JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.140.48.153

34.140.48.153 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 75%: ?

75%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	153.48.140.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.140.48.153

Whois 34.140.48.153

IP Abuse Reports for 34.140.48.153:

This IP address has been reported a total of 13 times from 12 distinct sources. 34.140.48.153 was first reported on July 13th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-13 16:06:44 (1 day ago)	98.045 requests in 1 hour (1mo3w6d)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-07-13 15:21:17 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇴 jad-abuse	2026-07-13 15:20:24 (1 day ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 16 hits. show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 15:16:26 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 34.140.48.153 (153.48.140.34.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 34.140.48.153 (153.48.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 11:16:19.869819 2026] [security2:error] [pid 26954:tid 26954] [client 34.140.48.153:63655] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|paguilar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paguilar.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alUBQyxIzyRpsdsuhiIfhwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ramazan	2026-07-13 15:14:39 (1 day ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /2019/wp-includes/wlwmanifest.xml /2020/wp-includes/wlwman ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /2019/wp-includes/wlwmanifest.xml /2020/wp-includes/wlwmanifest.xml /2021/wp-includes/wlwmanifest.xml /blog/wp-includes/wlwmanifest.xml /feed/ show less	Web App Attack Hacking
Anonymous	2026-07-13 15:09:03 (1 day ago)	Bot / scanning and/or hacking attempts: GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp/wp ... show more Bot / scanning and/or hacking attempts: GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1, GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1, POST /xmlrpc.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 14:58:26 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 34.140.48.153 (153.48.140.34.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 34.140.48.153 (153.48.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 10:58:21.002212 2026] [security2:error] [pid 3978:tid 3978] [client 34.140.48.153:60475] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.oakglenhouse.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.oakglenhouse.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alT9DDFHwzxU6y5mOkbuDgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 spam.must.die	2026-07-13 14:44:22 (1 day ago)	IP triggered category <category>	Hacking Web App Attack
🇨🇭 zynex	2026-07-13 14:42:22 (1 day ago)	URL Probing: /test/wp-includes/wlwmanifest.xml	Web App Attack
🇨🇭 backslash	2026-07-13 14:42:01 (1 day ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 big-cloud.nl	2026-07-13 14:40:31 (1 day ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇮🇹 VHosting	2026-07-13 14:40:05 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇨🇭 Origon	2026-07-13 14:30:54 (1 day ago)	http-probing - IP: 34.140.48.153 - time="2026-07-13T16:30:54+02:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 34.140.48.153 - time="2026-07-13T16:30:54+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.140.48.153 (BE/396982) : 4h ban on Ip 34.140.48.153" module=db show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.237.150.100

🇬🇧 193.46.0.87

🇳🇱 185.242.226.166

🇮🇩 182.5.133.142

🇦🇷 179.40.112.10

🇬🇧 172.239.117.40

🇨🇱 170.82.129.8

🇨🇳 117.69.255.239

🇨🇳 114.132.241.239

🇨🇳 113.140.249.145

🇮🇳 103.81.208.45

🇻🇳 103.48.84.200

🇷🇺 95.215.108.8

🇷🇴 92.118.39.62

🇨🇦 85.217.149.39

🇺🇿 84.54.73.86

🇩🇪 5.180.179.7

🇨🇭 209.99.188.80

🇳🇱 185.242.226.58

🇰🇷 175.119.225.68