JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.80.249.81

34.80.249.81 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	81.249.80.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.80.249.81

Whois 34.80.249.81

IP Abuse Reports for 34.80.249.81:

This IP address has been reported a total of 50 times from 40 distinct sources. 34.80.249.81 was first reported on September 16th 2026, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 TheDjRider	2026-09-17 07:04:32 (15 minutes ago)	CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ... show more CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-09-17T07:04:28.270838406Z. Context: http_status=404 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 06:19:32 (1 hour ago)	(mod_security) mod_security (id:210580) triggered by 34.80.249.81 (81.249.80.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210580) triggered by 34.80.249.81 (81.249.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:19:27.496107 2026] [security2:error] [pid 28729:tid 28729] [client 34.80.249.81:53882] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|trasimeno.ws\|F\|2"] [data "Matched Data: proc/self/environ found within ARGS:filename: file:/proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "trasimeno.ws"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "aquGbxKkub93Z6LcZJXNFgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-09-17 06:00:05 (1 hour ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 gamabe	2026-09-17 05:10:12 (2 hours ago)	Detected crowdsecurity/http-path-traversal-probing attack pattern. Reported by CrowdSec IDS.	Port Scan
Anonymous	2026-09-17 05:09:48 (2 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Cloud secrets probing, Directory traversal show less	Bad Web Bot Web App Attack
🇷🇺 Reaper	2026-09-17 05:05:23 (2 hours ago)	Repeated 404 errors from 34.80.249.81	Web App Attack
🇬🇧 Nick Lewis	2026-09-17 04:53:06 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.80.249.81 (TW/Taiwan/81.249.80.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.80.249.81 (TW/Taiwan/81.249.80.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-17 04:52:26 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.80.249.81 (81.249.80.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.80.249.81 (81.249.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:52:20.932114 2026] [security2:error] [pid 21440:tid 21440] [client 34.80.249.81:51264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smokehouseeatery.ca"] [uri "/appearance/../../.env"] [unique_id "aqtyBM0Y3Lm4z0_pJJIlgQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 03:37:42 (3 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.80.249.81 (81.249.80.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.80.249.81 (81.249.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:37:37.332033 2026] [security2:error] [pid 5101:tid 5101] [client 34.80.249.81:49246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|quakeprediction.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "quakeprediction.com"] [uri "/z9x8c7v6b5-debug-trigger-quakeprediction.com"] [unique_id "aqtgge7Q67LyAG26Rq4z9AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-09-17 03:30:06 (3 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.80.249.81 (TW/Taiwan/81.249.80.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.80.249.81 (TW/Taiwan/81.249.80.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇬🇧 oja	2026-09-17 02:38:38 (4 hours ago)	Aggressive web scanner	Web App Attack
🇩🇪 yvoictra	2026-09-17 02:36:51 (4 hours ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-probing	Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-17 02:21:07 (4 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇨🇦 Mediashaker	2026-09-17 02:07:25 (5 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.80.249.81 (TW/Tai ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.80.249.81 (TW/Taiwan/81.249.80.34.bc.googleusercontent.com) show less	Bad Web Bot
Anonymous	2026-09-17 01:50:40 (5 hours ago)	Blocked by ModSec and CSF	Port Scan

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 162.55.183.140

🇸🇦 151.255.70.248

🇺🇸 134.199.220.59

🇮🇳 117.241.189.164

🇰🇪 102.216.85.9

🇸🇦 94.97.26.163

🇨🇦 54.39.203.130

🇨🇳 39.170.98.131

🇺🇸 35.223.74.166

🇧🇪 34.156.249.47

🇧🇷 2804:4ac8:319a:1d00:530:f843:3b0b:5630

🇰🇷 211.243.146.78

🇵🇦 200.46.151.238

🇭🇰 199.45.155.20

🇻🇪 186.167.85.139

🇺🇸 185.191.171.6

🇲🇽 153.67.119.247

🇺🇸 136.70.68.8

🇺🇸 136.67.137.208

🇳🇱 89.21.67.155