This IP address has been reported a total of
29
times from
15 distinct
sources.
34.81.56.28 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 14
reports;
Australia
with 4
reports;
Canada
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
22
times;
Brute-Force
17
times;
Bad Web Bot
15
times;
Hacking
5
times;
Port Scan
5
times;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show moreHTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Rate-limit abuse — 96 requests in a short window (brute-force / scraping). Targeted paths: /config.j ...
show moreRate-limit abuse — 96 requests in a short window (brute-force / scraping). Targeted paths: /config.json.js, /.ssh/id_ed25519, /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw??, /.ssh/id_ecdsa, /_ignition/health-check.
show less
(mod_security) mod_security (id:210492) triggered by 34.81.56.28 (28.56.81.34.bc.googleusercontent.c ...
show more(mod_security) mod_security (id:210492) triggered by 34.81.56.28 (28.56.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 18:38:40.224723 2026] [security2:error] [pid 5351:tid 5351] [client 34.81.56.28:60220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nyemdr.com"] [uri "/.env.local"] [unique_id "arGx8C9Ae-X8DKrCuJ8PjQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
| [Dangerous/Taiwan] Aggressive IP 34.81.56.28 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more| [Dangerous/Taiwan] Aggressive IP 34.81.56.28 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
