JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.178.249.80

Recent Activity

Abuse confidence score ?

100% Critical

57 reports

46 reporters · latest 39 minutes ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	80.249.178.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.178.249.80

Export CSV

This IP address has been reported a total of 57 times from 46 distinct sources. 34.178.249.80 was first reported on October 9th 2026, and the most recent report was 39 minutes ago. In the last 60 days, the top reporter locations were: United Kingdom of Great Britain and Northern Ireland with 26 reports; Germany with 8 reports; Netherlands with 6 reports. The most common categories in these recent reports were: Web App Attack 38 times; Brute-Force 22 times; Bad Web Bot 11 times; Hacking 8 times; SQL Injection 8 times; Other 14 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-10-12 12:11:31 (39 minutes ago)	(mod_security) mod_security (id:11000011) triggered by 34.178.249.80 (NL/The Netherlands/Groningen/G ... show more (mod_security) mod_security (id:11000011) triggered by 34.178.249.80 (NL/The Netherlands/Groningen/Groningen/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:11:26.869745 2026] [security2:error] [pid 822827:tid 822889] [remote 34.178.249.80:48468] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 80.249.178.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/"] [unique_id "aszObmdgy73F5r24OM20CwACkwo"] show less	Port Scan
🇫🇷 UnixPrime	2026-10-12 12:03:31 (47 minutes ago)	34.178.249.80 - - [12/Oct/2026:14:03:30 +0200] "GET /docker-compose.yml HTTP/1.1" 404 4141 "-" "Mozi ... show more 34.178.249.80 - - [12/Oct/2026:14:03:30 +0200] "GET /docker-compose.yml HTTP/1.1" 404 4141 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.178.249.80 - - [12/Oct/2026:14:03:30 +0200] "GET /Dockerfile HTTP/1.1" 404 4144 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" ... show less	Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-10-12 12:00:07 (50 minutes ago)	34.178.249.80 - - [12/Oct/2026:12:00:01 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/e ... show more 34.178.249.80 - - [12/Oct/2026:12:00:01 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.178.249.80" 34.178.249.80 - - [12/Oct/2026:12:00:01 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.178.249.80" 34.178.249.80 - - [12/Oct/2026:12:00:01 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.178.249.80" 34.178.249.80 - - [12/Oct/2026:12:00:01 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.178.249.80" 34.178.249.80 - - [12/Oct/2026:12:00:01 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.178.249.80" ... show less	Web Spam Web App Attack
Anonymous	2026-10-12 11:57:36 (52 minutes ago)	[ssd5.kdns.gr] httpd-config-scan: sites=www.cancelletto.gr; logs=/var/log/httpd/domains/cancelletto. ... show more [ssd5.kdns.gr] httpd-config-scan: sites=www.cancelletto.gr; logs=/var/log/httpd/domains/cancelletto.gr.log; samples=/.env.local::$DATA?raw \| /@fs/root/.env?raw?? \| /api/orders/..%2f..%2fproc/self/environ show less	Hacking Web App Attack
Anonymous	2026-10-12 11:45:34 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 34.178.249.80 (NL/The Netherlands/80.24 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.178.249.80 (NL/The Netherlands/80.249.178.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇬🇧 consul.to	2026-10-12 11:16:38 (1 hour ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Petros Stefanakis	2026-10-12 11:09:36 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 34.178.249.80 (80.249.178.34.bc.googleu ... show more (mod_security) mod_security triggered on hostname [redacted] 34.178.249.80 (80.249.178.34.bc.googleusercontent.com) show less	SQL Injection
🇬🇷 setupgr	2026-10-12 11:06:33 (1 hour ago)	(mod_security) mod_security (id:11000011) triggered by 34.178.249.80 (NL/The Netherlands/Groningen/G ... show more (mod_security) mod_security (id:11000011) triggered by 34.178.249.80 (NL/The Netherlands/Groningen/Groningen/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 12 14:06:31.830512 2026] [security2:error] [pid 822282:tid 822342] [remote 34.178.249.80:56588] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 80.249.178.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/"] [unique_id "asy_N-nMivJ4LYY5ez0UZQACxgg"] show less	Port Scan
🇬🇧 AvonleaConsulting	2026-10-10 22:49:28 (1 day ago)	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
Anonymous	2026-10-10 16:37:11 (1 day ago)	34.178.249.80 - - [10/Oct/2026:11:37:07 -0500] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 Ap ... show more 34.178.249.80 - - [10/Oct/2026:11:37:07 -0500] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" 162.159.113.8 34.178.249.80 - - [10/Oct/2026:11:37:07 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.159.113.8 34.178.249.80 - - [10/Oct/2026:11:37:07 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 162.159.113.135 34.178.249.80 - - [10/Oct/2026:11:37:07 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 162.159.113.8 34.178.249.80 - - [10/Oct/2026:11:37:08 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchB ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-10 16:01:55 (1 day ago)	Multiple WAF Violations	Web App Attack
🇩🇪 altenglaner	2026-10-10 15:50:56 (1 day ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ... show more Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban. show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-10-10 05:13:51 (2 days ago)	2670 attacks on shell probes, PHP URLs, env grabbing URLs, env grabbing URLs (type 2), config grabbi ... show more 2670 attacks on shell probes, PHP URLs, env grabbing URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), VC URLs, directory traversals, password/key grabbing URLs: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1 GET /.env.local::$DATA?raw HTTP/1.1 GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1 GET /secrets.yml HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 bensmithurst	2026-10-10 03:44:58 (2 days ago)	34.178.249.80 - - [10/Oct/2026:03:44:57 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-" 34.178.24 ... show more 34.178.249.80 - - [10/Oct/2026:03:44:57 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-" 34.178.249.80 - - [10/Oct/2026:03:44:58 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-" 34.178.249.80 - - [10/Oct/2026:03:44:58 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-" 34.178.249.80 - - [10/Oct/2026:03:44:58 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-10 03:08:01 (2 days ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02 ... show more Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02] show less	Hacking SQL Injection Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 115.243.248.82

🇸🇪 81.236.211.54

🇬🇧 195.81.171.123

🇬🇧 195.81.150.200

🇬🇧 195.81.150.113

🇦🇷 181.45.133.240

🇨🇦 172.105.102.10

🇮🇹 151.59.7.174

🇺🇸 134.209.75.13

🇷🇺 94.103.90.150

🇳🇱 91.92.241.45

🇨🇦 85.217.149.60

🇺🇸 75.80.232.233

🇮🇳 68.183.92.206

🇬🇧 5.252.83.92

🇨🇦 216.26.240.37

🇬🇧 195.81.117.201

🇺🇸 104.23.211.193

🇧🇩 103.159.2.113

🇳🇬 102.88.137.80