JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.94.125.215

34.94.125.215 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	215.125.94.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.94.125.215

Whois 34.94.125.215

IP Abuse Reports for 34.94.125.215:

This IP address has been reported a total of 37 times from 32 distinct sources. 34.94.125.215 was first reported on October 15th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-10-17 01:00:19 (14 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 todix	2026-10-17 00:16:53 (15 hours ago)	"GET /.git/config HTTP/1.1" 403 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ... show more "GET /.git/config HTTP/1.1" 403 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 debestelapp	2026-10-16 23:35:14 (16 hours ago)		Web App Attack
🇹🇷 ayayntr	2026-10-16 22:08:43 (17 hours ago)	[Sat Oct 17 01:08:40.576734 2026] [proxy_fcgi:error] [pid 3156:tid 3205] [client 34.94.125.215:52284 ... show more [Sat Oct 17 01:08:40.576734 2026] [proxy_fcgi:error] [pid 3156:tid 3205] [client 34.94.125.215:52284] AH01071: Got error 'Primary script unknown' [Sat Oct 17 01:08:40.774798 2026] [proxy_fcgi:error] [pid 3156:tid 3184] [client 34.94.125.215:52284] AH01071: Got error 'Primary script unknown' [Sat Oct 17 01:08:40.967970 2026] [proxy_fcgi:error] [pid 3156:tid 3202] [client 34.94.125.215:52284] AH01071: Got error 'Primary script unknown' [Sat Oct 17 01:08:41.166581 2026] [proxy_fcgi:error] [pid 3156:tid 3206] [client 34.94.125.215:52284] AH01071: Got error 'Primary script unknown' [Sat Oct 17 01:08:41.360685 2026] [proxy_fcgi:error] [pid 3156:tid 3192] [client 34.94.125.215:52284] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2026-10-16 22:02:07 (17 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-15. show less	Web App Attack SSH Hacking
Anonymous	2026-10-16 20:00:08 (19 hours ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
Anonymous	2026-10-16 19:54:02 (19 hours ago)	Bot / scanning and/or hacking attempts: GET /email/.env HTTP/1.1, GET /.env.backup1 HTTP/1.1, GET /m ... show more Bot / scanning and/or hacking attempts: GET /email/.env HTTP/1.1, GET /.env.backup1 HTTP/1.1, GET /mailing/.env HTTP/1.1, GET /mailer/.env HTTP/1.1, GET /smtp/.env HTTP/1.1, GET /logs/.env HTTP/1.1, GET /psnlink/.env HTTP/1.1, GET /exapi/.env HTTP/1.1, GET /sitemaps/.env HTTP/1.1, GET /mail/.env HTTP/1.1, GET /cache/.env HTTP/1.1, GET /saas/.env HTTP/1.1, GET /shop/.env HTTP/1.1, GET /cronlab/.env HTTP/1.1, GET /nest/.env HTTP/1.1, GET /.env.backup2 HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 18:07:12 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.94.125.215 (215.125.94.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.94.125.215 (215.125.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 14:07:07.989919 2026] [security2:error] [pid 29641:tid 29641] [client 34.94.125.215:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.atlascoombs.com"] [uri "/.git/config"] [unique_id "atJny1JWmP60DpySKbgSdAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 17:51:15 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.94.125.215 (215.125.94.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.94.125.215 (215.125.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:51:11.105959 2026] [security2:error] [pid 26629:tid 26629] [client 34.94.125.215:53840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.athletestandard.com"] [uri "/.git/config"] [unique_id "atJkD45SqKEBIoujNLmpJwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-10-16 17:20:09 (22 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.94.125.215 (US/United States/Califor ... show more (mod_security) mod_security triggered on hostname [redacted] 34.94.125.215 (US/United States/California/Los Angeles/215.125.94.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-10-16 15:47:49 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.94.125.215 (215.125.94.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.94.125.215 (215.125.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:47:42.946139 2026] [security2:error] [pid 13614:tid 13614] [client 34.94.125.215:44578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.asfmglobal.com"] [uri "/.git/config"] [unique_id "atJHHrtyrE-s-TrxXchBoQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-10-16 14:50:26 (1 day ago)	[FriOct1616:50:20.5948432026][security2:error][pid1327441:tid1327556][client34.94.125.215:0]ModSecur ... show more [FriOct1616:50:20.5948432026][security2:error][pid1327441:tid1327556][client34.94.125.215:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.artisteer-italia.org\"][uri\"/.env.bak\"][unique_id\"atI5rH-lss7dshppmsPdEgAAAIg\"] show less	Port Scan Brute-Force Web App Attack
🇷🇴 clauss	2026-10-16 14:37:03 (1 day ago)	34.94.125.215 - - [16/Oct/2026:17:37:02 +0300] "GET /phpinfo.php HTTP/2.0" 200 11301 "-" "Mozilla/5. ... show more 34.94.125.215 - - [16/Oct/2026:17:37:02 +0300] "GET /phpinfo.php HTTP/2.0" 200 11301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.94.125.215 - - [16/Oct/2026:17:37:02 +0300] "GET /info.php HTTP/2.0" 404 3163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 renzo64	2026-10-16 14:17:04 (1 day ago)	Domain : MailEnable WebMail Rule : hack 2026-10-16 14:16:13 *hidden-privacy* GET /php.php - 443 ... show more Domain : MailEnable WebMail Rule : hack 2026-10-16 14:16:13 *hidden-privacy* GET /php.php - 443 - 34.94.125.215 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - 404 0 2 1522 346 151 - - show less	Hacking SQL Injection Brute-Force
🇺🇸 MatCat	2026-10-16 11:05:13 (1 day ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 240e:108:4aa1:fffe::2

🇳🇱 195.178.110.30

🇧🇷 186.215.197.13

🇺🇸 162.216.150.143

🇺🇸 162.216.150.116

🇬🇧 64.205.72.91

🇩🇿 41.103.177.109

🇬🇧 31.14.254.60

🇨🇳 220.174.28.220

🇧🇷 201.48.58.125

🇳🇱 192.42.116.107

🇨🇳 114.94.211.10

🇸🇬 94.231.206.1

🇹🇷 88.249.195.23

🇷🇴 80.94.92.234

🇺🇸 76.83.156.156

🇺🇸 72.202.250.246

🇹🇳 197.5.145.102

🇧🇷 189.76.184.11

🇪🇸 188.26.196.39