JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.29.247.48

34.29.247.48 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 30%: ?

30%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	48.247.29.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.29.247.48

Whois 34.29.247.48

IP Abuse Reports for 34.29.247.48:

This IP address has been reported a total of 21 times from 18 distinct sources. 34.29.247.48 was first reported on May 10th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇰 EVISION	2026-08-10 07:16:00 (1 week ago)	[email protected]	Email Spam Spoofing Phishing
🇺🇸 NXTwoThou	2026-08-09 19:58:30 (1 week ago)	Spam	Email Spam
🇫🇮 inlink.ltd	2026-08-09 14:06:23 (1 week ago)	Email spam	Email Spam
🇳🇱 Cloud86 B.V.	2026-08-09 13:39:02 (1 week ago)	categories: Email Spam	Email Spam
🇩🇰 powerhostingdk	2026-08-09 13:37:42 (1 week ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
🇳🇱 homeshowdomain.nl	2026-05-15 22:05:40 (3 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-14. show less	Web App Attack SSH Hacking
🇩🇪 big-cloud.nl	2026-05-15 10:15:05 (3 months ago)	Try to access /app/.env	Web App Attack
🇬🇧 consul.to	2026-05-15 08:53:52 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 ar2000	2026-05-15 03:58:45 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-05-15 01:57:23 (3 months ago)	(caddyscan) Scanner path probe from 34.29.247.48 (US/United States/48.247.29.34.bc.googleusercontent ... show more (caddyscan) Scanner path probe from 34.29.247.48 (US/United States/48.247.29.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.29.247.48 - - [15/May/2026:01:57:19 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 34.29.247.48 - - [15/May/2026:01:57:19 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 34.29.247.48 - - [15/May/2026:01:57:19 +0000] "GET /admin/.env HTTP/1.1" [REDACTED] 200 2627 34.29.247.48 - - [15/May/2026:01:57:19 +0000] "GET /app/.env HTTP/1.1" [REDACTED] 200 2627 34.29.247.48 - - [15/May/2026:01:57:19 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-15 01:34:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 34.29.247.48 (48.247.29.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.29.247.48 (48.247.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 21:34:43.946489 2026] [security2:error] [pid 19511:tid 19511] [client 34.29.247.48:41790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voiceprojoe.hatfulofrain.com"] [uri "/.env.local"] [unique_id "agZ4M561qtY0iAtiA4v8VQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-15 01:05:40 (3 months ago)	Scanning/Probing (20)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 23:48:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 34.29.247.48 (48.247.29.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.29.247.48 (48.247.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 19:48:53.054327 2026] [security2:error] [pid 4069:tid 4089] [client 34.29.247.48:41832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stephanie.stauffer.name.sjstauffer.com"] [uri "/.env.local"] [unique_id "agZfZQCEKrFgJFeyervWIwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-14 23:43:14 (3 months ago)	34.29.247.48 - - [14/May/2026:23:43:14 +0000] "GET /.env.local HTTP/1.1" 403 2394 "-" "SonyEricssonK ... show more 34.29.247.48 - - [14/May/2026:23:43:14 +0000] "GET /.env.local HTTP/1.1" 403 2394 "-" "SonyEricssonK800i/R1CB Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.0.0.0" ... show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-14 21:59:33 (3 months ago)	Auto-ban: >3000 req/min op 2026-05-14	Web App Attack SSH Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a02:348:5e6:1::6bf

🇵🇱 194.180.49.220

🇺🇸 165.154.255.63

🇺🇸 66.132.195.122

🇧🇷 45.228.216.81

🇵🇾 45.184.111.11

🇮🇩 38.86.221.72

🇰🇷 220.85.210.200

🇭🇰 219.78.63.235

🇺🇸 216.26.226.222

🇷🇺 212.220.13.98

🇵🇱 194.180.48.39

🇺🇸 172.212.194.58

🇮🇶 169.224.64.85

🇺🇸 162.243.252.169

🇫🇷 143.244.57.84

🇲🇦 105.158.68.26

🇭🇰 104.208.99.163

🇷🇴 104.29.142.118

🇧🇩 103.103.89.111