JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.12.53.239

34.12.53.239 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 60%: ?

60%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	239.53.12.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.12.53.239

Whois 34.12.53.239

IP Abuse Reports for 34.12.53.239:

This IP address has been reported a total of 10 times from 10 distinct sources. 34.12.53.239 was first reported on June 28th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-28 10:02:45 (6 days ago)	15.696 requests with url.path //xmlrpc.php 15.534 requests with url.path /xmlrpc.php 1.433 reque ... show more 15.696 requests with url.path //xmlrpc.php 15.534 requests with url.path /xmlrpc.php 1.433 requests with url.path */wp-includes/wlwmanifest.xml show less	Brute-Force Bad Web Bot
🇮🇹 VHosting	2026-06-28 08:45:08 (6 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 Savvii	2026-06-28 08:38:59 (6 days ago)	10 attempts against mh-misc-ban on ficus	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 08:35:51 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 34.12.53.239 (239.53.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.12.53.239 (239.53.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 04:35:46.842746 2026] [security2:error] [pid 22578:tid 22620] [client 34.12.53.239:61151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wizart.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wizart.org"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "akDc4n-pQHabo8V_inIDcQAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-28 08:35:46 (6 days ago)	[redacted] 34.12.53.239 - - [28/Jun/2026:10:35:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mo ... show more [redacted] 34.12.53.239 - - [28/Jun/2026:10:35:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 34.12.53.239 - - [28/Jun/2026:10:35:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 34.12.53.239 - - [28/Jun/2026:10:35:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 34.12.53.239 - - [28/Jun/2026:10:35:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 34.12.53.239 - - [28/Jun/2026:10:35:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; ... show less	Hacking Web App Attack
Anonymous	2026-06-28 08:34:48 (6 days ago)	34.12.53.239 - - [28/Jun/2026:16:34:48 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5. ... show more 34.12.53.239 - - [28/Jun/2026:16:34:48 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-06-28 08:33:01 (6 days ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
🇨🇭 backslash	2026-06-28 08:33:00 (6 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-28 08:32:44 (6 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248	Exploited Host Web App Attack
🇨🇭 Origon	2026-06-28 08:32:31 (6 days ago)	http-probing - IP: 34.12.53.239 - time="2026-06-28T10:32:30+02:00" level=info msg="(555f66b4f6a7455 ... show more http-probing - IP: 34.12.53.239 - time="2026-06-28T10:32:30+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.12.53.239 (NL/396982) : 4h ban on Ip 34.12.53.239" module=db show less	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.250.187.78

🇧🇷 179.222.190.236

🇮🇪 130.195.213.172

🇹🇷 94.154.43.181

🇩🇪 69.5.169.63

🇦🇺 65.254.93.170

🇮🇹 45.84.168.203

🇺🇸 44.160.103.28

🇲🇺 197.225.146.23

🇪🇨 186.47.136.50

🇧🇷 179.217.159.217

🇧🇷 179.127.250.240

🇺🇸 154.83.197.210

🇮🇳 152.52.15.213

🇰🇷 106.250.216.107

🇺🇸 91.230.168.91

🇨🇦 52.138.1.81

🇧🇷 45.225.194.126

🇧🇷 45.225.194.125

🇳🇱 45.148.10.157