JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.81.149.222

Recent Activity

Abuse Confidence Score

100% Critical

39 reports

32 reporters · latest 3 minutes ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 222.149.81.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇹🇼 Taiwan
City: Taipei, Taiwan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

39 from 32 distinct reporters

First reported

November 15th 2026

Most recent report

3 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 10 🇩🇪 Germany 8 🇳🇱 Netherlands 5

Most common categories Web App Attack 33 Bad Web Bot 16 Brute-Force 10 Hacking 9 Port Scan 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 csnavarro2020	2026-11-15 17:54:16 UTC · (3 minutes ago)	Automated scan for known vulnerable/nonexistent path: /.git/config	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-11-15 17:53:47 UTC · (3 minutes ago)	(mod_security) mod_security (id:949110) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:53:41.179527 2026] [security2:error] [pid 15552:tid ... show more (mod_security) mod_security (id:949110) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:53:41.179527 2026] [security2:error] [pid 15552:tid 15552] [client 34.81.149.222:38926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "niubeachbookings.com"] [uri "/.git/config"] [unique_id "avnxpQkMTn5vr_wnTETbkwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-11-15 17:48:53 UTC · (8 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14	Exploited Host Web App Attack
🇩🇪 netclix.gr	2026-11-15 17:46:44 UTC · (10 minutes ago)	(security_scan) Sensitive File Scan Blocked 34.81.149.222 (TW/Taiwan/222.149.81.34.bc.googleusercontent.com)	Hacking
🇺🇦 URAN Publishing Service	2026-11-15 17:39:14 UTC · (18 minutes ago)	[15/Nov/2026:19:39:14 +0200] -- 34.81.149.222 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 17:22:29 UTC · (35 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:22:24.198474 2026] [security2:error] [pid 23337:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:22:24.198474 2026] [security2:error] [pid 23337:tid 23337] [client 34.81.149.222:51586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nilestree.com"] [uri "/.git/config"] [unique_id "avnqUNv37fLjAltfSgT6BAAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 17:01:01 UTC · (56 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:00:53.173881 2026] [security2:error] [pid 21661:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:00:53.173881 2026] [security2:error] [pid 21661:tid 21661] [client 34.81.149.222:60774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nifeconsult.com"] [uri "/.git/config"] [unique_id "avnlRcdREqD7TkFTZnaFfQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-11-15 17:00:08 UTC · (57 minutes ago)		Web App Attack
🇳🇱 Mangelot Hosting	2026-11-15 16:59:20 UTC · (58 minutes ago)	(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 34.81.149.222 (TW/Taiwan/222.149.81.34.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
Anonymous	2026-11-15 16:59:02 UTC · (58 minutes ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇫🇮 sibahota	2026-11-15 16:54:03 UTC · (1 hour ago)	34.81.149.222 - - [15/Nov/2026:16:53:59 +0000] nidandiagnostic.com "GET /.git/config HTTP/1.1" 403 37 0.000 "-" "-" - - - "http://nidandiagnostic.com" ...	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-11-15 16:39:02 UTC · (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:38:54.937624 2026] [security2:error] [pid 23030:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:38:54.937624 2026] [security2:error] [pid 23030:tid 23184] [client 34.81.149.222:43422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nicholsinvest.com"] [uri "/.git/config"] [unique_id "avngHo_1GOhJDn9pxSGtWQAAAZY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 16:07:19 UTC · (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:07:11.932323 2026] [security2:error] [pid 17639:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:07:11.932323 2026] [security2:error] [pid 17639:tid 17639] [client 34.81.149.222:51586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ngmweb.com"] [uri "/.git/config"] [unique_id "avnYr0dVRqLpakg9W4cEGwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 shurizma	2026-11-15 16:05:25 UTC · (1 hour ago)	[15/Nov/2026:16:05:25 +0000] - 200 200 - GET https nginx.shuri.gg "/.git/config" [Client 34.81.149.222] [Length 750] [Gzip -] [Sent-to 127.0.0.1] "-" "-" ...	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-15 15:48:38 UTC · (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:48:31.038755 2026] [security2:error] [pid 31266:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.81.149.222 (222.149.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:48:31.038755 2026] [security2:error] [pid 31266:tid 31266] [client 34.81.149.222:53824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nflelectronics.com.tlambert.us"] [uri "/.git/config"] [unique_id "avnUTyupiP0fv3vF73hrTQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.99

🇿🇦 197.242.146.149

🇫🇷 91.231.89.185

🇺🇸 52.14.168.169

🇳🇱 45.148.10.151

🇺🇸 45.132.227.47

🇦🇪 217.165.173.192

🇺🇸 216.25.90.71

🇺🇸 216.25.90.61

🇺🇸 216.25.90.59

🇲🇾 202.188.47.66

🇨🇴 186.1.176.40

🇸🇬 104.28.222.47

🇨🇳 81.71.99.67

🇺🇸 68.183.113.16

🇺🇸 52.165.89.155

🇧🇷 34.39.212.229

🇺🇸 212.87.216.19

🇺🇸 208.102.76.86

🇺🇸 206.81.7.146