JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.81.196.238

34.81.196.238 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	238.196.81.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.81.196.238

Whois 34.81.196.238

IP Abuse Reports for 34.81.196.238:

This IP address has been reported a total of 32 times from 24 distinct sources. 34.81.196.238 was first reported on August 31st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pscriptos	2026-09-03 18:08:23 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇪🇸 masterguru	2026-09-03 15:53:05 (3 hours ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇸🇪 vaia.cloud	2026-09-03 13:30:02 (6 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-03 04:51:26 (14 hours ago)	Multiple WAF Violations	Web App Attack
🇨🇦 john doe	2026-09-03 01:04:29 (18 hours ago)	SentinelBot: Secret-path hunting (5 distinct paths): Env File Hunting (score: 68)	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-09-02 22:00:46 (21 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01. show less	Web App Attack SSH Hacking
🇫🇷 masterguru	2026-09-02 15:27:34 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.81.196.238 (TW/Taiwan/238.196.81.3 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.81.196.238 (TW/Taiwan/238.196.81.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-09-02 07:54:02 (1 day ago)	Bot / scanning and/or hacking attempts: GET /wordpress/.git/config HTTP/1.1, GET /www/.git/config HT ... show more Bot / scanning and/or hacking attempts: GET /wordpress/.git/config HTTP/1.1, GET /www/.git/config HTTP/1.1, GET /html/.git/config HTTP/1.1, GET /backend/.git/config HTTP/1.1, GET /src/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /site/.git/config HTTP/1.1, GET /htdocs/.git/config HTTP/1.1, GET /app/.git/config HTTP/1.1, GET /var/www/.git/config HTTP/1.1 show less	Hacking Web App Attack
🇳🇴 jad-abuse	2026-09-02 05:53:11 (1 day ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 24 hits. show less	Web App Attack
🇩🇪 stinpriza	2026-09-02 05:29:51 (1 day ago)	common Web Exploits being scanned	Web App Attack
🇩🇪 LRob	2026-09-02 05:21:33 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /src/.git/config (+11 more) \| 2026-09-02 05:21 UTC show less	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-02 05:19:49 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 Aetherweb Ark	2026-09-02 05:18:03 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.81.196.238 (TW/Taiwan/238.196.81.34.bc.googl ... show more (mod_security) mod_security (id:949110) triggered by 34.81.196.238 (TW/Taiwan/238.196.81.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:15:46 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.81.196.238 (238.196.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.196.238 (238.196.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:15:39.986288 2026] [security2:error] [pid 18772:tid 18789] [client 34.81.196.238:35738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwcwelding.com.eliteproductions.tv"] [uri "/app/.git/config"] [unique_id "apei65Q9EJ8_DwdF1qJ5rgAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 02:54:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.81.196.238 (238.196.81.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.81.196.238 (238.196.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:54:07.350171 2026] [security2:error] [pid 11452:tid 11452] [client 34.81.196.238:59732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drdot.xyz"] [uri "/backend/.git/config"] [unique_id "apePz1q0m-TIG94Z6eZxnQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 188.127.48.13

🇸🇮 102.220.161.27

🇲🇽 189.197.192.102

🇩🇪 167.94.146.32

🇺🇸 158.173.25.140

🇨🇳 122.96.48.243

🇰🇷 119.202.139.244

🇬🇧 5.11.9.121

🇺🇸 161.13.63.186

🇨🇳 125.64.77.71

🇮🇩 103.93.160.210

🇦🇺 40.82.214.8

🇺🇸 34.148.85.10

🇨🇳 222.90.212.244

🇦🇷 181.45.117.133

🇭🇰 168.76.131.178

🇹🇼 125.228.252.27

🇺🇸 35.237.131.114

🇬🇧 35.203.210.119

🇺🇸 35.175.230.135