JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.64.125.17

34.64.125.17 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 83%: ?

83%

ISP	Google Asia Pacific Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	17.125.64.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.64.125.17

Whois 34.64.125.17

IP Abuse Reports for 34.64.125.17:

This IP address has been reported a total of 15 times from 13 distinct sources. 34.64.125.17 was first reported on June 13th 2026, and the most recent report was 33 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-06-13 12:47:56 (33 minutes ago)	Multiple WAF Violations	Web App Attack
🇨🇦 Mediashaker	2026-06-13 12:05:10 (1 hour ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.64.125.17 (KR/South K ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.64.125.17 (KR/South Korea/17.125.64.34.bc.googleusercontent.com) show less	Port Scan
🇬🇧 consul.to	2026-06-13 12:01:05 (1 hour ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-13 11:33:07 (1 hour ago)	(caddyscan) Scanner path probe from 34.64.125.17 (KR/South Korea/17.125.64.34.bc.googleusercontent.c ... show more (caddyscan) Scanner path probe from 34.64.125.17 (KR/South Korea/17.125.64.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.64.125.17 - - [13/Jun/2026:11:33:02 +0000] "GET /v2/actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 34.64.125.17 - - [13/Jun/2026:11:33:02 +0000] "GET /v1/actuator/configprops HTTP/1.1" [REDACTED] 200 2627 34.64.125.17 - - [13/Jun/2026:11:33:02 +0000] "GET /v1/actuator/env HTTP/1.1" [REDACTED] 200 2627 34.64.125.17 - - [13/Jun/2026:11:33:02 +0000] "GET /v2/actuator/configprops HTTP/1.1" [REDACTED] 200 2627 34.64.125.17 - - [13/Jun/2026:11:33:02 +0000] "GET /v2/actuator/env HTTP/1.1" show less	Port Scan
🇳🇱 Site.eu	2026-06-13 08:22:09 (4 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-13 06:40:00 (6 hours ago)	Aggressive web scan	Web App Attack
🇳🇱 Site.eu	2026-06-13 06:32:55 (6 hours ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 updown.io	2026-06-13 06:08:17 (7 hours ago)	{"level":"info","ts":1781330895.7421906,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781330895.7421906,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.64.125.17","remote_port":"34720","client_ip":"34.64.125.17","proto":"HTTP/1.1","method":"GET","host":"whm.whm.whm.www.www.kghifwww.status.quarks-erp.com","uri":"/trace","headers":{"User-Agent":["Mozilla/5.0 (iPad; CPU OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/76.0.3809.81 Mobile/15E148 Safari/605.1"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.00006833,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://whm.whm.whm.www.www.kghifwww.status.quarks-erp.com/trace"],"Content-Type":[]}} {"level":"info","ts":1781330895.7656946,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.64.125.17","remote_port":"34726","client_ip":"34.64.125.17","proto":"HTTP/1.1","method":"GET","host":"whm.whm.whm.w ... show less	DDoS Attack Web App Attack
🇨🇭 Origon	2026-06-13 05:31:17 (7 hours ago)	http-probing - IP: 34.64.125.17 - time="2026-06-13T07:31:16+02:00" level=info msg="(555f66b4f6a7455 ... show more http-probing - IP: 34.64.125.17 - time="2026-06-13T07:31:16+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.64.125.17 (KR/396982) : 4h ban on Ip 34.64.125.17" module=db show less	Web App Attack
🇮🇹 VHosting	2026-06-13 05:30:03 (7 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-06-13 05:14:04 (8 hours ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 04:32:12 (8 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.64.125.17 (17.125.64.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.64.125.17 (17.125.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:32:05.523833 2026] [security2:error] [pid 9617:tid 9635] [client 34.64.125.17:40022] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|spectresails.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spectresails.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aizdRUW07TaQaIvIWAbQKQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-13 04:06:40 (9 hours ago)	Too many Status 40X (11) Scanning/Probing (61) Request Overload (383)	Brute-Force Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-13 03:26:08 (9 hours ago)	categories: DDoS Attack	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-13 03:23:07 (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.64.125.17 (17.125.64.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.64.125.17 (17.125.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:22:59.783659 2026] [security2:error] [pid 28956:tid 28956] [client 34.64.125.17:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|backlogica.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "backlogica.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aizNEyoiGKGnHzpVDthrOQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.214.56.78

🇨🇳 182.44.38.181

🇩🇪 139.162.186.99

🇯🇵 86.48.12.168

🇺🇸 64.62.156.157

🇹🇼 61.231.229.39

🇺🇸 52.167.144.194

🇭🇰 34.92.83.162

🇰🇷 14.45.142.178

🇨🇳 1.14.28.29

🇬🇧 213.171.208.62

🇬🇧 213.166.84.37

🇰🇷 211.219.243.53

🇺🇸 172.93.101.146

🇮🇳 136.232.11.10

🇬🇧 81.19.219.227

🇷🇴 80.94.92.186

🇺🇸 66.132.195.152

🇫🇷 51.75.236.143

🇳🇱 45.148.10.151