JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.107.112.63

34.107.112.63 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	63.112.107.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.107.112.63

Whois 34.107.112.63

IP Abuse Reports for 34.107.112.63:

This IP address has been reported a total of 45 times from 33 distinct sources. 34.107.112.63 was first reported on August 26th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-09-01 13:20:02 (9 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 09:52:40 (12 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 FD-IX	2026-09-01 08:56:29 (13 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇳🇱 vaddilyin	2026-09-01 08:39:01 (13 hours ago)	{"ClientAddr":"34.107.112.63:54970","ClientHost":"34.107.112.63","ClientPort":"54970","ClientUsernam ... show more {"ClientAddr":"34.107.112.63:54970","ClientHost":"34.107.112.63","ClientPort":"54970","ClientUsername":"-","DownstreamContentSize":24487,"DownstreamStatus":200,"Duration":10013118,"OriginContentSize":24487,"OriginDuration":9929083,"OriginStatus":200,"Overhead":84035,"RequestAddr":"io.vdkln.com","RequestContentSize":0,"RequestCount":723860,"RequestHost":"io.vdkln.com","RequestMethod":"GET","RequestPath":"/.git/config","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"n8n@docker","ServiceAddr":"172.18.0.39:5678","ServiceName":"n8n@docker","ServiceURL":"http://172.18.0.39:5678","StartLocal":"2026-09-01T08:39:00.385737175Z","StartUTC":"2026-09-01T08:39:00.385737175Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-09-01T08:39:00Z"} {"ClientAddr":"34.107.112.63:54970","ClientHost":"34.107.112.63","ClientPort":"54970","ClientUsername":"-","DownstreamContentSize":2448 ... show less	Web App Attack
🇬🇧 andypiper	2026-08-30 01:00:40 (2 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 Philister11	2026-08-30 00:15:41 (2 days ago)	CrowdSec: crowdsecurity/http-probing (DE/AS396982)	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-29 23:37:30 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.107.112.63 (63.112.107.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.107.112.63 (63.112.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 19:37:23.331537 2026] [security2:error] [pid 12252:tid 12252] [client 34.107.112.63:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ndanetworks.com"] [uri "/htdocs/.git/config"] [unique_id "apNtM9usFRO0f5b3T2NEbQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-29 19:19:34 (3 days ago)	[SatAug2921:19:32.1983932026][security2:error][pid282518:tid282618][client34.107.112.63:0]ModSecurit ... show more [SatAug2921:19:32.1983932026][security2:error][pid282518:tid282618][client34.107.112.63:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.farmaciaferrari.ch.136-243-54-122.cpanel.site\"][uri\"/.git/config\"][unique_id\"apMwxPdO7kWNMEbVAB7AowAAAIg\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Marc	2026-08-29 16:08:29 (3 days ago)	34.107.112.63 - - [29/Aug/2026:18:08:28 +0200] "GET /backend/.git/config HTTP/1.1" 404 4618 "-" "cru ... show more 34.107.112.63 - - [29/Aug/2026:18:08:28 +0200] "GET /backend/.git/config HTTP/1.1" 404 4618 "-" "crusader-worker/1.0" 34.107.112.63 - - [29/Aug/2026:18:08:28 +0200] "GET /html/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.107.112.63 - - [29/Aug/2026:18:08:28 +0200] "GET /src/.git/config HTTP/1.1" 404 4618 "-" "crusader-worker/1.0" show less	Brute-Force
🇨🇦 polycoda	2026-08-29 09:17:16 (3 days ago)	AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)	Hacking Web App Attack
Anonymous	2026-08-29 08:43:50 (3 days ago)	Sensitive file access attempt	Hacking
Anonymous	2026-08-29 08:31:09 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.107.112.63 (DE/Germany/63.112.107.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.107.112.63 (DE/Germany/63.112.107.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-08-29 07:21:56 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.107.112.63 (63.112.107.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.107.112.63 (63.112.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 03:21:48.853143 2026] [security2:error] [pid 2721:tid 2721] [client 34.107.112.63:57104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "denemeblog.osmanbozkurt.com"] [uri "/www/.git/config"] [unique_id "apKIjEEisMQrxg2bW576EgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-29 05:13:53 (3 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇳🇱 e.fierstra	2026-08-29 05:02:26 (3 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 203.214.89.195

🇷🇴 193.46.255.86

🇱🇹 91.224.92.19

🇪🇸 90.175.168.82

🇫🇷 77.239.124.182

🇱🇹 77.90.185.20

🇰🇷 14.47.200.242

🇸🇪 193.180.125.157

🇧🇷 187.18.8.14

🇺🇸 172.190.89.127

🇺🇸 93.177.94.218

🇷🇴 92.118.39.71

🇫🇷 89.92.24.90

🇪🇸 83.56.240.88

🇺🇸 68.225.61.209

🇺🇸 9.234.11.60

🇮🇩 202.152.148.27

🇺🇸 162.216.149.121

🇰🇷 123.212.9.122

🇰🇷 111.171.125.94