JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.81.105.166

34.81.105.166 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	166.105.81.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.81.105.166

Whois 34.81.105.166

IP Abuse Reports for 34.81.105.166:

This IP address has been reported a total of 62 times from 30 distinct sources. 34.81.105.166 was first reported on June 14th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Starburst SysOp Team	2026-09-04 00:28:36 (7 minutes ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-mnz6-1)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 23:43:47 (51 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:43:43.338932 2026] [security2:error] [pid 6930:tid 6930] [client 34.81.105.166:47896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raularrue.com"] [uri "/.git/config"] [unique_id "apoGL5MV631-gAKZeB6XTAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 23:06:31 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:06:26.893216 2026] [security2:error] [pid 23645:tid 23645] [client 34.81.105.166:44426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "holesandcorners.com"] [uri "/.git/config"] [unique_id "apn9cvrQS1mg0MJyrKpUZwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 22:48:32 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:48:28.897300 2026] [security2:error] [pid 32198:tid 32198] [client 34.81.105.166:48888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildcomaui.com"] [uri "/.git/config"] [unique_id "apn5PDpsfPOfL8MSwdsf5gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 22:08:05 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:07:59.848916 2026] [security2:error] [pid 23921:tid 23921] [client 34.81.105.166:15984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siragusafamily.com"] [uri "/.git/config"] [unique_id "apnvv6LJj31ktPhOx3ZfEgAAAHI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 21:37:59 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:37:52.989716 2026] [security2:error] [pid 11127:tid 11127] [client 34.81.105.166:9616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proventransmission.com"] [uri "/.git/config"] [unique_id "apnosIBQfCg84FR_zH_rYgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 21:05:57 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:05:53.988769 2026] [security2:error] [pid 23085:tid 23085] [client 34.81.105.166:44388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hazelwerner.com"] [uri "/.git/config"] [unique_id "apnhMaqc6ELESvIRa9uixwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-03 21:05:04 (3 hours ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
Anonymous	2026-09-03 20:25:03 (4 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
Anonymous	2026-09-03 20:16:52 (4 hours ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇨🇭 4server	2026-09-03 20:15:21 (4 hours ago)	[ThuSep0322:15:15.1586412026][security2:error][pid1575284:tid1575468][client34.81.105.166:0]ModSecur ... show more [ThuSep0322:15:15.1586412026][security2:error][pid1575284:tid1575468][client34.81.105.166:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"shakary.com\"][uri\"/.git/config\"][unique_id\"apnVU_50fU-4T8CxJ7uAdgAAAME\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 20:10:16 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:10:11.884420 2026] [security2:error] [pid 31261:tid 31261] [client 34.81.105.166:16980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scoutmountaindistrict.org"] [uri "/.git/config"] [unique_id "apnUI-8SiJiVl-eMWDW7VQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-03 19:36:51 (4 hours ago)	[server.tmg.gr] httpd-config-scan: sites=www.ird2021.gr; logs=/var/log/httpd/domains/ird2021.gr.log; ... show more [server.tmg.gr] httpd-config-scan: sites=www.ird2021.gr; logs=/var/log/httpd/domains/ird2021.gr.log; samples=/.git/config show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 18:46:02 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.105.166 (166.105.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 14:45:56.795007 2026] [security2:error] [pid 7708:tid 7708] [client 34.81.105.166:17224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tourissue.com"] [uri "/.git/config"] [unique_id "apnAZHEKaPS11tet1vsHBQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 kie	2026-09-03 18:28:06 (6 hours ago)	03-09-2026:18:27:47UTC [Nginx Web Server] Suspicious web request: path:/.git (2 request(s)).	Bad Web Bot Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 175.6.146.164

🇫🇷 169.58.216.8

🇨🇭 146.70.134.142

🇯🇵 101.33.55.172

🇱🇻 62.60.130.242

🇳🇱 45.148.10.152

🇮🇪 2400:cb00:52:1000:f86:c524:1710:5902

🇺🇸 207.90.244.19

🇨🇳 203.189.196.168

🇵🇰 144.48.135.80

🇳🇮 138.97.162.30

🇭🇰 103.234.62.2

🇺🇸 76.34.24.17

🇺🇸 66.132.172.16

🇷🇺 46.36.23.17

🇺🇸 35.237.153.139

🇬🇧 35.203.210.157

🇱🇰 220.247.224.226

🇩🇪 212.30.36.214

🇹🇼 198.235.24.64