This IP address has been reported a total of
10
times from
7 distinct
sources.
34.18.100.103 was first reported on
September 15th 2026 , and the most recent report was
3 weeks ago United States of America
with 4
reports;
Germany
with 2
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Brute-Force
7
times;
Bad Web Bot
5
times;
Port Scan
1
time;
Hacking
1
time.
Old Reports
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-16 02:48:34
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:48:28.481896 2026] [security2:error] [pid 3802:tid 3802] [client 34.18.100.103:33102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dev.handyrehab.com"] [uri "/.git/config"] [unique_id "aqoDfANAdAUWgBE9GItNpgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 02:43:28
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-16 01:11:00
(3 weeks ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-16 00:50:12
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:50:07.778676 2026] [security2:error] [pid 24187:tid 24274] [client 34.18.100.103:53566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozworkshop.com"] [uri "/.git/config"] [unique_id "aqnnvwwHPcdkUn4WKJbLqwAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 18:49:28
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:49:24.728546 2026] [security2:error] [pid 23057:tid 23057] [client 34.18.100.103:49684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozkanturker.com"] [uri "/.git/config"] [unique_id "aqmTNGu85iNVJV6ioXxnDwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ramazan
2026-09-15 18:44:23
(3 weeks ago)
Fail2Ban: nginx-4xx | Failures: 10 | Log: /.env /.env.backup /.env.bak /.env.development /.env.local
Web App Attack
Hacking
🇩🇪
Guardian
2026-09-15 17:22:59
(3 weeks ago)
Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2)
34.18.100.103 [15/Sep/2026:19:22:58 +0200] "GET /.git/config HTTP/1.1"
34.18.100.103 [15/Sep/2026:19:22:58 +0200] "GET /.env HTTP/1.1"
34.18.100.103 [15/Sep/2026:19:22:59 +0200] "GET /.env.local HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 13:27:02
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.100.103 (103.100.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:26:55.587390 2026] [security2:error] [pid 3176:tid 3176] [client 34.18.100.103:38570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "religiousholidaycards.com"] [uri "/.git/config"] [unique_id "aqlHnyUS0zpXJF4DaXFBHAAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-15 13:15:03
(3 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-09-15 13:01:46
(3 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
