JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.92.125.130

34.92.125.130 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	130.125.92.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.92.125.130

Whois 34.92.125.130

IP Abuse Reports for 34.92.125.130:

This IP address has been reported a total of 39 times from 26 distinct sources. 34.92.125.130 was first reported on June 8th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-10 21:59:42 (9 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-09 14:10:57 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.92.125.130 (130.125.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 34.92.125.130 (130.125.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:10:53.195365 2026] [security2:error] [pid 26122:tid 26122] [client 34.92.125.130:38074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.podcasts.freedrm.org"] [uri "/.git/config"] [unique_id "aige7QEisa5ZBlRpkIaI0QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 13:31:26 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.92.125.130 (130.125.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.125.130 (130.125.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:31:21.784955 2026] [security2:error] [pid 3719:tid 3719] [client 34.92.125.130:43832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.davidmei.com"] [uri "/.git/config"] [unique_id "aigVqUSsZj3OfzIUokG7yAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-09 12:38:49 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.92.125.130 (HK/Hong Kong/130.125.9 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.92.125.130 (HK/Hong Kong/130.125.92.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-06-09 09:03:04 (1 day ago)	Try to connect to Port_Scan_443_stealth	Port Scan
🇭🇺 kranem	2026-06-09 09:00:15 (1 day ago)	Triggered Cloudflare WAF from HK. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF from HK. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-06-09T08:17:45Z User-Agent: Twitterbot/1.0 show less	Bad Web Bot
🇨🇭 4server	2026-06-09 08:16:19 (1 day ago)	[TueJun0910:16:15.6585662026][security2:error][pid141101:tid141451][client34.92.125.130:0]ModSecurit ... show more [TueJun0910:16:15.6585662026][security2:error][pid141101:tid141451][client34.92.125.130:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hosting-domini.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"aifLz1L874UV9zawFBxVtAAAAMA\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 07:52:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.92.125.130 (130.125.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.125.130 (130.125.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:52:00.293493 2026] [security2:error] [pid 26402:tid 26431] [client 34.92.125.130:44088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aafim.aafm.us"] [uri "/.git/config"] [unique_id "aifGIDi3aP7p-RsO4bAe0QAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-09 07:19:02 (1 day ago)	[TueJun0909:18:58.6467412026][security2:error][pid2536703:tid2536790][client34.92.125.130:0]ModSecur ... show more [TueJun0909:18:58.6467412026][security2:error][pid2536703:tid2536790][client34.92.125.130:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.serversvizzera.ch.artisteer-italia.org\"][uri\"/.git/config\"][unique_id\"aie-YtvmDcge_QlE4Erf1QAAAFQ\"] show less	Port Scan Brute-Force Web App Attack
🇧🇪 voormedia	2026-06-09 07:10:03 (1 day ago)	Accessed trap at '/.git/config'	Web App Attack
🇳🇿 Antinson	2026-06-09 06:46:08 (2 days ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-09 06:37:51 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.92.125.130 (130.125.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.125.130 (130.125.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:37:47.359839 2026] [security2:error] [pid 8887:tid 8933] [client 34.92.125.130:34774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catch-22productions.com"] [uri "/.git/config"] [unique_id "aie0u1zyAbPo2ycyqQsUXQAAAZA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-06-09 04:37:27 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.92.125.130 (HK/Hong Kong/130.125 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.92.125.130 (HK/Hong Kong/130.125.92.34.bc.googleusercontent.com): 2 in the last 3600 secs show less	Web App Attack
🇩🇪 ghostwarriors	2026-06-09 04:20:16 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-06-09 03:56:17 (2 days ago)	2026/06/09 05:56:17 [error] 77667#107153: 2455750 access forbidden by rule, client: 34.92.125.130, ... show more 2026/06/09 05:56:17 [error] 77667#107153: 2455750 access forbidden by rule, client: 34.92.125.130, server: karolyimusic.com, request: "GET /.git/config HTTP/1.1", host: "karolyimusic.com" ... show less	Web Spam

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.105.98.252

🇧🇪 198.235.24.216

🇮🇶 185.158.22.39

🇮🇳 182.95.232.186

🇧🇴 181.188.187.140

🇺🇸 172.253.0.29

🇺🇸 147.185.132.123

🇮🇳 143.110.177.177

🇹🇷 91.151.95.154

🇩🇪 64.89.163.78

🇫🇷 51.255.131.231

🇹🇭 1.4.196.229

🇩🇪 193.36.85.91

🇨🇱 186.10.86.130

🇨🇦 146.190.247.156

🇸🇬 140.245.58.29

🇺🇸 136.118.184.141

🇰🇷 125.138.175.113

🇭🇰 123.58.213.117

🇻🇳 116.110.211.28