JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.125.67.45

34.125.67.45 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 82%: ?

82%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	45.67.125.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.125.67.45

Whois 34.125.67.45

IP Abuse Reports for 34.125.67.45:

This IP address has been reported a total of 18 times from 13 distinct sources. 34.125.67.45 was first reported on August 27th 2026, and the most recent report was 54 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 middelkoopcc	2026-08-28 00:30:01 (54 minutes ago)	2026-08-28 02:27:57 GET /@fs/.env.staging?raw?? [301] && 2026-08-28 02:27:57 GET /@fs/app/rootkey.cs ... show more 2026-08-28 02:27:57 GET /@fs/.env.staging?raw?? [301] && 2026-08-28 02:27:57 GET /@fs/app/rootkey.csv?raw?? [301] && 2026-08-28 02:27:57 GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? [301] && 240 more within 20 minutes show less	Web App Attack
🇺🇸 mnsf	2026-08-28 00:07:09 (1 hour ago)	Scanning/Probing (26)	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-08-28 00:02:43 (1 hour ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-08-27 23:59:30 (1 hour ago)	Aggressive web scan	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 23:39:24 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 19:39:16.784123 2026] [security2:error] [pid 5495:tid 5495] [client 34.125.67.45:27950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gegkal.com"] [uri "/@fs/app/.env"] [unique_id "apDKpAhP1p9eEOnTLxikiAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NXTwoThou	2026-08-27 23:29:56 (1 hour ago)	/@fs/../../.env%3Fraw%3F%3F	Web App Attack
🇳🇱 Site.eu	2026-08-27 22:29:31 (2 hours ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Alboweb B.V.	2026-08-27 22:11:05 (3 hours ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
🇩🇪 big-cloud.nl	2026-08-27 22:10:53 (3 hours ago)	Try to access /@fs/app/.env?raw??	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 21:28:20 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 17:28:13.012725 2026] [security2:error] [pid 15680:tid 15680] [client 34.125.67.45:48990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.purelywhimsical.com"] [uri "/@fs/.env"] [unique_id "apCr7UdwRWcIy-BXjGgjoQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 21:00:10 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 17:00:04.103292 2026] [security2:error] [pid 7750:tid 7750] [client 34.125.67.45:13322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.digitalracemedia.com"] [uri "/@fs/app/.env"] [unique_id "apClVB1R77pH0e8cko9BsgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-27 21:00:10 (4 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Mangelot Hosting	2026-08-27 20:50:38 (4 hours ago)	(modsecurity) srv101 ModSecurity 34.125.67.45 (US/United States/45.67.125.34.bc.googleusercontent.co ... show more (modsecurity) srv101 ModSecurity 34.125.67.45 (US/United States/45.67.125.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 20:17:30 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.125.67.45 (45.67.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 16:17:22.698957 2026] [security2:error] [pid 7182:tid 7182] [client 34.125.67.45:6998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.brianmindy.com"] [uri "/@fs/app/.env"] [unique_id "apCbUspCtqox9knYonm9LgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-08-27 20:09:54 (5 hours ago)	{"level":"info","ts":1787861352.4443774,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1787861352.4443774,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.125.67.45","remote_port":"37056","client_ip":"34.125.67.45","proto":"HTTP/1.1","method":"GET","host":"fuxr.status.updown.io","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 8; Mi 8 Explorer Edition; Build/OPM3.221001.211) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6723.101 Mobile Safari/537.36"],"Accept":["/"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.00006252,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://fuxr.status.updown.io/"],"Content-Type":[],"Server":["Caddy"]}} {"level":"info","ts":1787861358.3199801,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.125.67.45","remote_port":"36306","client_ip":"34.125.67.45","proto":"HTTP/1.1","method":"GET","host":"fuxr.status.updown.io","uri":"/@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw??","h ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.45.30.128

🇲🇾 165.154.147.69

🇺🇸 162.216.150.195

🇵🇰 153.117.37.153

🇺🇸 104.236.19.165

100.105.40.240

🇫🇷 91.231.89.240

🇺🇸 91.230.168.134

🇳🇱 91.92.47.25

🇨🇦 85.217.149.74

🇺🇸 64.62.156.10

🇹🇼 59.124.170.220

🇳🇱 45.148.10.230

🇺🇸 45.79.2.67

🇺🇸 20.81.45.131

🇬🇧 5.102.173.71

🇫🇷 2400:cb00:1036:1000:eff5:1f9:9551:a19f

🇰🇷 211.53.58.10

🇺🇸 202.81.211.218

🇹🇼 198.235.24.90