JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.96.142.125

34.96.142.125 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 97%: ?

97%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	125.142.96.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.96.142.125

Whois 34.96.142.125

IP Abuse Reports for 34.96.142.125:

This IP address has been reported a total of 28 times from 19 distinct sources. 34.96.142.125 was first reported on August 26th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-29 10:28:48 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 06:28:44.594122 2026] [security2:error] [pid 3920:tid 3920] [client 34.96.142.125:57790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vansfanz.rollinchassis.com"] [uri "/public/.git/config"] [unique_id "apK0XIkqO7zRMStPqWBAxwAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-29 07:59:05 (3 days ago)	Excessive 404 errors - web scanning/probing	Bad Web Bot
Anonymous	2026-08-29 02:10:02 (3 days ago)	Bot / scanning and/or hacking attempts: GET /public/.git/config HTTP/1.1, GET /var/www/.git/config H ... show more Bot / scanning and/or hacking attempts: GET /public/.git/config HTTP/1.1, GET /var/www/.git/config HTTP/1.1, GET /html/.git/config HTTP/1.1, GET /app/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /www/.git/config HTTP/1.1, GET /site/.git/config HTTP/1.1, GET /backend/.git/config HTTP/1.1, GET /api/.git/config HTTP/1.1, GET /src/.git/config HTTP/1.1, GET /htdocs/.git/config HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 dynamix	2026-08-28 23:50:58 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 22:56:51 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:56:45.107882 2026] [security2:error] [pid 17941:tid 17941] [client 34.96.142.125:40414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lifestylemedica.com"] [uri "/htdocs/.git/config"] [unique_id "apISLcZKiorsyoqhUAmcPAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-28 20:20:02 (3 days ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 17:49:14 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:49:07.790609 2026] [security2:error] [pid 27639:tid 27639] [client 34.96.142.125:38524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rademeyer.com"] [uri "/app/.git/config"] [unique_id "apHKE1l6JAhBCvTsAxeNOwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 17:29:51 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:29:48.148387 2026] [security2:error] [pid 5919:tid 5919] [client 34.96.142.125:34648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gapanda.com"] [uri "/htdocs/.git/config"] [unique_id "apHFjL8ABdxFMlCw5ikm_AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-08-28 15:05:33 (4 days ago)	AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)	Hacking Web App Attack
🇿🇦 conure.sh	2026-08-28 12:14:23 (4 days ago)	csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 1s	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 10:53:04 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.96.142.125 (125.142.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:52:58.978413 2026] [security2:error] [pid 30041:tid 30041] [client 34.96.142.125:35594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pulsepowermeter.rotarymagnetics.com"] [uri "/backend/.git/config"] [unique_id "apFoiszPi8F9hFENDN0e9QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Threat.live	2026-08-27 21:10:02 (4 days ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 Charlesiv	2026-08-27 18:01:09 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-08-27T17:33:44Z Ray ID: a31cd2af6deb643b UA: crusader-worker/1.0 show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-08-27 16:57:09 (5 days ago)	(mod_security) mod_security (id:949110) triggered by 34.96.142.125 (HK/Hong Kong/125.142.96.34.bc.go ... show more (mod_security) mod_security (id:949110) triggered by 34.96.142.125 (HK/Hong Kong/125.142.96.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇺🇸 nyt	2026-08-27 15:38:14 (5 days ago)	Sensitive File Probe, Sensitive File Probe, Backend Probe	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.143.137.194

🇭🇰 156.225.20.122

🇲🇶 92.144.216.17

🇺🇦 92.52.184.245

🇧🇷 35.198.15.96

🇺🇸 34.96.36.44

🇹🇭 34.15.168.177

🇨🇿 2a02:f000:102f:d601:9147:71ea:a5f3:5c93

🇬🇧 217.146.80.111

🇧🇪 198.235.24.141

🇲🇽 187.251.123.104

🇩🇪 138.246.253.24

🇳🇱 89.248.172.11

🇫🇷 86.244.16.171

🇸🇬 85.203.21.43

🇩🇪 69.5.169.16

🇸🇬 47.128.48.193

🇺🇸 43.130.36.167

🇮🇩 36.83.22.255

🇺🇸 20.150.211.185