JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.81.18.236

34.81.18.236 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 83%: ?

83%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	236.18.81.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.81.18.236

Whois 34.81.18.236

IP Abuse Reports for 34.81.18.236:

This IP address has been reported a total of 22 times from 15 distinct sources. 34.81.18.236 was first reported on September 15th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-17 03:30:04 (14 hours ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.81.18.236 - - [17/Sep/2026:05:29:46 +0200] "GET /.git/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-17 03:12:28 (14 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-17 02:11:08 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:11:01.096570 2026] [security2:error] [pid 25419:tid 25419] [client 34.81.18.236:33722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tidarat.com"] [uri "/.git/config"] [unique_id "aqtMNV3pFPhTcMT08utsnAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 12:55:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:55:00.940026 2026] [security2:error] [pid 19315:tid 19355] [client 34.81.18.236:37358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "super-8mm.net"] [uri "/.git/config"] [unique_id "aqqRpOWeGsfxJItZAzOHhwAAAcU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-09-16 11:51:27 (1 day ago)	Suspicious URL access.	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 11:32:53 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:32:50.532319 2026] [security2:error] [pid 16720:tid 16720] [client 34.81.18.236:55754] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swaincustomdesigns.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swaincustomdesigns.com"] [uri "/phpinfo.php.bak"] [unique_id "aqp-YtjFOAJv4CUWTszzFAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-16 11:17:19 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇭🇺 miszterx.hu	2026-09-16 08:45:43 (1 day ago)	XORP (haproxy): 12x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ... show more XORP (haproxy): 12x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 08:14:14 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.81.18.236 (236.18.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:14:06.211416 2026] [security2:error] [pid 8458:tid 8458] [client 34.81.18.236:40970] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swag.rustyog.net\|F\|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swag.rustyog.net"] [uri "/.env.bak"] [unique_id "aqpPztHaoCb3RHFEzL-CCwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-09-16 06:20:18 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇳🇱 Site.eu	2026-09-16 01:55:01 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 zynex	2026-09-16 01:45:44 (1 day ago)	URL Probing: /server/.env	Web App Attack
🇳🇱 Site.eu	2026-09-16 01:07:02 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇦🇺 AWW-Admin	2026-09-16 00:34:55 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.81.18.236 (TW/Taiwan/236.18.81.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.81.18.236 (TW/Taiwan/236.18.81.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-09-15 23:16:18 (1 day ago)	34.81.18.236 - - [16/Sep/2026:01:16:14 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux ... show more 34.81.18.236 - - [16/Sep/2026:01:16:14 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.81.18.236 - - [16/Sep/2026:01:16:14 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.81.18.236 - - [16/Sep/2026:01:16:14 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.81.18.236 - - [16/Sep/2026:01:16:15 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.81.18.236 - - [16/Sep/2026:01:16:15 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.81.18.236 - - [16/Sep/2026:01:16:15 +0200] "GET /.env.local HTTP/1.1" 403 183 "-" "M ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.161.235.168

🇨🇳 111.26.62.42

🇲🇦 105.155.194.99

🇺🇸 35.196.101.196

🇸🇬 212.73.148.40

🇳🇱 195.178.110.26

🇳🇱 193.47.62.69

🇨🇳 218.64.81.45

🇨🇦 205.188.65.63

🇧🇷 200.192.97.209

🇳🇬 197.253.54.22

🇺🇸 172.238.188.122

🇻🇳 123.31.97.239

🇺🇸 83.142.52.23

🇳🇱 195.178.110.232

🇨🇴 181.63.178.47

🇧🇬 78.128.113.46

🇳🇱 45.148.10.141

🇺🇸 34.182.156.165

🇩🇪 213.209.159.11