JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.23.103.103

Activity Trending Down

Abuse Confidence Score

33% Elevated

39 reports

25 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 103.103.23.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

39 from 25 distinct reporters

First reported

September 16th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 16 🇩🇪 Germany 9 🇳🇱 Netherlands 3

Most common categories Web App Attack 34 Bad Web Bot 20 Brute-Force 17 Hacking 6 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-23 02:23:53 UTC · (1 month ago)	2026-09-22 06:48:19,582 fail2ban.actions [3721954]: NOTICE [ipblocklist] Ban 34.23.103.103 ...	Bad Web Bot
🇩🇪 klaus_ph	2026-09-22 09:38:36 UTC · (1 month ago)	2026-09-21 23:35:53,038 fail2ban.actions [1549]: NOTICE [ipblocklist] Ban 34.23.103.103 ...	Bad Web Bot
🇮🇹 CoreTech srl	2026-09-21 00:18:56 UTC · (1 month ago)	cloudlinux2 fail2ban: 2026-09-21 02:13:48,317 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Unban 136.66.86.82cloudlinux2 fail2ban: 2026-09-21 02:14:27,224 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.23.103.103 ... show more cloudlinux2 fail2ban: 2026-09-21 02:13:48,317 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Unban 136.66.86.82cloudlinux2 fail2ban: 2026-09-21 02:14:27,224 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.23.103.103 - 2026-09-21 02:14:27cloudlinux2 fail2ban: 2026-09-21 02:14:28,837 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.23.103.103 - 2026-09-21 02:14:28cloudlinux2 fail2ban: 2026-09-21 02:15:19,932 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.211.67 - 2026-09-21 02:15:19cloudlinux2 fail2ban: 2026-09-21 02:15:15,321 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.211.67 - 2026-09-21 02:15:15cloudlinux2 fail2ban: 2026-09-21 02:16:10,719 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 63.135.161.102 - 2026-09-21 02:16:10cloudlinux2 fail2ban: 2026-09-21 02:16:48,530 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 174.227.141.189 - 2026-09-21 02:16:48cloudlinux2 fail2ba show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-21 00:03:29 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:03:23.743212 2026] [security2:error] [pid 28232:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:03:23.743212 2026] [security2:error] [pid 28232:tid 28232] [client 34.23.103.103:59102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kwgolf.five21.com"] [uri "/.git/config"] [unique_id "arB0S_5HMQ_t7bKgvHw2VAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-09-21 00:02:56 UTC · (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2026-09-20 23:50:14 UTC · (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 23:37:00 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:36:52.954746 2026] [security2:error] [pid 26501:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:36:52.954746 2026] [security2:error] [pid 26501:tid 26501] [client 34.23.103.103:57870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kurikka.net"] [uri "/.git/config"] [unique_id "arBuFLsWKIt5u8ZRd8VYlgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-20 23:32:44 UTC · (1 month ago)	Web probing (4 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.	Web App Attack
🇳🇴 jad-abuse	2026-09-20 23:12:33 UTC · (1 month ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.	Web App Attack
Anonymous	2026-09-20 23:01:04 UTC · (1 month ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇫🇷 dynamix	2026-09-20 22:44:51 UTC · (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 22:13:17 UTC · (1 month ago)	(mod_security) mod_security (id:949110) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:13:10.470714 2026] [security2:error] [pid 13879:tid ... show more (mod_security) mod_security (id:949110) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:13:10.470714 2026] [security2:error] [pid 13879:tid 13879] [client 34.23.103.103:56696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.krupaandsons.com"] [uri "/.git/config"] [unique_id "arBadmlQA6yypjT1lofP8gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 21:55:44 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:55:38.155487 2026] [security2:error] [pid 9367:tid 9 ... show more (mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:55:38.155487 2026] [security2:error] [pid 9367:tid 9367] [client 34.23.103.103:59564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kristasrecoverycoaching.com.kildarafarms.com"] [uri "/.git/config"] [unique_id "arBWWgyKDAZ8WV5EBoTAzgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 21:19:48 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:19:42.964876 2026] [security2:error] [pid 22039:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.23.103.103 (103.103.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:19:42.964876 2026] [security2:error] [pid 22039:tid 22039] [client 34.23.103.103:46618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kqdemo.homehealth101.com"] [uri "/.git/config"] [unique_id "arBN7j4A1edLW75tpXZzvwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Anytech	2026-09-20 21:18:13 UTC · (1 month ago)	Blocked by ConnMonitor	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 216.28.248.250

🇳🇱 195.178.110.217

🇳🇱 193.47.62.20

🇨🇴 181.41.150.134

🇺🇸 157.230.60.108

🇿🇦 105.245.102.193

🇷🇴 92.118.39.77

🇳🇱 51.158.206.19

🇬🇧 35.203.210.137

🇺🇸 34.48.42.49

🇺🇸 20.3.253.156

🇨🇳 223.167.205.118

🇹🇼 198.235.24.122

🇬🇧 188.240.59.55

🇺🇦 185.191.178.75

🇺🇸 174.68.45.134

🇨🇦 172.69.214.79

🇺🇸 166.62.41.190

🇺🇸 162.216.149.202

🇨🇳 123.233.232.106