JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.28.80.249

34.28.80.249 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	249.80.28.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.28.80.249

Whois 34.28.80.249

IP Abuse Reports for 34.28.80.249:

This IP address has been reported a total of 10 times from 7 distinct sources. 34.28.80.249 was first reported on March 25th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 mitsurugi	2025-03-26 09:30:00 (1 year ago)	Xmlrpc attack.	Brute-Force Web App Attack
🇨🇦 polycoda	2025-03-25 17:35:58 (1 year ago)	🔑 Probes for xmlrpc.php everywhere	Hacking Web App Attack
Anonymous	2025-03-25 17:21:04 (1 year ago)	Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //?author=1 HTTP/1.1, GET // ... show more Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //?author=1 HTTP/1.1, GET //?author=2 HTTP/1.1, GET //wp-json/wp/v2/users/ HTTP/1.1, GET //wp-json/oembed/1.0/embed?url=https://hanskroonadvies.nl/ show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-03-25 17:17:32 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 13:17:24.539308 2025] [security2:error] [pid 18308:tid 18308] [client 34.28.80.249:50676] [client 34.28.80.249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|natickvillagerentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "natickvillagerentals.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-LlJJs9XkfmyWS3GkWvuwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-03-25 17:03:28 (1 year ago)	12.094 POST requests in 1 hour (1w2d21h)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-03-25 16:56:37 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 12:56:30.001038 2025] [security2:error] [pid 19879:tid 20004] [client 34.28.80.249:57699] [client 34.28.80.249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.nepsco.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nepsco.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-LgPegxcq9wX43sDylvGQAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-25 16:43:39 (1 year ago)	(wordpress) Failed wordpress login from 34.28.80.249 (US/United States/249.80.28.34.bc.googleusercon ... show more (wordpress) Failed wordpress login from 34.28.80.249 (US/United States/249.80.28.34.bc.googleusercontent.com) show less	Brute-Force
🇺🇸 TPI-Abuse	2025-03-25 16:39:05 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 12:38:57.555616 2025] [security2:error] [pid 3586280:tid 3586280] [client 34.28.80.249:60679] [client 34.28.80.249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.prostar.industries\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.prostar.industries"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-LcITAw_wxOojCYxXgTVQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-25 16:26:08 (1 year ago)	Malicious activity detected	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-03-25 16:22:12 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.28.80.249 (249.80.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 12:22:09.074846 2025] [security2:error] [pid 387572:tid 387572] [client 34.28.80.249:59978] [client 34.28.80.249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|servecon.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "servecon.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-LYMXZMeYN8Pqpg3ph6qwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.189

🇺🇸 172.68.175.38

🇮🇹 78.213.182.172

🇺🇸 66.132.172.114

🇻🇳 42.1.65.123

🇨🇦 20.48.147.90

🇬🇧 2.57.17.104

🇲🇾 219.92.140.13

🇳🇱 201.51.24.4

🇹🇼 198.235.24.94

🇹🇼 198.235.24.93

🇨🇦 159.203.40.210

🇺🇸 66.132.195.65

🇧🇷 45.225.195.159

🇹🇼 36.227.208.73

🇺🇸 20.168.119.85

🇪🇸 2.139.154.232

🇹🇼 198.235.24.30

🇧🇬 193.24.211.234

🇨🇳 123.166.66.125