JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.21.116.125

34.21.116.125 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 97%: ?

97%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	125.116.21.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Washington, District of Columbia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.21.116.125

Whois 34.21.116.125

IP Abuse Reports for 34.21.116.125:

This IP address has been reported a total of 22 times from 21 distinct sources. 34.21.116.125 was first reported on August 14th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-17 04:18:10 (5 days ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-16 14:03:36 (5 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 Major Hostility	2026-07-16 14:03:18 (5 days ago)	"GET /wp-includes/ID3/license.txt HTTP/1.1" 404 "GET /feed/ HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/ ... show more "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 "GET /feed/ HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/1.1" 403 "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /cms/wp-includes%2 show less	Web App Attack
🇳🇿 Antinson	2026-07-16 14:02:05 (5 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 Dennis	2026-07-16 14:01:58 (5 days ago)	34.21.116.125 has been banned for triggering http-probing (11 events over 1.134890943s).	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 13:53:26 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 34.21.116.125 (125.116.21.34.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 34.21.116.125 (125.116.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 09:53:20.390543 2026] [security2:error] [pid 6983:tid 6983] [client 34.21.116.125:56642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|meganmurph.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "meganmurph.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aljiUH9rjW09j1v8CnJ_ZgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-16 13:50:42 (5 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 13:50:05 (5 days ago)	IP banned by Fail2Ban in jail wordpress	Web App Attack Brute-Force Bad Web Bot
🇩🇪 IVski	2026-07-16 13:45:44 (5 days ago)	IVski WAF \| WordPress scanner detected - probing wp-content, xmlrpc or wp-login	Port Scan Brute-Force Web App Attack
🇺🇸 mccsoft.io	2026-07-16 13:41:37 (5 days ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-07-16 13:35:54 (5 days ago)	(y3) Failed access -byebye- from 34.21.116.125 (US/United States/125.116.21.34.bc.googleusercontent. ... show more (y3) Failed access -byebye- from 34.21.116.125 (US/United States/125.116.21.34.bc.googleusercontent.com): (CF_ENABLE) show less	Hacking
🇩🇪 FeG Deutschland	2026-07-16 13:34:43 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇨🇦 Blinker73	2026-07-16 13:31:29 (5 days ago)	34.21.116.125 - - [16/Jul/2026:09:31:28 -0400] "GET //wp-includes/ID3/license.txt HTTP/1.1" 308 39 " ... show more 34.21.116.125 - - [16/Jul/2026:09:31:28 -0400] "GET //wp-includes/ID3/license.txt HTTP/1.1" 308 39 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 webanyone	2026-07-16 13:30:52 (5 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇷🇺 DZBOT	2026-07-16 13:29:20 (5 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.114

🇧🇪 198.235.24.164

🇧🇷 170.0.62.173

🇰🇿 147.30.193.152

🇨🇳 113.57.184.78

🇮🇩 103.253.245.222

🇺🇸 64.62.197.32

🇬🇧 13.43.108.132

🇮🇶 212.237.119.119

🇪🇸 185.209.6.255

🇺🇸 162.216.150.183

🇩🇪 134.122.93.100

🇹🇭 103.230.120.88

🇳🇱 89.21.67.176

🇫🇷 85.217.140.29

🇸🇾 82.97.212.254

🇩🇪 51.195.40.26

🇳🇱 45.142.193.161

🇦🇺 40.82.214.8

🇨🇩 196.250.95.98