JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.63.228.125

Activity Trending Down

Abuse Confidence Score

54% Elevated

13 reports

11 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 125.228.63.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

13 from 11 distinct reporters

First reported

November 2nd 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4 🇩🇪 Germany 2 🇳🇱 Netherlands 2

Most common categories Web App Attack 12 Brute-Force 7 Bad Web Bot 5 Hacking 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-11-04 14:37:32 UTC · (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.	Brute-Force
🇺🇸 TPI-Abuse	2026-11-03 23:24:26 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.63.228.125 (125.228.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:24:21.833700 2026] [security2:error] [pid 24633:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.63.228.125 (125.228.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:24:21.833700 2026] [security2:error] [pid 24633:tid 24633] [client 34.63.228.125:40166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidwoodard.com"] [uri "/.git/config"] [unique_id "auptJd381a48nZCb_codUAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 22:15:08 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.63.228.125 (125.228.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:15:04.321660 2026] [security2:error] [pid 3981453:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.63.228.125 (125.228.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:15:04.321660 2026] [security2:error] [pid 3981453:tid 3981474] [client 34.63.228.125:46402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidtung.com"] [uri "/.git/config"] [unique_id "aupc6EP-TXe0N3hLGfrZYgAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-11-03 20:50:08 UTC · (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-11-03 20:20:59 UTC · (1 week ago)	34.63.228.125 - - [03/Nov/2026:21:20:54 +0100] "POST / HTTP/1.1" 200 4353 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [03/Nov/2026:21:20:54 +0100] "GET /.env HTTP/1.1" ... show more 34.63.228.125 - - [03/Nov/2026:21:20:54 +0100] "POST / HTTP/1.1" 200 4353 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [03/Nov/2026:21:20:54 +0100] "GET /.env HTTP/1.1" 404 28984 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [03/Nov/2026:21:20:54 +0100] "GET /.env.local HTTP/1.1" 404 28984 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [03/Nov/2026:21:20:54 +0100] "GET /.env.production HTTP/1.1" 404 28984 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [03/Nov/2026:21:20:55 +0100] "GET /.env.staging HTTP/1.1" 404 28984 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [03/Nov/2026:21:20:55 +0100] "G show less	Web App Attack Hacking
🇫🇷 masterguru	2026-11-03 20:20:02 UTC · (1 week ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
Anonymous	2026-11-03 18:23:05 UTC · (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 00:34:11 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.63.228.125 (125.228.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:34:05.020858 2026] [security2:error] [pid 27738:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.63.228.125 (125.228.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:34:05.020858 2026] [security2:error] [pid 27738:tid 27738] [client 34.63.228.125:44610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theradarshop.com"] [uri "/.git/config"] [unique_id "aukr_R8lr_7cX0t7pbYmWgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 EmilGH	2026-11-02 23:19:39 UTC · (1 week ago)	34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] "GET /.git/config HTTP/1.1" 403 600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] "GET /.env H ... show more 34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] "GET /.git/config HTTP/1.1" 403 600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] "GET /.env HTTP/1.1" 403 600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] "GET /.env.local HTTP/1.1" 403 600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] "GET /.env.production HTTP/1.1" 403 600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] "GET /.env.staging HTTP/1.1" 403 600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.63.228.125 - - [02/Nov/2026:23:19:38 +0000] " ... show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-11-02 20:40:04 UTC · (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇮🇪 tarlabs	2026-11-02 17:05:45 UTC · (1 week ago)	IP banned by Fail2Ban (traefik-404 jail)	Web App Attack
🇳🇱 middelkoopcc	2026-11-02 16:59:01 UTC · (1 week ago)	2026-11-02 17:56:48 GET /.git/config [301] && 2026-11-02 17:56:49 GET /.env [301] && 2026-11-02 17:56:51 GET /.env.bak [301] && 140 more within 20 minutes	Web App Attack
🇳🇱 Site.eu	2026-11-02 13:24:07 UTC · (1 week ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.78.46.81

🇸🇳 154.125.228.145

🇹🇭 110.77.170.34

🇳🇱 35.214.149.126

🇷🇴 2.57.121.112

🇰🇷 210.103.32.183

🇹🇹 161.0.155.64

🇨🇳 115.55.242.7

🇺🇸 107.22.96.169

🇺🇸 98.173.235.214

🇧🇬 79.124.59.78

🇳🇱 35.214.191.144

🇺🇸 20.42.81.166

🇨🇳 175.153.221.109

🇮🇳 117.247.23.131

🇮🇪 109.78.120.207

🇨🇭 107.189.1.154

🇳🇱 34.178.109.235

🇳🇱 195.178.110.148

🇺🇸 95.155.139.169