JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.124.160.48

34.124.160.48 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	48.160.124.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.124.160.48

Whois 34.124.160.48

IP Abuse Reports for 34.124.160.48:

This IP address has been reported a total of 46 times from 27 distinct sources. 34.124.160.48 was first reported on August 16th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Philister11	2026-08-18 01:04:29 (6 days ago)	CrowdSec: crowdsecurity/http-sensitive-files (SG/AS396982)	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-17 17:05:17 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 34.124.160.48 (48.160.124.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.124.160.48 (48.160.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 13:05:10.751878 2026] [security2:error] [pid 10303:tid 10303] [client 34.124.160.48:42536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "804websolutions.com"] [uri "/.git/config"] [unique_id "aoM_RrUbh2frjGRnfaDSJgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-17 11:04:36 (1 week ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-17 08:42:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.124.160.48 (48.160.124.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.124.160.48 (48.160.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:42:13.062922 2026] [security2:error] [pid 32264:tid 32264] [client 34.124.160.48:59918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ndakno.com"] [uri "/.git/config"] [unique_id "aoLJZUeJCwgao7ixOOq2twAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LoneRider	2026-08-17 08:23:45 (1 week ago)	[17/Aug/2026:10:23:43.419346 +0200] aoLFD-ckqKwnoUhl2IxfTQAAAAY 34.124.160.48 43272 127.0.0.1 7081 [ ... show more [17/Aug/2026:10:23:43.419346 +0200] aoLFD-ckqKwnoUhl2IxfTQAAAAY 34.124.160.48 43272 127.0.0.1 7081 [17/Aug/2026:10:23:43.431749 +0200] aoLFD5kbDsJ0jnyVBirqqwAAAAA 34.124.160.48 43294 127.0.0.1 7081 [17/Aug/2026:10:23:44.671575 +0200] aoLFEEX5OWtKGBb6xbYPCQAAAAI 34.124.160.48 43530 127.0.0.1 7081 ... show less	Hacking
🇺🇸 TPI-Abuse	2026-08-17 08:00:07 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.124.160.48 (48.160.124.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.124.160.48 (48.160.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:59:59.313730 2026] [security2:error] [pid 5031:tid 5031] [client 34.124.160.48:51870] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nesetsv.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nesetsv.com"] [uri "/z9x8c7v6b5-debug-trigger-nesetsv.com"] [unique_id "aoK_f3yW1bEL5jtMkMGW8wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 06:28:38 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.124.160.48 (48.160.124.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.124.160.48 (48.160.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:28:32.413745 2026] [security2:error] [pid 14814:tid 14823] [client 34.124.160.48:51314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nicholsinvest.com"] [uri "/.git/HEAD"] [unique_id "aoKqEGDnqDi7VIF_AJvd-QAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-17 06:20:07 (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇹🇼 neithnet	2026-08-17 05:50:30 (1 week ago)	Malicious web scan	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 04:43:34 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.124.160.48 (48.160.124.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.124.160.48 (48.160.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:43:25.497555 2026] [security2:error] [pid 15096:tid 15096] [client 34.124.160.48:42546] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|newcitypark.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newcitypark.com"] [uri "/z9x8c7v6b5-debug-trigger-newcitypark.com"] [unique_id "aoKRbbeXuYG0xOuuYOw-4AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-17 04:18:05 (1 week ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇮🇳 evicky2002	2026-08-17 03:44:05 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇦🇹 penguin-solutions.at	2026-08-17 03:14:15 (1 week ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 gadix	2026-08-17 03:01:17 (1 week ago)	[17/Aug/2026:05:01:17.125624 +0200] aoJ5fXvrnwwcH5sDr-MKeAAAAAg 34.124.160.48 36776 127.0.0.1 7081 [ ... show more [17/Aug/2026:05:01:17.125624 +0200] aoJ5fXvrnwwcH5sDr-MKeAAAAAg 34.124.160.48 36776 127.0.0.1 7081 [17/Aug/2026:05:01:17.127549 +0200] aoJ5fclmPm3_Klq_mKw_ywAAAAQ 34.124.160.48 36772 127.0.0.1 7081 [17/Aug/2026:05:01:17.192928 +0200] aoJ5ffoYkQx6vQSVhve5gAAAAAM 34.124.160.48 36816 127.0.0.1 7081 ... show less	Web App Attack
🇳🇱 ConsulHosting	2026-08-17 01:24:19 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2409:40c4:3007:8066:8095:3953:603d:4660

🇺🇸 192.159.99.144

🇺🇸 2600:1700:320:890:c8d1:c326:5760:94b

🇧🇷 216.238.111.238

🇺🇸 213.188.79.131

🇩🇪 194.88.98.87

🇳🇱 193.47.62.69

🇺🇸 172.234.246.109

🇻🇳 171.231.193.208

🇦🇺 161.33.73.14

🇩🇪 152.233.20.75

🇲🇽 148.230.129.56

🇹🇼 111.70.17.124

🇺🇸 104.207.37.31

🇳🇱 91.92.40.35

🇺🇦 85.91.201.14

🇹🇷 81.214.75.248

🇨🇳 59.172.167.4

🇸🇬 51.79.178.46

🇨🇳 218.0.63.25