JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.64.254.69

34.64.254.69 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google Asia Pacific Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	69.254.64.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.64.254.69

Whois 34.64.254.69

IP Abuse Reports for 34.64.254.69:

This IP address has been reported a total of 29 times from 23 distinct sources. 34.64.254.69 was first reported on August 30th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-01 09:25:23 (1 hour ago)	[01/Sep/2026:12:25:22 +0300] -- 34.64.254.69 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/ ... show more [01/Sep/2026:12:25:22 +0300] -- 34.64.254.69 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 Kraften	2026-09-01 09:15:03 (1 hour ago)	GET Web noscript attack ...	Web Spam Web App Attack
Anonymous	2026-09-01 08:17:19 (2 hours ago)	34.64.254.69 - - [01/Sep/2026:03:17:16 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macinto ... show more 34.64.254.69 - - [01/Sep/2026:03:17:16 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 34.64.254.69 - - [01/Sep/2026:03:17:16 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 34.64.254.69 - - [01/Sep/2026:03:17:16 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 34.64.254.69 - - [01/Sep/2026:03:17:16 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 34.64.254.69 - - [01/Sep/2026:03:17:17 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac O ... show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-09-01 06:50:29 (3 hours ago)	Triggered Cloudflare WAF (linkMaze) from KR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from KR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 lns.bz	2026-09-01 06:33:53 (3 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
Anonymous	2026-09-01 04:57:53 (5 hours ago)	CrowdSec ban: crowdsecurity/http-sensitive-files	Port Scan
🇫🇮 mnazibo	2026-09-01 03:45:11 (6 hours ago)	Date: Sep 01 06:12:05 2026 EAT \| Reported IP: 34.64.254.69 mod_security \| id: 932130 932235 932260 9 ... show more Date: Sep 01 06:12:05 2026 EAT \| Reported IP: 34.64.254.69 mod_security \| id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 930130 920440 920500 \| KR/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Execution: Direct Unix Command Execution; PHP Injection Attack: Variable Access Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Prototype Pollution; SQL Injection Attack: SQL function name detected; JSON-Based SQL Injection; Inbound Anomaly Score Exceeded (Total Score: 55); Restricted File Access Attempt; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Ex show less	SQL Injection Brute-Force Bad Web Bot
🇦🇺 electronico	2026-09-01 03:10:49 (7 hours ago)	34.64.254.69 - - [01/Sep/2026:14:10:47 +1100] "GET /.git/config HTTP/1.1" 404 241 "-" "Mozilla/5.0 ( ... show more 34.64.254.69 - - [01/Sep/2026:14:10:47 +1100] "GET /.git/config HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 - - [01/Sep/2026:14:10:47 +1100] "GET /.env HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 - - [01/Sep/2026:14:10:47 +1100] "GET /.env.local HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 - - [01/Sep/2026:14:10:48 +1100] "GET /.env.production HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.64.254.69 - - [01/Sep/2026:14:10:48 +1100] "GET /.env.staging HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34. ... show less	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-09-01 02:30:03 (7 hours ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 masterguru	2026-09-01 02:28:11 (8 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 LRob	2026-09-01 02:18:16 (8 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+1 more) \| 2026-09-01 02:18 UTC show less	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 00:25:41 (10 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 Site.eu	2026-09-01 00:00:35 (10 hours ago)	Excessive multi-domain requests	Brute-Force
🇯🇵 beon	2026-08-31 12:17:05 (22 hours ago)	[DateTime=>2026-08-31T12:17:05Z to 2026-08-31T12:17:28Z (UTC)] , [HoneyPot_Hits=>262 times] , [Honey ... show more [DateTime=>2026-08-31T12:17:05Z to 2026-08-31T12:17:28Z (UTC)] , [HoneyPot_Hits=>262 times] , [HoneyPots=>/.git/config, /.env, /.env.local, /.env.production, /.env.staging, /.env.development and others] , [404targets=>/_environment, /phpinfo.php.bak, /phpinfo.php.old, /phpinfo.php~, /info.php.bak, /phpinfo.php.save and others] , [total_Hits=>271 times] , [hit_per_second=>11.78] , [Keyword=>WordPress, Joomla, Laravel] show less	Bad Web Bot Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-31 10:53:16 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.64.254.69 (69.254.64.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.64.254.69 (69.254.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:53:08.834989 2026] [security2:error] [pid 24968:tid 25037] [client 34.64.254.69:35978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandbarsteve.com"] [uri "/.git/config"] [unique_id "apVdFAZV8NBXm99W61t_7QAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 183.104.220.195

🇪🇨 170.254.29.73

🇸🇬 153.75.93.57

🇨🇳 117.72.212.5

🇺🇸 99.114.206.57

🇺🇸 3.89.132.133

🇩🇪 195.182.16.23

🇳🇱 195.178.110.137

🇳🇱 193.47.62.69

🇨🇴 191.97.12.90

🇺🇸 152.32.235.206

🇻🇳 103.72.56.174

🇳🇬 102.88.137.80

🇺🇸 52.186.171.170

🇺🇸 47.251.243.238

🇰🇷 14.46.30.239

🇷🇺 5.3.154.197

🇿🇦 4.221.162.168

🇸🇬 2a04:c607:33:14:9999::145

🇺🇸 2602:80d:1008::9b