JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.81.120.24

34.81.120.24 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	24.120.81.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.81.120.24

Whois 34.81.120.24

IP Abuse Reports for 34.81.120.24:

This IP address has been reported a total of 44 times from 35 distinct sources. 34.81.120.24 was first reported on September 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-18 06:00:02 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇳🇱 Site.eu	2026-09-18 05:16:44 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 sternwart	2026-09-18 02:08:43 (2 days ago)	Automatisch erkannt: Zugriff auf /.git/config (swiss-jobrollen-check.ch)	Web App Attack Bad Web Bot
🇨🇭 4server	2026-09-18 02:02:44 (2 days ago)	[FriSep1804:02:38.0611782026][security2:error][pid1072569:tid1072914][client34.81.120.24:0]ModSecuri ... show more [FriSep1804:02:38.0611782026][security2:error][pid1072569:tid1072914][client34.81.120.24:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"swiss-domain-name.aidconsultancy.ch\"][uri\"/\"][unique_id\"aqybvoAZKXyqYPRh3z0wNQAAAMA\"] show less	Hacking Web App Attack
🇩🇪 grassau.com	2026-09-18 01:29:09 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.81.120.24 (TW/Taiwan/Taipei City/Tai ... show more (mod_security) mod_security triggered on hostname [redacted] 34.81.120.24 (TW/Taiwan/Taipei City/Taipei/24.120.81.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 kkwemi	2026-09-17 19:44:50 (2 days ago)	Blocked by block-exploit-paths on /.env	Bad Web Bot
🇫🇷 mrcrassi	2026-09-17 15:47:03 (2 days ago)	Triggered Cloudflare WAF (firewallManaged) from TW. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from TW. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Alt255	2026-09-17 15:01:59 (2 days ago)	[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.81.120.24 - - [17/Sep/2026:17:01:51 +0200] "GET /.git/config HTTP/1.1" 301 631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-17 13:10:06 (3 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇵🇱 Budyn	2026-09-17 12:33:31 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.online \| URI: /.git/config \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 alianet	2026-09-17 10:53:38 (3 days ago)	[Thu Sep 17 10:53:32.216097 2026] [proxy_fcgi:error] [pid 1187064:tid 1187119] [client 34.81.120.24: ... show more [Thu Sep 17 10:53:32.216097 2026] [proxy_fcgi:error] [pid 1187064:tid 1187119] [client 34.81.120.24:55904] AH01071: Got error 'Primary script unknown' [Thu Sep 17 10:53:32.493196 2026] [proxy_fcgi:error] [pid 1187064:tid 1187117] [client 34.81.120.24:55904] AH01071: Got error 'Primary script unknown' [Thu Sep 17 10:53:32.770460 2026] [proxy_fcgi:error] [pid 1187064:tid 1187132] [client 34.81.120.24:55904] AH01071: Got error 'Primary script unknown' [Thu Sep 17 10:53:33.046530 2026] [proxy_fcgi:error] [pid 1187064:tid 1187133] [client 34.81.120.24:55904] AH01071: Got error 'Primary script unknown' [Thu Sep 17 10:53:33.325258 2026] [proxy_fcgi:error] [pid 1187064:tid 1187136] [client 34.81.120.24:55904] AH01071: Got error 'Primary script unknown' [Thu Sep 17 10:53:33.636801 2026] [proxy_fcgi:error] [pid 1187064:tid 1187140] [client 34.81.120.24:55904] AH01071: Got error 'Primary script unknown' [Thu Sep 17 10:53:33.980506 2026] [proxy_fcgi:error] [pid 1187064:tid 1187137] [client 34.81.1 ... show less	Port Scan Web App Attack
🇳🇱 debestelapp	2026-09-17 09:15:14 (3 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 08:50:47 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.81.120.24 (24.120.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.81.120.24 (24.120.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:50:40.211561 2026] [security2:error] [pid 23383:tid 23383] [client 34.81.120.24:48960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sweet16invitationsonline.com"] [uri "/.git/config"] [unique_id "aqup4GVxtEs9s8kLRMGU3gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 infra-monitor	2026-09-17 04:00:04 (3 days ago)	Automated ban via infra-monitor: suspicious-probe	Port Scan
🇳🇱 Site.eu	2026-09-17 03:28:33 (3 days ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.18.214.64

🇳🇱 185.246.188.74

🇷🇸 176.104.108.10

🇺🇸 150.107.36.82

🇺🇸 147.90.234.14

🇺🇸 134.209.117.55

🇨🇳 112.111.56.243

🇵🇱 78.30.101.96

🇳🇱 45.138.12.52

🇭🇰 43.154.127.188

🇿🇦 41.23.35.181

🇮🇷 5.22.101.12

🇮🇷 185.112.150.144

🇨🇳 171.36.142.231

🇭🇰 119.28.22.86

🇧🇩 103.153.130.39

🇳🇱 77.239.124.204

🇫🇷 51.77.158.34

🇺🇸 35.231.32.21

🇺🇸 34.23.230.88