JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.166.112.80

34.166.112.80 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 74%: ?

74%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	80.112.166.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇦 Saudi Arabia
City	Dammam, Eastern Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.166.112.80

Whois 34.166.112.80

IP Abuse Reports for 34.166.112.80:

This IP address has been reported a total of 21 times from 13 distinct sources. 34.166.112.80 was first reported on September 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-16 08:09:44 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+1 more) \| 2026-09-16 08:09 UTC show less	Hacking Web App Attack
🇺🇸 alecj.com	2026-09-16 07:16:18 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇫🇷 spot	2026-09-16 07:06:10 (1 day ago)	34.166.112.80 - - [16/Sep/2026:08:06:08 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 ... show more 34.166.112.80 - - [16/Sep/2026:08:06:08 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇩🇪 kkw	2026-09-16 06:52:32 (1 day ago)	[REDACTED] 34.166.112.80 - - [16/Sep/2026:08:52:32 +0200] "GET /.git/config HTTP/1.1" 301 634 "-" "M ... show more [REDACTED] 34.166.112.80 - - [16/Sep/2026:08:52:32 +0200] "GET /.git/config HTTP/1.1" 301 634 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇩🇪 Aufpasser_1973	2026-09-16 06:48:19 (1 day ago)	Fail2Ban Caddy: Web App Attack, /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 02:10:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.166.112.80 (80.112.166.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.166.112.80 (80.112.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:10:21.676958 2026] [security2:error] [pid 1903810:tid 1903810] [client 34.166.112.80:49560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colegio.cyber507.net"] [uri "/.git/config"] [unique_id "aqn6ja5Q9OcV-XftgyNDWQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 01:16:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.166.112.80 (80.112.166.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.166.112.80 (80.112.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:16:18.732143 2026] [security2:error] [pid 710:tid 731] [client 34.166.112.80:38258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coldwave.net"] [uri "/.git/config"] [unique_id "aqnt4hcD2dqR6Ic7regDQwAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-16 01:05:02 (1 day ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇳🇱 Savvii	2026-09-15 23:51:09 (1 day ago)	20 attempts against mh-misbehave-ban on cold	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 23:20:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.166.112.80 (80.112.166.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.166.112.80 (80.112.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:20:55.816616 2026] [security2:error] [pid 10264:tid 10264] [client 34.166.112.80:57436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colbygrenier.com.jimgrenier.com"] [uri "/.git/config"] [unique_id "aqnS14NLzbGqGzxMg2PXKgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-15 22:50:04 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-09-15 22:02:45 (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-15 21:03:05 (2 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇩🇪 ddobko	2026-09-15 19:24:09 (2 days ago)		Bad Web Bot Web App Attack
Anonymous	2026-09-15 19:05:02 (2 days ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=SA; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.165.57.65

🇺🇸 165.227.114.107

🇷🇴 92.118.39.49

🇺🇸 70.176.91.78

🇺🇸 35.237.94.18

🇺🇸 24.234.239.31

🇻🇪 190.207.78.49

🇹🇭 183.89.208.174

🇺🇸 162.216.149.220

🇹🇷 88.230.152.88

🇺🇸 74.196.184.15

🇺🇸 209.227.22.232

🇮🇹 194.60.213.115

🇵🇰 182.181.137.34

🇨🇦 173.183.132.97

🇺🇸 172.222.109.29

🇲🇽 134.168.249.22

🇻🇳 123.58.198.35

🇯🇵 118.194.236.137

🇮🇩 103.155.47.50