JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.125.134.48

34.125.134.48 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	48.134.125.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.125.134.48

Whois 34.125.134.48

IP Abuse Reports for 34.125.134.48:

This IP address has been reported a total of 25 times from 20 distinct sources. 34.125.134.48 was first reported on August 26th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-26 19:22:40 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.125.134.48 (48.134.125.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.125.134.48 (48.134.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:22:35.953932 2026] [security2:error] [pid 24357:tid 24357] [client 34.125.134.48:46670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jacksonpropertyrentals.com"] [uri "/static../.env"] [unique_id "ao88-wodMvwB3jwaW1AxHgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 19:19:00 (17 hours ago)	Excessive crawling/scraping. Vulnerable file probing.	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-08-26 18:59:06 (17 hours ago)	Common web attack from 34.125.134.48.	Web App Attack
🇸🇪 vaia.cloud	2026-08-26 18:50:02 (17 hours ago)	crowdsecurity/http-wordpress_wpconfig	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-08-26 18:24:08 (18 hours ago)	Aggressive web search of vulnerable pages: /app/.env /.env /media../.env /.env.local /admin/.env .. ... show more Aggressive web search of vulnerable pages: /app/.env /.env /media../.env /.env.local /admin/.env ... show less	Web App Attack
Anonymous	2026-08-26 17:50:26 (18 hours ago)	\| Common web attack.	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-08-26 16:51:36 (19 hours ago)	(mod_security) mod_security (id:210580) triggered by 34.125.134.48 (48.134.125.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210580) triggered by 34.125.134.48 (48.134.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:51:30.975475 2026] [security2:error] [pid 24999:tid 24999] [client 34.125.134.48:34254] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:url. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|www.voodooshop.com\|F\|2"] [data "Matched Data: proc/self/environ found within ARGS:url: file:/proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.voodooshop.com"] [uri "/read"] [unique_id "ao8ZkklvpiKuxSnGVvFSrAAAAFU"], referer: http://mojo2go.com/read?url=file:///proc/self/environ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 middelkoopcc	2026-08-26 16:32:01 (20 hours ago)	2026-08-26 18:29:59 GET /download?file=../../../../etc/passwd [301] && 2026-08-26 18:29:59 GET /@fs/ ... show more 2026-08-26 18:29:59 GET /download?file=../../../../etc/passwd [301] && 2026-08-26 18:29:59 GET /@fs/home/ec2-user/.aws/credentials?raw?? [301] && 2026-08-26 18:29:59 GET /.git/HEAD [301] && 122 more within 20 minutes show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 15:44:49 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.125.134.48 (48.134.125.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.125.134.48 (48.134.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 11:44:41.810094 2026] [security2:error] [pid 16978:tid 16978] [client 34.125.134.48:38324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leirstein.com"] [uri "/.git/HEAD"] [unique_id "ao8J6Ug16rYWBE0Rx8xldQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 14:54:41 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.125.134.48 (48.134.125.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.125.134.48 (48.134.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 10:54:36.521938 2026] [security2:error] [pid 9383:tid 9383] [client 34.125.134.48:2322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heckenbach.org"] [uri "/static../.env"] [unique_id "ao7-LF8eqnS_95FLWmtd2QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-26 13:36:54 (22 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-08-26 13:15:04 (23 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-08-26 12:56:26 (23 hours ago)	Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.	Web App Attack
🇸🇪 vaia.cloud	2026-08-26 12:50:02 (23 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 mnsf	2026-08-26 12:05:19 (1 day ago)	Scanning/Probing (12)	Brute-Force Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇴 185.138.167.146

🇳🇱 45.148.10.151

🇮🇳 206.189.131.75

🇵🇰 203.99.61.238

🇴🇲 185.64.25.226

🇮🇳 168.144.76.240

🇸🇬 168.144.47.228

🇸🇬 168.144.46.126

🇸🇬 168.144.39.106

🇳🇱 164.90.202.72

🇨🇳 111.178.162.96

🇺🇸 107.150.105.10

🇩🇿 105.97.111.44

🇱🇹 88.119.203.93

🇬🇧 87.236.176.52

🇩🇪 85.215.207.236

🇺🇸 66.132.186.225

🇮🇷 46.100.14.91

🇺🇸 45.61.170.83

🇺🇸 34.136.38.158