JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.125.244.21

34.125.244.21 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 89%: ?

89%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	21.244.125.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.125.244.21

Whois 34.125.244.21

IP Abuse Reports for 34.125.244.21:

This IP address has been reported a total of 40 times from 28 distinct sources. 34.125.244.21 was first reported on May 18th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-06-11 03:23:58 (1 week ago)	[ThuJun1105:23:55.6999812026][security2:error][pid1369659:tid1369811][client34.125.244.21:0]ModSecur ... show more [ThuJun1105:23:55.6999812026][security2:error][pid1369659:tid1369811][client34.125.244.21:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"nuovosito.gruppobalu.com\"][uri\"/.env.prod.bak\"][unique_id\"aioqS8Z_LqdR9IWbg7hjyQAAARc\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-11 03:07:15 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.125.244.21 (US/United States/-)	SQL Injection
🇳🇱 Site.eu	2026-06-10 17:28:29 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Progetto1	2026-06-10 17:02:01 (1 week ago)	Detected via HAProxyScanner at 2026-06-10 17:02:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-06-10 17:02:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇩🇪 Bedios GmbH	2026-06-10 16:34:42 (1 week ago)	Login credentials theft attempt	Hacking
🇧🇪 cmbplf	2026-06-10 15:44:24 (1 week ago)	644 requests with url.path *.env	Brute-Force Bad Web Bot
Anonymous	2026-06-10 06:54:37 (1 week ago)	Aggressive web scan	Web App Attack
🇩🇪 on-com	2026-06-10 01:29:05 (1 week ago)	URL scan	Brute-Force Web App Attack
🇩🇪 Philister11	2026-06-10 00:17:04 (1 week ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (US/AS396982)	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-09 19:14:32 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.125.244.21 (21.244.125.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.125.244.21 (21.244.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 15:14:26.777361 2026] [security2:error] [pid 4193:tid 4209] [client 34.125.244.21:43092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jameskeeton.com"] [uri "/.env.live"] [unique_id "aihmEpw4cV-hQnOOUNjuEwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-09 17:59:17 (1 week ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇳🇱 Site.eu	2026-06-09 16:30:31 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 updown.io	2026-06-09 15:50:54 (1 week ago)	{"level":"info","ts":1781020252.7695007,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781020252.7695007,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.125.244.21","remote_port":"40382","client_ip":"34.125.244.21","proto":"HTTP/1.1","method":"GET","host":"status-c0511-1d033579-302c-4e07-8670-6e5dc1045e0a.provacy.com","uri":"/.env.example","headers":{"Connection":["close"],"User-Agent":["Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status-c0511-1d033579-302c-4e07-8670-6e5dc1045e0a.provacy.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000100413,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1781020252.7704804,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.125.244.21","remote_port":"40416","client_ip":"34.125.244.21","proto":"HTTP/1.1" ... show less	DDoS Attack Web App Attack
🇬🇧 consul.to	2026-06-09 15:38:18 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 12:37:37 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.125.244.21 (21.244.125.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.125.244.21 (21.244.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:37:31.101009 2026] [security2:error] [pid 7196:tid 7196] [client 34.125.244.21:54234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gunningphysio.modeltdr.com"] [uri "/.env.development.local"] [unique_id "aigJC3L_Oc7nWDrPC3fdQQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 81.57.15.243

🇺🇸 207.90.244.17

🇹🇳 196.237.246.104

🇮🇶 185.166.25.150

🇮🇳 172.83.83.194

🇧🇷 138.255.157.62

🇫🇮 35.228.175.255

🇬🇧 35.203.210.139

🇨🇳 14.29.198.130

🇺🇸 2604:a880:2:d1:0:1:51da:f001

🇧🇷 189.100.69.26

🇳🇱 176.65.139.233

🇩🇪 172.253.1.217

🇲🇽 148.216.255.251

🇷🇴 80.94.95.211

🇳🇱 31.42.176.142

🇺🇸 20.65.194.96

🇺🇸 2604:a880:400:d1:0:4:6c7f:f001

🇮🇹 176.124.77.119

🇺🇸 156.229.21.54