JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.12.189.80

Recent Activity

Abuse confidence score ?

100% Critical

41 reports

37 reporters · latest 1 day ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	80.189.12.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.12.189.80

Export CSV

This IP address has been reported a total of 41 times from 37 distinct sources. 34.12.189.80 was first reported on October 8th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; France with 5 reports; Netherlands with 5 reports. The most common categories in these recent reports were: Web App Attack 29 times; Brute-Force 16 times; Bad Web Bot 9 times; Hacking 6 times; SSH 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-10-09 22:22:05 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-10-09 06:25:00 (2 days ago)	34.12.189.80 - - [09/Oct/2026:08:24:59 +0200] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5 ... show more 34.12.189.80 - - [09/Oct/2026:08:24:59 +0200] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.12.189.80 - - [09/Oct/2026:08:24:59 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.12.189.80 - - [09/Oct/2026:08:24:59 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.12.189.80 - - [09/Oct/2026:08:24:59 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.12.189.80 - - [09/Oct/2026:08:24:59 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/sp ... show less	Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-10-09 05:15:14 (2 days ago)	147 attacks on password/key grabbing URLs, env grabbing URLs (type 2), env grabbing URLs, shell prob ... show more 147 attacks on password/key grabbing URLs, env grabbing URLs (type 2), env grabbing URLs, shell probes, VC URLs, config grabbing URLs (type 2), directory traversals, PHP URLs: GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/1.1 GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1 GET /.env.js HTTP/1.1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /app-config.json HTTP/1.1 GET /..%2f.env HTTP/1.1 POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 macrob	2026-10-09 03:31:57 (2 days ago)	2026/10/09 03:31:56 [error] 1310593#1310593: 32191346 access forbidden by rule, client: 34.12.189.8 ... show more 2026/10/09 03:31:56 [error] 1310593#1310593: 32191346 access forbidden by rule, client: 34.12.189.80, server: cdn.binixocrm.com, request: "GET /dist../.env HTTP/2.0", host: "cdn.binixocrm.com" 2026/10/09 03:31:56 [error] 1310593#1310593: 32191346 access forbidden by rule, client: 34.12.189.80, server: cdn.binixocrm.com, request: "GET /.env.js HTTP/2.0", host: "cdn.binixocrm.com" 2026/10/09 03:31:56 [error] 1310593#1310593: 32191346 access forbidden by rule, client: 34.12.189.80, server: cdn.binixocrm.com, request: "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0", host: "cdn.binixocrm.com" ... show less	Web App Attack
🇩🇪 Philister11	2026-10-09 01:18:06 (2 days ago)	CrowdSec: crowdsecurity/http-bad-user-agent (NL/AS396982)	Bad Web Bot Web App Attack
🇫🇷 dwmp	2026-10-08 22:41:48 (2 days ago)	Url probing: /qapjk4iwk9915thgfeyg	Web App Attack
🇧🇷 radardatelecom	2026-10-08 22:27:22 (2 days ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
Anonymous	2026-10-08 21:34:31 (2 days ago)	Aggressive web scan	Web App Attack
Anonymous	2026-10-08 20:40:04 (2 days ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Web App Attack Hacking SQL Injection
🇨🇳 Bro Charlie	2026-10-08 20:20:13 (2 days ago)	34.12.189.80 - - [09/Oct/2026:04:20:09 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows N ... show more 34.12.189.80 - - [09/Oct/2026:04:20:09 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" 34.12.189.80 - - [09/Oct/2026:04:20:10 +0800] "GET /4t959rcur7ylr6gagmny HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-" 34.12.189.80 - - [09/Oct/2026:04:20:10 +0800] "GET /8lznl8tn9rktub2guifd HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" 34.12.189.80 - - [09/Oct/2026:04:20:10 +0800] "POST / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-" 34.12.189.80 - - [09/Oct/2026:04:20:10 +0800] "GET /z9x8c7v6b5-debug-trigger-xliedu.cn HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-" 34.12.189.80 - - [09/Oct/2026:04:20:10 +0800] "GET /auth/login HTTP/1.1" 403 16922 "-" "Mozilla/5. ... show less	DDoS Attack
🇩🇪 todix	2026-10-08 20:18:19 (2 days ago)	"GET /.ssh/config HTTP/2.0" 401 1283 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +/)"	Brute-Force
🇨🇿 ptlab	2026-10-08 20:14:38 (2 days ago)	Web attack probes: 98 suspicious URL paths (85 known-malicious), 101 requests; 6 successful (2xx) re ... show more Web attack probes: 98 suspicious URL paths (85 known-malicious), 101 requests; 6 successful (2xx) requests to attack paths; types: admin-panel, cgi, lfi, rce, sensitive-files, traversal, wordpress; last seen 2026-10-08 (UTC). Reported automatically by PathDB log analysis. show less	Hacking Bad Web Bot Web App Attack
🇳🇱 SchorelWeb	2026-10-08 19:54:18 (2 days ago)	Cluster member (Omitted) (FR/France/-) said, TEMPDENY 34.12.189.80, Reason:[(Suspicious404) Suspicio ... show more Cluster member (Omitted) (FR/France/-) said, TEMPDENY 34.12.189.80, Reason:[(Suspicious404) Suspicious activity detected 34.12.189.80 (NL/The Netherlands/80.189.12.34.bc.googleusercontent.com): 10 in the last 3600 secs] show less	Brute-Force SSH
🇺🇸 mawan	2026-10-08 19:29:33 (2 days ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇨🇦 Mediashaker	2026-10-08 19:09:40 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.12.189.80 (80.189 ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.12.189.80 (80.189.12.34.bc.googleusercontent.com) show less	Bad Web Bot

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.186

🇹🇭 203.156.108.110

🇦🇱 185.226.90.108

🇺🇸 172.70.82.83

🇸🇬 139.59.234.78

🇸🇬 101.47.156.170

🇺🇸 51.8.102.52

🇯🇵 43.165.190.208

🇺🇸 35.226.129.182

🇺🇸 207.168.21.5

🇪🇹 196.189.124.218

🇸🇬 194.5.82.25

🇧🇷 191.187.15.78

🇮🇩 157.20.144.221

🇨🇳 111.26.63.85

🇺🇸 104.23.248.178

🇺🇸 100.0.134.238

🇩🇪 46.101.198.166

🇬🇧 86.38.187.59

🇬🇧 77.67.26.97