JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.180.125.74

Recent Activity

Abuse confidence score ?

100% Critical

59 reports

52 reporters · latest 17 hours ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	74.125.180.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.180.125.74

Export CSV

This IP address has been reported a total of 59 times from 52 distinct sources. 34.180.125.74 was first reported on October 4th 2026, and the most recent report was 17 hours ago. In the last 60 days, the top reporter locations were: Germany with 46 reports; Netherlands with 7 reports; France with 3 reports. The most common categories in these recent reports were: Web App Attack 45 times; Bad Web Bot 18 times; Brute-Force 15 times; Hacking 9 times; Port Scan 4 times; Other 11 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Holger	2026-10-06 17:42:32 (17 hours ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇩🇪 Manuel Braeuer	2026-10-05 10:22:47 (2 days ago)	34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de ... show more 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /.dockerenv HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /proc/self/cmdline HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" ... show less	Web App Attack
Anonymous	2026-10-05 05:45:15 (2 days ago)	VELIEDE WEBEXPLOIT 34.180.125.74 (74.125.180.34.bc.googleusercontent.com)	Web App Attack
🇳🇱 Savvii	2026-10-05 05:42:30 (2 days ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-05 02:59:55 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Savvii	2026-10-05 02:05:52 (2 days ago)	20 attempts against mh-misbehave-ban on mensa	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-10-05 02:00:19 (2 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 pscriptos	2026-10-05 01:57:28 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 arnisolutions	2026-10-05 01:43:28 (2 days ago)	Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ... show more Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-10-05 and 2026-10-05 (UTC). Sample request: GET /ngsw.json HTTP/2.0 show less	Web App Attack Hacking
🇩🇪 tall1oN	2026-10-05 01:34:27 (2 days ago)	34.180.125.74 - - [05/Oct/2026:03:34:26 +0200] "POST /graphql HTTP/2.0" 405 559 "https://tallion.de" ... show more 34.180.125.74 - - [05/Oct/2026:03:34:26 +0200] "POST /graphql HTTP/2.0" 405 559 "https://tallion.de" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" "tallion.de" 34.180.125.74 - - [05/Oct/2026:03:34:27 +0200] "POST /api/graphql HTTP/2.0" 405 559 "https://tallion.de" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" "tallion.de" ... show less	Web App Attack Port Scan Hacking
🇩🇪 snhosting	2026-10-05 01:24:30 (2 days ago)	34.180.125.74 - - [05/Oct/2026:03:24:19 +0200] "GET /.npmrc HTTP/2.0" 200 1606 "-" "Mozilla/5.0 Appl ... show more 34.180.125.74 - - [05/Oct/2026:03:24:19 +0200] "GET /.npmrc HTTP/2.0" 200 1606 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.180.125.74 - - [05/Oct/2026:03:24:20 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.180.125.74 - - [05/Oct/2026:03:24:20 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.180.125.74 - - [05/Oct/2026:03:24:20 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.180.125.74 - - [05/Oct/2026:03:24:20 +0200] "GET /@fs/../.env?raw?? HTTP/2.0" 200 1606 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇩🇪 Philister11	2026-10-05 01:09:34 (2 days ago)	CrowdSec: crowdsecurity/grafana-cve-2021-43798 (JP/AS396982)	Web App Attack Hacking
Anonymous	2026-10-05 01:02:20 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 kivitendo.de	2026-10-05 00:50:49 (2 days ago)	[Mon Oct 05 02:50:48.409275 2026] [access_compat:error] [pid 120710:tid 120747] [client 34.180.125.7 ... show more [Mon Oct 05 02:50:48.409275 2026] [access_compat:error] [pid 120710:tid 120747] [client 34.180.125.74:41798] AH01797: client denied by server configuration: /var/www/kivitendo/config/.env [Mon Oct 05 02:50:51.073744 2026] [access_compat:error] [pid 120710:tid 120757] [client 34.180.125.74:41810] AH01797: client denied by server configuration: /var/www/kivitendo/.git/config ... show less	Brute-Force Web App Attack
🇩🇪 pltcldvlpr	2026-10-05 00:49:31 (2 days ago)	CMS/framework probe: 34.180.125.74 - - [05/Oct/2026:02:49:30 +0200] "GET /var/run/secrets/kubernetes ... show more CMS/framework probe: 34.180.125.74 - - [05/Oct/2026:02:49:30 +0200] "GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/2.0" 301 178 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" asn=396982 org="Google LLC" country=JP ... show less	Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.55

🇺🇸 195.184.76.133

🇨🇴 190.60.242.28

🇫🇷 185.202.238.70

🇬🇧 161.35.34.21

🇺🇸 152.32.208.9

🇨🇳 119.36.149.15

🇫🇷 85.217.140.44

🇰🇷 42.82.224.71

🇺🇸 23.94.145.109

🇨🇳 220.178.39.106

🇮🇳 206.189.137.165

🇨🇱 201.239.35.178

🇷🇺 185.9.75.228

🇳🇱 178.62.212.177

🇬🇧 172.166.156.163

🇺🇸 152.32.151.39

🇺🇸 136.70.129.27

🇨🇳 120.48.6.172

🇵🇭 110.235.129.142