JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.81.65.199

Recent Activity

Abuse Confidence Score

100% Critical

39 reports

34 reporters · latest 3 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 199.65.81.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇹🇼 Taiwan
City: Taipei, Taiwan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

39 from 34 distinct reporters

First reported

November 2nd 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇺🇸 United States of America 8 🇦🇺 Australia 5

Most common categories Web App Attack 29 Bad Web Bot 12 Hacking 9 Brute-Force 7 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Klaverstyn	2026-11-08 23:09:46 UTC · (3 days ago)	Persistent attacker, repeat offender	Hacking
🇦🇺 Klaverstyn	2026-11-06 08:54:31 UTC · (6 days ago)	Persistent attacker, repeat offender	Hacking
🇬🇧 openstrike.co.uk	2026-11-03 06:17:37 UTC · (1 week ago)	210 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, env grabbing URLs (type 2), VC URLs: GET /wp-config.php.old HTTP/1.1 GET /Dockerrun.aws.json HTTP/1.1 GET /.env.supabase HTTP ... show more 210 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, env grabbing URLs (type 2), VC URLs: GET /wp-config.php.old HTTP/1.1 GET /Dockerrun.aws.json HTTP/1.1 GET /.env.supabase HTTP/1.1 GET /config/settings.local.yml HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1 GET /.git/HEAD HTTP/1.1 show less	Web App Attack Hacking
🇦🇺 Klaverstyn	2026-11-02 23:47:15 UTC · (1 week ago)	Persistent attacker, repeat offender	Hacking
🇧🇷 radardatelecom	2026-11-02 16:53:03 UTC · (1 week ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇩🇪 mbch	2026-11-02 15:49:13 UTC · (1 week ago)	Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-11-02T15:49:13.219000+00:00 to 2026-11-02T15:49:15.796000+00:00: 10 distinct paths in 2.577s, denied HTTP 403/404. Trusted client-IP processing; ... show more Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-11-02T15:49:13.219000+00:00 to 2026-11-02T15:49:15.796000+00:00: 10 distinct paths in 2.577s, denied HTTP 403/404. Trusted client-IP processing; forwarding headers accepted only from official configured Cloudflare networks. No successful compromise established. Examples: /.vite/manifest.json, /build/manifest.json, /dist/.vite/manifest.json, /dist/manifest.json, /.env, /static/.env, /static/app/.env, /api/.env/public/.env, /graphql, /admin/.env. show less	Web App Attack
🇺🇸 1gz	2026-11-02 15:39:26 UTC · (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from TW. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php.swp UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) This ... show more Triggered Cloudflare WAF (firewallManaged) from TW. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php.swp UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Manuel Braeuer	2026-11-02 15:39:24 UTC · (1 week ago)	34.81.65.199 - - [02/Nov/2026:16:39:20 +0100] "GET /public../.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.81.65.199 - - [02/Nov/2026:16:39:21 +0100] "GET /dist../.env HTTP/2.0" 40 ... show more 34.81.65.199 - - [02/Nov/2026:16:39:20 +0100] "GET /public../.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.81.65.199 - - [02/Nov/2026:16:39:21 +0100] "GET /dist../.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.81.65.199 - - [02/Nov/2026:16:39:22 +0100] "GET /.dockerenv HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.81.65.199 - - [02/Nov/2026:16:39:23 +0100] "GET /.htpasswd HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.81.65.199 - - [02/Nov/2026:16:39:24 +0100] "GET /.amplifyrc HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" ... show less	Web App Attack
🇩🇪 SCHAPPY	2026-11-02 15:37:17 UTC · (1 week ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
🇪🇸 bohl-aiG5aef	2026-11-02 13:55:22 UTC · (1 week ago)	Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound	Hacking
Anonymous	2026-11-02 13:01:14 UTC · (1 week ago)	34.81.65.199 - - [02/Nov/2026:21:01:14 +0800] "GET /src/.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" ...	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-11-02 12:54:35 UTC · (1 week ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-11-02 12:31:14 UTC · (1 week ago)	{"level":"info","ts":1793622671.8437858,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.81.65.199","remote_port":"41314","client_ip":"34.81.65.199","proto":"HTTP/2.0","method":"GET","host":"status.hledger.org","uri" ... show more {"level":"info","ts":1793622671.8437858,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.81.65.199","remote_port":"41314","client_ip":"34.81.65.199","proto":"HTTP/2.0","method":"GET","host":"status.hledger.org","uri":"/webpack-stats.json","headers":{"Priority":["u=0, i"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Language":["en-US,en;q=0.9"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Dest":["document"],"X-Nextjs-Data":["1"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Site":["none"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537 ... show less	DDoS Attack Web App Attack
🇺🇸 jormaster3k	2026-11-02 12:26:59 UTC · (1 week ago)	Attack against Apache (too many 404s)	Web App Attack
🇩🇪 BlueWire Hosting	2026-11-02 12:26:36 UTC · (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.106

🇵🇱 45.138.12.32

🇺🇸 18.206.48.43

🇹🇭 203.170.192.251

🇵🇰 182.190.197.210

🇳🇱 176.65.148.51

🇺🇸 162.35.186.121

🇫🇮 147.185.133.82

🇨🇳 118.145.144.95

🇲🇦 102.100.115.193

🇬🇧 77.68.16.165

🇧🇷 45.179.71.9

🇲🇱 41.73.98.5

🇺🇸 40.119.45.234

🇺🇸 20.55.38.37

🇨🇴 190.7.114.227

🇲🇽 187.202.255.65

🇯🇵 153.122.22.96

🇮🇳 106.192.135.33

🇺🇸 100.29.192.68