JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.12.180.92

34.12.180.92 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	92.180.12.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.12.180.92

Whois 34.12.180.92

IP Abuse Reports for 34.12.180.92:

This IP address has been reported a total of 34 times from 30 distinct sources. 34.12.180.92 was first reported on October 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-21 11:36:16 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:36:09.302895 2026] [security2:error] [pid 12111:tid 12111] [client 34.12.180.92:51630] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|macroprintbooks.com.banis-associates.com\|F\|2"] [data ".com.banis-associates.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "macroprintbooks.com.banis-associates.com"] [uri "/z9x8c7v6b5-debug-trigger-macroprintbooks.com.banis-associates.com"] [unique_id "atijqcH3hp1-fDu_SC4H_wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-21 11:27:25 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Alt255	2026-10-21 11:21:19 (1 day ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.12.180.92 - - [21/Oct/2026:13:21:09 +0200] "GET /userfiles?path=../../.env HTTP/2.0" 403 4218 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" ... show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-10-21 08:38:35 (1 day ago)	4.531 requests with url.path .env 264 requests with url.path .ssh/*	Brute-Force Bad Web Bot
🇺🇸 abuse-opdc	2026-10-21 07:41:27 (1 day ago)	Malicious HTTP requests matching injection/exploit signatures.	Web App Attack Brute-Force
🇩🇪 Lino Project	2026-10-21 06:22:06 (1 day ago)	34.12.180.92 - - [21/Oct/2026:08:22:02 +0200] "GET /_nuxt/../.env HTTP/2.0" 503 18143 "-" "Mozilla/5 ... show more 34.12.180.92 - - [21/Oct/2026:08:22:02 +0200] "GET /_nuxt/../.env HTTP/2.0" 503 18143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" ... show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 CentiDevOps	2026-10-21 05:55:31 (1 day ago)	Web app scan: 48 requests in 0 s across 2 domains (301/444/503). Paths: /.env, /.env.backup, /.env.b ... show more Web app scan: 48 requests in 0 s across 2 domains (301/444/503). Paths: /.env, /.env.backup, /.env.bak (+9 more). Sample: 2026-10-21T05:55:31Z "GET /.env.local" 301 show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-10-21 05:35:52 (1 day ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-10-21 05:20:13 (1 day ago)	Probing for exposed secret / credential files	Hacking Web App Attack
🇬🇧 Aetherweb Ark	2026-10-21 05:08:23 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:949110) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇫🇮 as211431.net	2026-10-21 04:53:41 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (POST method) Endpoint: /lib/file-control.php UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-10-21 02:49:09 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.12.180.92 (92.180.12.34.bc.googleuse ... show more (mod_security) mod_security triggered on hostname [redacted] 34.12.180.92 (92.180.12.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-10-21 02:47:39 (1 day ago)	Attempted access to sensitive endpoint (/.env?import&raw) detected. Automated scan or unauthorized p ... show more Attempted access to sensitive endpoint (/.env?import&raw) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇮🇳 TFG-Server	2026-10-21 02:15:15 (1 day ago)	Automated block: File theft attempt - tried to download secret/backup file x200 (e.g. /.ssh/config)	Web App Attack Hacking
🇺🇸 Charlesiv	2026-10-21 02:12:54 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (POST method) Endpoint: /app Timestamp: 2026-10-21T02:06:16Z Ray ID: a4dcb3b71fe86e50 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot show less	Bad Web Bot

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 47.245.142.94

🇳🇱 45.148.10.157

🇺🇸 209.87.169.42

🇺🇸 172.178.16.179

🇳🇱 138.226.239.234

🇧🇪 35.205.169.234

🇮🇹 34.154.217.161

🇧🇪 34.140.179.23

🇺🇸 2a10:3c0:5:0:1:34:0:5

🇰🇷 222.110.147.56

🇨🇭 209.99.190.186

🇷🇺 194.226.49.237

🇳🇱 185.136.15.111

🇻🇳 103.53.158.121

🇲🇩 80.96.113.82

🇺🇿 62.164.148.87

🇩🇪 57.129.120.143

🇫🇷 51.75.247.232

🇮🇳 223.185.47.252

🇺🇸 205.210.31.88