JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.81.82.191

34.81.82.191 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	191.82.81.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.81.82.191

Whois 34.81.82.191

IP Abuse Reports for 34.81.82.191:

This IP address has been reported a total of 43 times from 31 distinct sources. 34.81.82.191 was first reported on June 4th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-11 02:41:16 (6 days ago)	Bot / scanning and/or hacking attempts: GET /id_dsa HTTP/2.0, GET /id_ecdsa HTTP/2.0, GET /.profile ... show more Bot / scanning and/or hacking attempts: GET /id_dsa HTTP/2.0, GET /id_ecdsa HTTP/2.0, GET /.profile HTTP/2.0, GET /config/env/aws_credentials.env HTTP/2.0, GET /serverless.yaml HTTP/2.0, GET /.bash_profile HTTP/2.0, GET /id_rsa HTTP/2.0, GET /values.yaml HTTP/2.0, GET /js../.env HTTP/2.0, GET /infra/.env HTTP/2.0, GET /images../.env HTTP/2.0, GET //.env HTTP/2.0, GET /public../.env HTTP/2.0, GET /img../.env HTTP/2.0, GET /agent/.env HTTP/2.0, GET /deploy/.env HTTP/2.0, GET /dist../.env HTTP/2.0, GET /services/.env HTTP/2.0, GET /%2eenv HTTP/2.0, GET /api/data/..%2f..%2f.env HTTP/2.0, GET /.dockerenv HTTP/2.0, GET /%2e%2e/.env HTTP/2.0, GET /build../.env HTTP/2.0, GET /css../.env HTTP/2.0, GET /static//app/.env HTTP/2.0, GET /project/.env HTTP/2.0, GET /api/.env/public/.env HTTP/2.0, GET /static//home/user/.env HTTP/2.0, GET /chatbot/.env HTTP/2.0, GET /..%2f.env HTTP/2.0, GET /workspace/.env HTTP/2.0, GET /bot/.env HTTP/2.0, GET /scripts/.env HTTP/2.0, GET /static//.env HTTP/2.0, GET /agents/.env HTTP/2.0 show less	Hacking Web App Attack
🇬🇧 andypiper	2026-10-11 01:02:38 (6 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 rh24	2026-10-11 00:42:49 (6 days ago)	(badbots) Bad bot user-agent [redacted] from 34.81.82.191 (TW/Taiwan/191.82.81.34.bc.googleuserconte ... show more (badbots) Bad bot user-agent [redacted] from 34.81.82.191 (TW/Taiwan/191.82.81.34.bc.googleusercontent.com) show less	Hacking
🇺🇸 TPI-Abuse	2026-10-11 00:31:44 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 34.81.82.191 (191.82.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.81.82.191 (191.82.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:31:37.622252 2026] [security2:error] [pid 15187:tid 15187] [client 34.81.82.191:52870] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nextngnr.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nextngnr.com"] [uri "/z9x8c7v6b5-debug-trigger-nextngnr.com"] [unique_id "asrY6RSQanoP4LyFqNXWXQAAAD0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 00:11:43 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 34.81.82.191 (191.82.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.81.82.191 (191.82.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:11:37.178036 2026] [security2:error] [pid 4278:tid 4278] [client 34.81.82.191:51678] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jadonbooth.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jadonbooth.com"] [uri "/z9x8c7v6b5-debug-trigger-jadonbooth.com"] [unique_id "asrUOXySYFdXmjped3nKvAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-10-11 00:03:23 (6 days ago)	[11/Oct/2026:01:03:23.383983 +0100] asrSS_EeZqf3_6uyOqN0-gAAAJg 34.81.82.191 58714 188.246.206.60 70 ... show more [11/Oct/2026:01:03:23.383983 +0100] asrSS_EeZqf3_6uyOqN0-gAAAJg 34.81.82.191 58714 188.246.206.60 7081 [11/Oct/2026:01:03:23.704147 +0100] asrSSxXF-E7yLHfz7yeyPwAAAAs 34.81.82.191 58768 188.246.206.60 7081 ... show less	Brute-Force
🇩🇪 big-cloud.nl	2026-10-10 23:41:36 (6 days ago)	Try to access /@fs/app/.env?raw??	Web App Attack
🇺🇸 iwle	2026-10-10 23:35:48 (6 days ago)	[Sat Oct 10 19:35:46.571903 2026] [:error] [pid 1477:tid 1612] [client 34.81.82.191:0] [client 34.81 ... show more [Sat Oct 10 19:35:46.571903 2026] [:error] [pid 1477:tid 1612] [client 34.81.82.191:0] [client 34.81.82.191] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "iwle.com"] [uri "/.env"] [unique_id "asrL0q_4JHRa2-OVlcwNYQAAAEw"] [Sat Oct 10 19:35:46.650858 2026] [:error] [pid 2176:tid 2216] [client 34.81.82.191:0] [client 34.81.82.191] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg ... show less	Web App Attack
🇩🇪 IVski.com	2026-10-10 23:29:41 (6 days ago)	IVski WAF \| Sensitive file probe - looking for exposed .env	Hacking Brute-Force Web App Attack
🇷🇴 iulianh	2026-10-10 23:20:01 (6 days ago)	80,443	Brute-Force SSH
🇩🇪 FD-IX	2026-10-10 23:08:03 (6 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-10-10 23:05:36 (6 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.81.82.191 (TW/Taiwan/191.82.81.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.81.82.191 (TW/Taiwan/191.82.81.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 convos	2026-10-10 22:50:09 (6 days ago)	HONEYPOT TRIGGERED [HP-MV2ZM18E-861SWJ]: GET /core/.env on hq.it-solutionsusa.com \| UA: Mozilla/5.0 ... show more HONEYPOT TRIGGERED [HP-MV2ZM18E-861SWJ]: GET /core/.env on hq.it-solutionsusa.com \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; \| TS: 2026-10-10T22:50:09.470Z show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-10-10 22:37:17 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 34.81.82.191 (191.82.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.81.82.191 (191.82.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:37:13.303499 2026] [security2:error] [pid 23492:tid 23517] [client 34.81.82.191:37540] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|isoceansl.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isoceansl.com"] [uri "/z9x8c7v6b5-debug-trigger-isoceansl.com"] [unique_id "asq-GbnhJYhYI7xpEBsLWgAAAZY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 radardatelecom	2026-10-10 22:27:03 (6 days ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.139.251.57

🇮🇳 182.237.13.208

🇺🇸 172.69.134.16

🇰🇷 118.43.197.193

🇩🇪 104.248.130.34

🇫🇷 91.231.89.55

🇹🇼 35.189.191.246

🇦🇺 27.32.141.190

🇮🇳 171.61.30.214

🇫🇷 85.204.70.114

🇸🇬 47.128.115.31

🇳🇱 45.148.10.151

🇺🇸 45.33.78.70

🇸🇮 31.57.216.7

🇺🇸 216.180.246.117

🇸🇪 194.236.210.209

🇦🇷 191.103.49.13

🇩🇪 188.40.244.107

🇺🇸 172.234.199.8

🇺🇸 170.130.187.46