JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.67.180.3

34.67.180.3 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 86%: ?

86%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	3.180.67.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.67.180.3

Whois 34.67.180.3

IP Abuse Reports for 34.67.180.3:

This IP address has been reported a total of 21 times from 15 distinct sources. 34.67.180.3 was first reported on August 22nd 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-08-22 11:46:52 (2 hours ago)	101 requests with url.path .hg/	Brute-Force Bad Web Bot
🇷🇴 clauss	2026-08-22 09:29:31 (4 hours ago)	34.67.180.3 - - [22/Aug/2026:12:29:29 +0300] "GET /.DS_Store HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windo ... show more 34.67.180.3 - - [22/Aug/2026:12:29:29 +0300] "GET /.DS_Store HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 34.67.180.3 - - [22/Aug/2026:12:29:30 +0300] "GET /.DS_Store HTTP/2.0" 404 10291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-08-22 09:13:18 (5 hours ago)	Web application attack detected.	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 08:43:59 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:43:52.963321 2026] [security2:error] [pid 21816:tid 21816] [client 34.67.180.3:51974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.connectigramme.com"] [uri "/.git/HEAD"] [unique_id "aolhSLlDdX48_3TIklclzgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 miriks	2026-08-22 08:00:29 (6 hours ago)	Automated scan detected: GET /.git/HEAD — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ ... show more Automated scan detected: GET /.git/HEAD — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇮🇩 Burayot	2026-08-22 07:28:51 (6 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.67.180.3 (US/United States/3.180 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.67.180.3 (US/United States/3.180.67.34.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇪🇸 elcruzado.es	2026-08-22 07:04:35 (7 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.67.180.3 (US/United States/3.180.67. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.67.180.3 (US/United States/3.180.67.34.bc.googleusercontent.com) show less	SQL Injection
🇵🇱 Budyn	2026-08-22 06:55:01 (7 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.goblinpot.online \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:25:41 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:25:36.096834 2026] [security2:error] [pid 15059:tid 15059] [client 34.67.180.3:36094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jacksonlimobus.com"] [uri "/.git/HEAD"] [unique_id "aolA4AiOfdxFzqY4wM8tSQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-08-22 06:15:22 (8 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:06:44 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:06:36.842989 2026] [security2:error] [pid 18798:tid 18798] [client 34.67.180.3:36478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahuramazda.com"] [uri "/.git/HEAD"] [unique_id "aok8bJHlz29PDcCbenHr7AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 05:29:29 (8 hours ago)	[Sat Aug 22 05:29:26.840796 2026] [authz_core:error] [pid 979667:tid 979667] [client 34.67.180.3:369 ... show more [Sat Aug 22 05:29:26.840796 2026] [authz_core:error] [pid 979667:tid 979667] [client 34.67.180.3:36920] AH01630: client denied by server configuration: /var/www/erp.gassycat.co.uk/htdocs/.git [Sat Aug 22 05:29:27.224421 2026] [authz_core:error] [pid 979675:tid 979675] [client 34.67.180.3:36922] AH01630: client denied by server configuration: /var/www/erp.gassycat.co.uk/htdocs/.git [Sat Aug 22 05:29:27.608307 2026] [authz_core:error] [pid 979710:tid 979710] [client 34.67.180.3:36924] AH01630: client denied by server configuration: /var/www/erp.gassycat.co.uk/htdocs/.svn [Sat Aug 22 05:29:28.028497 2026] [authz_core:error] [pid 979673:tid 979673] [client 34.67.180.3:36938] AH01630: client denied by server configuration: /var/www/erp.gassycat.co.uk/htdocs/.svn [Sat Aug 22 05:29:28.414636 2026] [authz_core:error] [pid 979672:tid 979672] [client 34.67.180.3:36952] AH01630: client denied by server configuration: /var/www/erp.gassycat.co.uk/htdocs/CVS ... show less	Brute-Force
Anonymous	2026-08-22 05:07:02 (9 hours ago)	Automated web scanner. Requested suspicious paths: /.git/HEAD. UTC: 2026-08-22 04:47:23.	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 04:49:40 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.67.180.3 (3.180.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:49:32.691916 2026] [security2:error] [pid 4948:tid 4948] [client 34.67.180.3:49652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidocchino.com"] [uri "/.git/HEAD"] [unique_id "aokqXG1uklek7f3oTYphQAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-08-22 04:15:02 (10 hours ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.225.30.2

🇬🇧 45.133.173.223

🇺🇸 45.39.105.246

🇫🇷 2a02:4780:7:8647::1

🇺🇸 2607:f8b0:4004:c27::12d

🇭🇰 199.45.154.117

🇷🇺 89.189.154.112

🇫🇷 82.225.42.153

🇺🇸 17.138.204.2

🇪🇸 162.158.123.246

🇵🇭 112.202.236.56

🇳🇱 91.92.40.25

🇹🇷 78.187.9.53

🇺🇸 17.145.16.2

🇯🇴 91.186.254.39

🇵🇱 54.37.235.85

🇪🇸 46.26.235.102

🇨🇳 27.21.28.34

🇳🇱 195.170.172.216

🇻🇳 171.231.188.110