JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.229.225

34.154.229.225 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 80%: ?

80%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	225.229.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.229.225

Whois 34.154.229.225

IP Abuse Reports for 34.154.229.225:

This IP address has been reported a total of 16 times from 14 distinct sources. 34.154.229.225 was first reported on September 16th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 05:37:04 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.229.225 (225.229.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.229.225 (225.229.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 01:36:59.243440 2026] [security2:error] [pid 13477:tid 13477] [client 34.154.229.225:55488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.haywardcarpentry.com"] [uri "/.git/config"] [unique_id "aqzN-3614o-QuWDjIOZ9gAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 19:30:17 (16 hours ago)	CrowdSec blocked IP for crowdsecurity/http-sensitive-files on vps_agent	Web App Attack
🇷🇴 clauss	2026-09-17 17:58:07 (17 hours ago)	34.154.229.225 - - [17/Sep/2026:20:58:06 +0300] "GET /.git/config HTTP/1.1" 200 314 "-" "Mozilla/5.0 ... show more 34.154.229.225 - - [17/Sep/2026:20:58:06 +0300] "GET /.git/config HTTP/1.1" 200 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.229.225 - - [17/Sep/2026:20:58:07 +0300] "GET /.env.local HTTP/1.1" 200 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 4server	2026-09-17 17:31:36 (18 hours ago)	[ThuSep1719:31:32.5212012026][security2:error][pid2487914:tid2488013][client34.154.229.225:0]ModSecu ... show more [ThuSep1719:31:32.5212012026][security2:error][pid2487914:tid2488013][client34.154.229.225:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"autoconfig.kiteinvest.ch\"][uri\"/\"][unique_id\"aqwj9EZ8osH-VOoE50L_4QAAAM4\"] show less	Port Scan Brute-Force Web App Attack
🇵🇱 strefapi_com	2026-09-17 14:12:51 (21 hours ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇩🇪 seal	2026-09-17 14:02:25 (21 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	SSH Brute-Force
🇩🇪 big-cloud.nl	2026-09-17 10:30:57 (1 day ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 10:26:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.154.229.225 (225.229.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.229.225 (225.229.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:26:29.032021 2026] [security2:error] [pid 28015:tid 28015] [client 34.154.229.225:38882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apothecarydc.swampoodlegrounds.com"] [uri "/.git/config"] [unique_id "aqvAVefOnMqOrpsP8mDU9wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-09-17 10:11:24 (1 day ago)	[Thu Sep 17 04:11:17.575610 2026] [authz_core:error] [pid 105360:tid 140602054272576] [client 34.154 ... show more [Thu Sep 17 04:11:17.575610 2026] [authz_core:error] [pid 105360:tid 140602054272576] [client 34.154.229.225:42962] AH01630: client denied by server configuration: /var/www/horde/.env.bak [Thu Sep 17 04:11:23.682349 2026] [authz_core:error] [pid 105360:tid 140601743873600] [client 34.154.229.225:42962] AH01630: client denied by server configuration: /var/www/horde/.env.dist [Thu Sep 17 04:11:23.839634 2026] [authz_core:error] [pid 105360:tid 140601752266304] [client 34.154.229.225:42962] AH01630: client denied by server configuration: /var/www/horde/.env.swp ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 02:54:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.154.229.225 (225.229.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.229.225 (225.229.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:54:09.940630 2026] [security2:error] [pid 28872:tid 28872] [client 34.154.229.225:35440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "english.art.mavikalem.org"] [uri "/.git/config"] [unique_id "aqtWUVgK04jnjCCovxdHBAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 02:43:16 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-17 00:45:03 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-09-17 00:03:54 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: apm.astropot.online \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-16 22:35:17 (1 day ago)	[17/Sep/2026:01:35:17 +0300] -- 34.154.229.225 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.gi ... show more [17/Sep/2026:01:35:17 +0300] -- 34.154.229.225 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 mrcrassi	2026-09-16 13:24:32 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from IT. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from IT. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.190.143.229

🇮🇳 182.70.243.207

🇫🇷 91.196.152.88

🇫🇷 85.204.70.100

🇨🇳 60.172.23.9

🇨🇦 51.222.168.30

🇺🇸 47.251.140.192

🇬🇧 35.203.210.179

🇺🇸 192.81.131.73

🇺🇸 184.186.73.86

🇳🇱 45.58.168.195

🇺🇸 34.48.10.66

🇨🇳 27.46.75.5

🇨🇳 8.137.169.162

🇺🇸 2a10:4a00:517d:4b6b:3d9a:3143:e07a:8955

🇰🇷 203.252.10.4

🇨🇳 183.92.115.248

🇫🇮 147.185.133.18

🇨🇳 120.238.23.168

🇵🇭 111.125.105.35