JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.12.180.92

34.12.180.92 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	92.180.12.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.12.180.92

Whois 34.12.180.92

IP Abuse Reports for 34.12.180.92:

This IP address has been reported a total of 34 times from 30 distinct sources. 34.12.180.92 was first reported on October 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-21 11:36:16 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:36:09.302895 2026] [security2:error] [pid 12111:tid 12111] [client 34.12.180.92:51630] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|macroprintbooks.com.banis-associates.com\|F\|2"] [data ".com.banis-associates.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "macroprintbooks.com.banis-associates.com"] [uri "/z9x8c7v6b5-debug-trigger-macroprintbooks.com.banis-associates.com"] [unique_id "atijqcH3hp1-fDu_SC4H_wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-21 11:27:25 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Alt255	2026-10-21 11:21:19 (1 day ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.12.180.92 - - [21/Oct/2026:13:21:09 +0200] "GET /userfiles?path=../../.env HTTP/2.0" 403 4218 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" ... show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-10-21 08:38:35 (1 day ago)	4.531 requests with url.path .env 264 requests with url.path .ssh/*	Brute-Force Bad Web Bot
🇺🇸 abuse-opdc	2026-10-21 07:41:27 (1 day ago)	Malicious HTTP requests matching injection/exploit signatures.	Web App Attack Brute-Force
🇩🇪 Lino Project	2026-10-21 06:22:06 (1 day ago)	34.12.180.92 - - [21/Oct/2026:08:22:02 +0200] "GET /_nuxt/../.env HTTP/2.0" 503 18143 "-" "Mozilla/5 ... show more 34.12.180.92 - - [21/Oct/2026:08:22:02 +0200] "GET /_nuxt/../.env HTTP/2.0" 503 18143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" ... show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 CentiDevOps	2026-10-21 05:55:31 (1 day ago)	Web app scan: 48 requests in 0 s across 2 domains (301/444/503). Paths: /.env, /.env.backup, /.env.b ... show more Web app scan: 48 requests in 0 s across 2 domains (301/444/503). Paths: /.env, /.env.backup, /.env.bak (+9 more). Sample: 2026-10-21T05:55:31Z "GET /.env.local" 301 show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-10-21 05:35:52 (1 day ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-10-21 05:20:13 (1 day ago)	Probing for exposed secret / credential files	Hacking Web App Attack
🇬🇧 Aetherweb Ark	2026-10-21 05:08:23 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:949110) triggered by 34.12.180.92 (92.180.12.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇫🇮 as211431.net	2026-10-21 04:53:41 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (POST method) Endpoint: /lib/file-control.php UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-10-21 02:49:09 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.12.180.92 (92.180.12.34.bc.googleuse ... show more (mod_security) mod_security triggered on hostname [redacted] 34.12.180.92 (92.180.12.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-10-21 02:47:39 (1 day ago)	Attempted access to sensitive endpoint (/.env?import&raw) detected. Automated scan or unauthorized p ... show more Attempted access to sensitive endpoint (/.env?import&raw) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇮🇳 TFG-Server	2026-10-21 02:15:15 (1 day ago)	Automated block: File theft attempt - tried to download secret/backup file x200 (e.g. /.ssh/config)	Web App Attack Hacking
🇺🇸 Charlesiv	2026-10-21 02:12:54 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (POST method) Endpoint: /app Timestamp: 2026-10-21T02:06:16Z Ray ID: a4dcb3b71fe86e50 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot show less	Bad Web Bot

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.76.168.116

🇨🇳 175.178.243.155

🇺🇸 136.116.152.242

🇻🇳 118.70.125.152

🇨🇳 112.66.187.253

🇮🇹 187.14.102.75

🇺🇸 96.86.212.108

🇵🇱 93.174.26.108

🇳🇱 45.148.10.201

🇳🇱 45.148.10.152

🇵🇱 185.93.92.118

🇺🇸 162.216.149.194

🇺🇸 154.30.70.252

🇺🇸 134.209.77.247

🇰🇷 112.161.75.207

🇨🇳 112.27.129.78

🇳🇱 94.154.43.185

🇺🇸 85.254.138.135

🇺🇸 84.37.149.194

🇸🇬 43.134.71.187