JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.35.157.48

34.35.157.48 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	48.157.35.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.35.157.48

Whois 34.35.157.48

IP Abuse Reports for 34.35.157.48:

This IP address has been reported a total of 27 times from 26 distinct sources. 34.35.157.48 was first reported on July 25th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 ptlab	2026-07-25 12:45:32 (2 minutes ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇪🇸 alferez	2026-07-25 12:05:26 (43 minutes ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇫🇷 dynamix	2026-07-25 11:42:23 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇨🇦 1gz	2026-07-25 10:04:18 (2 hours ago)	Triggered Cloudflare WAF (firewallManaged) from ZA. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from ZA. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php.bak UA: Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 raph	2026-07-25 09:25:29 (3 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-07-25 09:12:00 (3 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.35.157.48 (48.157.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:949110) triggered by 34.35.157.48 (48.157.35.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇳🇱 Savvii	2026-07-25 09:06:22 (3 hours ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2026-07-25 09:02:34 (3 hours ago)	34.35.157.48 - - [25/Jul/2026:11:02:33 +0200] "GET /.git/HEAD HTTP/2.0" 404 269 "-" "Mozilla/5.0 (co ... show more 34.35.157.48 - - [25/Jul/2026:11:02:33 +0200] "GET /.git/HEAD HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.35.157.48 - - [25/Jul/2026:11:02:33 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email protected]" 34.35.157.48 - - [25/Jul/2026:11:02:33 +0200] "GET /.git-credentials HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)" show less	Brute-Force
🇳🇱 Site.eu	2026-07-25 09:02:28 (3 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Matthew Ping	2026-07-25 09:00:02 (3 hours ago)	ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇩🇪 mxbl	2026-07-25 08:25:14 (4 hours ago)	Scanning for CMS vulnerabilities on a non-CMS system: /.gitlab-ci.yml	Web App Attack
Anonymous	2026-07-25 08:01:52 (4 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.35.157.48 (48.157.35.34.bc.googleuse ... show more (mod_security) mod_security triggered on hostname [redacted] 34.35.157.48 (48.157.35.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 XICTRON	2026-07-25 07:50:06 (4 hours ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-07-25 07:49:05 (4 hours ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 07:46:41 (5 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.35.157.48 (48.157.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.35.157.48 (48.157.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 03:46:34.325307 2026] [security2:error] [pid 1123766:tid 1123766] [client 34.35.157.48:50548] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dashboard.alitcogroup.com\|F\|2"] [data ".alitcogroup.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dashboard.alitcogroup.com"] [uri "/z9x8c7v6b5-debug-trigger-dashboard.alitcogroup.com"] [unique_id "amRp2k0PxhVoaFczVxlcTwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇺🇸 167.71.175.236

🇨🇳 119.53.253.2

🇳🇱 45.148.10.239

🇫🇮 35.228.6.219

🇧🇪 35.205.92.76

🇫🇮 209.85.208.182

🇮🇶 185.147.101.196

🇲🇾 165.154.147.69

🇺🇸 157.245.246.139

🇯🇴 86.108.68.40

🇺🇸 66.132.195.33

🇰🇷 34.47.64.105

🇺🇸 142.171.227.7

🇧🇷 131.100.242.102

🇨🇳 113.0.152.164

🇻🇳 103.57.220.144

🇳🇱 91.92.42.147

🇪🇬 82.201.143.184

🇬🇧 51.38.71.55