JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.168.80.18

34.168.80.18 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 76%: ?

76%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	18.80.168.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.168.80.18

Whois 34.168.80.18

IP Abuse Reports for 34.168.80.18:

This IP address has been reported a total of 12 times from 12 distinct sources. 34.168.80.18 was first reported on September 22nd 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-10-16 19:40:03 (14 hours ago)	2.622 requests with url.path */wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot
🇩🇪 ManagedStack	2026-10-16 18:27:56 (15 hours ago)	Wordpress Attack	Web App Attack
🇨🇭 Origon	2026-10-16 18:20:33 (15 hours ago)	http-probing - IP: 34.168.80.18 - time="2026-10-16T20:20:33+02:00" level=info msg="(555f66b4f6a7455 ... show more http-probing - IP: 34.168.80.18 - time="2026-10-16T20:20:33+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.168.80.18 (US/396982) : 4h ban on Ip 34.168.80.18" module=db show less	Web App Attack
🇩🇪 Blexyel	2026-10-16 18:08:53 (15 hours ago)	34.168.80.18 - - [16/Oct/2026:20:08:53 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 " ... show more 34.168.80.18 - - [16/Oct/2026:20:08:53 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇨🇭 YF	2026-10-16 18:07:17 (15 hours ago)	WordPress author enumeration	Web App Attack
🇵🇱 Budyn	2026-10-16 18:04:02 (16 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: minio.dont-eat-the-pudding.online \| URI: //xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 \| BODY: <?xml version="1.0"?><methodCall><methodName>system.multicall</methodName><params><param><value><array><data> <value><struct><member><name>methodName</name><value><string>wp.getUsersBlogs</string></value></member><member><name>params</name><value><array><data><value><array><data><value><string>admin</string> show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-10-16 18:00:59 (16 hours ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇵🇱 Niko's Stuff	2026-10-16 18:00:05 (16 hours ago)	Triggered crowdsecurity/http-probing. More information at: https://app.crowdsec.net/cti/34.168.80.18	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-16 17:52:35 (16 hours ago)	(mod_security) mod_security (id:225170) triggered by 34.168.80.18 (18.80.168.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.168.80.18 (18.80.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:52:28.895359 2026] [security2:error] [pid 28195:tid 28195] [client 34.168.80.18:60195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iwriteitall.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iwriteitall.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atJkXA3vDgGDhtuCidnMXAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-16 17:50:33 (16 hours ago)	[redacted] 34.168.80.18 - - [16/Oct/2026:19:50:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ... show more [redacted] 34.168.80.18 - - [16/Oct/2026:19:50:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 34.168.80.18 - - [16/Oct/2026:19:50:22 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 34.168.80.18 - - [16/Oct/2026:19:50:23 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 34.168.80.18 - - [16/Oct/2026:19:50:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 34.168.80.18 - - [16/Oct/2026:19:50:26 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 ( ... show less	Hacking Web App Attack
🇮🇹 VHosting	2026-10-16 17:50:04 (16 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Cloud86 B.V.	2026-09-22 23:00:10 (3 weeks ago)	categories: Email Spam	Email Spam

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.108

🇵🇱 176.53.159.198

🇯🇵 216.226.78.30

🇺🇸 216.25.89.106

🇸🇬 178.128.91.176

🇺🇸 162.216.149.85

🇧🇩 103.179.24.242

🇿🇦 102.216.75.14

🇲🇼 41.190.94.37

🇺🇸 216.218.206.122

🇺🇸 216.180.246.88

🇺🇦 195.211.212.174

🇮🇳 182.95.190.70

🇮🇳 152.58.130.218

🇺🇸 136.144.42.140

🇨🇦 85.217.149.59

🇬🇧 77.67.26.39

🇳🇱 217.60.195.63

🇺🇸 205.210.31.95

🇺🇸 205.210.31.77