JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.96.149.25

34.96.149.25 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 52%: ?

52%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	25.149.96.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.96.149.25

Whois 34.96.149.25

IP Abuse Reports for 34.96.149.25:

This IP address has been reported a total of 11 times from 8 distinct sources. 34.96.149.25 was first reported on September 20th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-23 11:30:51 (4 hours ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.149.25 - - [23/Sep/2026:13:30:50 +0200] "GET /roundcube//.git/config HTTP/1.1" 403 7438 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-23 11:30:47 (4 hours ago)	[WedSep2313:30:41.0997272026][security2:error][pid2137414:tid2137519][client34.96.149.25:0]ModSecuri ... show more [WedSep2313:30:41.0997272026][security2:error][pid2137414:tid2137519][client34.96.149.25:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.hdcadvisory.ch\"][uri\"/.env.bak\"][unique_id\"arO4YZkTwgzjwxLa2x_fCgAAAMQ\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 SwinT	2026-09-22 13:00:13 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 rh24	2026-09-22 10:04:04 (1 day ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.96.149.25 (HK/Hong Kong/25.149.96.34.b ... show more (secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.96.149.25 (HK/Hong Kong/25.149.96.34.bc.googleusercontent.com) show less	Hacking
🇮🇹 VHosting	2026-09-22 02:20:04 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-09-22 00:52:06 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇳🇱 Alt255	2026-09-21 18:29:07 (1 day ago)	[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ... show more [mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.149.25 - - [21/Sep/2026:20:29:06 +0200] "GET /.git/config HTTP/1.1" 301 546 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-21 16:52:45 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-09-21 08:00:11 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.149.25 (25.149.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.149.25 (25.149.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 04:00:05.438611 2026] [security2:error] [pid 22265:tid 22265] [client 34.96.149.25:52346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anywheregarden.printorganic.com"] [uri "/.git/config"] [unique_id "arDkBQ7_QwCZ8OZa5uKyiAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-21 07:18:18 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.149.25 (25.149.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.149.25 (25.149.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 03:18:10.863490 2026] [security2:error] [pid 29122:tid 29137] [client 34.96.149.25:41260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anythingonanyone.richardleeweatherman.com"] [uri "/.git/config"] [unique_id "arDaMnHoRj_WWahQ9ExmnAAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 20:47:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.96.149.25 (25.149.96.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.96.149.25 (25.149.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 16:47:32.066740 2026] [security2:error] [pid 25687:tid 25687] [client 34.96.149.25:53708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.americanexportimport.internetnameregistration.com"] [uri "/.git/config"] [unique_id "arBGZHRtGcgc9R400UUCnwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.83

🇺🇸 216.25.89.80

🇦🇷 186.22.62.194

🇸🇬 136.85.73.176

🇰🇪 102.219.210.14

🇳🇱 89.42.231.200

🇺🇸 65.49.1.175

🇱🇹 62.60.130.242

🇸🇬 58.185.30.5

🇬🇧 45.142.244.190

🇺🇸 44.192.79.55

🇨🇦 34.47.10.68

🇰🇷 14.63.221.120

🇺🇸 216.25.89.74

🇮🇳 202.88.222.110

🇲🇦 196.92.7.249

🇬🇧 193.176.29.3

🇺🇸 172.212.224.53

🇦🇷 153.67.183.254

🇨🇳 111.26.177.216