 (7 hours ago)	2026-09-16 16:10:15 GET /.git/config [301] && 2026-09-16 16:10:16 GET /.env [301] && 2026-09-16 16:1 ... show more 2026-09-16 16:10:15 GET /.git/config [301] && 2026-09-16 16:10:16 GET /.env [301] && 2026-09-16 16:10:17 GET /.env.bak [301] && 161 more within 20 minutes show less	Web App Attack
🇨🇦 polycoda	2026-09-16 14:00:38 (8 hours ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:56:04 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 8.230.13.21 (21.13.230.8.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 8.230.13.21 (21.13.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:55:55.579450 2026] [security2:error] [pid 19502:tid 19502] [client 8.230.13.21:55916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xplustchad.com"] [uri "/.git/config"] [unique_id "aqqf61TYJYnfzJd8B2dXFwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-16 13:26:47 (8 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:10:16 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 8.230.13.21 (21.13.230.8.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 8.230.13.21 (21.13.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:10:11.944880 2026] [security2:error] [pid 2045:tid 2045] [client 8.230.13.21:58646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xpd.us"] [uri "/.git/config"] [unique_id "aqqVM_ZPLbQZoO3G5oi7PgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-16 13:01:11 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 McClay	2026-09-16 12:08:43 (9 hours ago)	Illegal access attempt:8.230.13.21 - - [16/Sep/2026:14:08:42 +0200] "GET /.git/config HTTP/1.1" 404 ... show more Illegal access attempt:8.230.13.21 - - [16/Sep/2026:14:08:42 +0200] "GET /.git/config HTTP/1.1" 404 1072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 konseptit	2026-09-16 10:35:35 (11 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 8.230.13.21 (KR/South Korea/21.13.230.8 ... show more (mod_security) mod_security triggered on hostname [redacted] 8.230.13.21 (KR/South Korea/21.13.230.8.bc.googleusercontent.com) show less	SQL Injection
🇳🇱 Site.eu	2026-09-16 09:57:20 (12 hours ago)	Excessive 404/403 errors	Brute-Force
🇸🇪 vaia.cloud	2026-09-16 08:00:08 (14 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 dot.mg	2026-09-16 05:47:03 (16 hours ago)	Bad behaviour	Web Spam
🇨🇭 🇨🇭 Hosting	2026-09-16 05:10:07 (16 hours ago)	Automated WAF report: 1000-1500 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-16 01:36:31 (20 hours ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-09-16 01:36:23 (20 hours ago)	http-sensitive-files - IP: 8.230.13.21 - time="2026-09-16T03:36:23+02:00" level=info msg="(555f66b4 ... show more http-sensitive-files - IP: 8.230.13.21 - time="2026-09-16T03:36:23+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 8.230.13.21 (US/396982) : 4h ban on Ip 8.230.13.21" module=db show less	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.204

🇹🇭 125.27.47.245

🇨🇳 222.90.233.165

🇧🇷 186.224.74.171

🇯🇵 160.251.253.29

🇮🇷 78.38.84.140

🇯🇲 72.27.34.174

🇷🇴 2.57.122.150

🇮🇳 219.65.103.66

🇺🇸 195.184.76.197

🇸🇬 152.236.20.4

🇸🇬 104.22.66.95

🇺🇸 74.82.47.5

🇲🇾 49.124.153.41

🇸🇬 34.143.191.88

🇺🇸 23.81.63.179

🇰🇷 222.120.63.29

🇺🇸 68.227.77.111

🇺🇸 66.249.84.32

🇮🇳 65.254.81.69