JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.81.219.3

34.81.219.3 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 86%: ?

86%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	3.219.81.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.81.219.3

Whois 34.81.219.3

IP Abuse Reports for 34.81.219.3:

This IP address has been reported a total of 24 times from 15 distinct sources. 34.81.219.3 was first reported on September 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-23 03:36:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 23:36:43.876319 2026] [security2:error] [pid 31378:tid 31378] [client 34.81.219.3:55634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.digifonics.com"] [uri "/.env"] [unique_id "arNJS4TWUH82aMfvJPEqngAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-09-23 02:25:59 (1 day ago)	34.81.219.3 - - [23/Sep/2026:05:25:59 +0300] "GET /@fs/src/.env?raw?? HTTP/2.0" 403 29 "-" "Mozilla/ ... show more 34.81.219.3 - - [23/Sep/2026:05:25:59 +0300] "GET /@fs/src/.env?raw?? HTTP/2.0" 403 29 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.81.219.3 - - [23/Sep/2026:05:25:59 +0300] "GET /@fs/src/.env?raw?? HTTP/2.0" 403 29 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" ... show less	Web App Attack
🇺🇸 Takesh	2026-09-23 01:37:41 (1 day ago)	Numbase auto-report: abuseipdb_known_bad_score_80	Bad Web Bot
🇩🇪 raph	2026-09-23 01:06:13 (1 day ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇫🇮 robotstxt	2026-09-23 00:35:01 (1 day ago)	34.81.219.3 - - [23/Sep/2026:00:34:20 +0000] "GET /admin/.env HTTP/2.0" 403 33017 "-" rt="8.806" "Mo ... show more 34.81.219.3 - - [23/Sep/2026:00:34:20 +0000] "GET /admin/.env HTTP/2.0" 403 33017 "-" rt="8.806" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "-" edge="34.81.219.3" h="directorio.componentescalzado.com" sn="directorio.componentescalzado.com" ru="/admin/.env" u="/index.php" ucs="-" ua="unix:/var/run/php/ccalzadodir82.sock" us="404" uct="0.000" urt="8.806" 34.81.219.3 - - [23/Sep/2026:00:34:20 +0000] "GET /backend/.env HTTP/2.0" 403 33024 "-" rt="8.857" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" "-" edge="34.81.219.3" h="directorio.componentescalzado.com" sn="directorio.componentescalzado.com" ru="/backend/.env" u="/index.php" ucs="-" ua="unix:/var/run/php/ccalzadodir82.sock" us="404" uct="0.000" urt="8.857" 34.81.219.3 - - [23/Sep/2026:00:34:21 +0000] "GET /.env.prod HTTP/2.0" 403 0 "-" rt="9.852" "Mozilla/5.0 (compatible; DeepSeekB ... show less	Web App Attack
Anonymous	2026-09-22 15:19:39 (1 day ago)	Aggressive web scan	Web App Attack
🇫🇮 paissangroup	2026-09-22 14:34:07 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-22 13:28:45 (2 days ago)	34.81.219.3 - - [22/Sep/2026:21:28:43 +0800] "GET /build/manifest.json HTTP/1.1" 404 39532 "https:// ... show more 34.81.219.3 - - [22/Sep/2026:21:28:43 +0800] "GET /build/manifest.json HTTP/1.1" 404 39532 "https://www.nonsensemakers.com/build/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.81.219.3 - - [22/Sep/2026:21:28:43 +0800] "POST /api/v1/validate/code HTTP/1.1" 404 47588 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.81.219.3 - - [22/Sep/2026:21:28:43 +0800] "GET /dist/.vite/manifest.json HTTP/1.1" 404 47528 "https://www.nonsensemakers.com/dist/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.81.219.3 - - [22/Sep/2026:21:28:43 +0800] "GET /dist/manifest.json HTTP/1.1" 404 39532 "https://www.nonsensemakers.com/dist/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153. ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 13:14:40 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210730) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:14:36.069157 2026] [security2:error] [pid 18422:tid 18422] [client 34.81.219.3:36162] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gulftelecom.com\|F\|2"] [data ".gulftelecom.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gulftelecom.com"] [uri "/z9x8c7v6b5-debug-trigger-www.gulftelecom.com"] [unique_id "arJ_PNaZ5mdjBM-EkcSyaQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-09-22 09:58:41 (2 days ago)	WebAttack or semilar from 34.81.219.3	Web App Attack
🇫🇷 masterguru	2026-09-22 09:54:12 (2 days ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-22 09:44:37 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210730) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:44:33.806535 2026] [security2:error] [pid 23669:tid 23669] [client 34.81.219.3:38130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digdesign.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digdesign.com"] [uri "/z9x8c7v6b5-debug-trigger-digdesign.com"] [unique_id "arJOAXF3xpRW34MUO2kMdQAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-22 09:21:54 (2 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-22 09:18:58 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 09:18:25 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210730) triggered by 34.81.219.3 (3.219.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:18:19.036956 2026] [security2:error] [pid 7712:tid 7712] [client 34.81.219.3:57672] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digitalcontraptionlabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digitalcontraptionlabs.com"] [uri "/z9x8c7v6b5-debug-trigger-digitalcontraptionlabs.com"] [unique_id "arJH29CudmVKcHDSbdGcdwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.198.224.177

🇺🇸 172.234.218.34

🇵🇭 154.18.197.35

🇮🇳 103.176.138.44

🇺🇸 74.82.47.26

🇺🇸 70.164.32.244

🇩🇪 65.111.27.159

🇩🇪 65.111.26.108

🇺🇸 51.8.102.107

🇩🇪 45.3.44.166

🇺🇸 35.236.234.99

🇷🇴 2.57.122.53

🇹🇼 221.120.73.25

🇩🇪 209.50.180.160

🇧🇷 187.58.66.231

🇳🇱 185.242.226.85

🇮🇳 124.123.68.73

🇮🇳 121.200.50.229

🇧🇩 103.175.21.105

🇿🇦 102.64.46.22