JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.79.48.103

34.79.48.103 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 51%: ?

51%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	103.48.79.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.79.48.103

Whois 34.79.48.103

IP Abuse Reports for 34.79.48.103:

This IP address has been reported a total of 15 times from 7 distinct sources. 34.79.48.103 was first reported on September 20th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-20 14:21:02 (7 minutes ago)	(mod_security) mod_security (id:243320) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:243320) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:20:56.708085 2026] [security2:error] [pid 28570:tid 28570] [client 34.79.48.103:40906] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)\|\|mindforestmovie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mindforestmovie.com"] [uri "/.profile"] [unique_id "aq_ryNxxwwZD-5r_nClyEwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-09-20 14:11:15 (17 minutes ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-20 14:00:13 (28 minutes ago)	(mod_security) mod_security (id:210730) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:00:09.129324 2026] [security2:error] [pid 26560:tid 26560] [client 34.79.48.103:35130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|michaelgardner.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelgardner.com"] [uri "/ssl/server.key"] [unique_id "aq_m6bUPfT-mZ79n_buYaQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 13:44:04 (44 minutes ago)	(mod_security) mod_security (id:210730) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:43:59.240048 2026] [security2:error] [pid 4521:tid 4521] [client 34.79.48.103:55860] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|merlinaerospace.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "merlinaerospace.com"] [uri "/rclone.conf"] [unique_id "aq_jH2pDJZgN_yljgaGI_wAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 13:24:28 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:24:20.890905 2026] [security2:error] [pid 18555:tid 18555] [client 34.79.48.103:39988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "megaandina.com"] [uri "/utils/.env"] [unique_id "aq_ehD29VGfTIGJXtSahbgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 13:04:44 (1 hour ago)	(mod_security) mod_security (id:243320) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:243320) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:04:38.912867 2026] [security2:error] [pid 21268:tid 21268] [client 34.79.48.103:38596] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)\|\|mcacpas.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mcacpas.com"] [uri "/.profile"] [unique_id "aq_Z5giAF_1w7HVaerKlMwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-20 12:55:09 (1 hour ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 12:48:15 (1 hour ago)	(mod_security) mod_security (id:210730) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:48:09.871656 2026] [security2:error] [pid 11257:tid 11331] [client 34.79.48.103:33086] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mateo-abogados.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mateo-abogados.com"] [uri "/z9x8c7v6b5-debug-trigger-mateo-abogados.com"] [unique_id "aq_WCSYn-no4wIUUQGF2SQAAAZA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-09-20 12:36:13 (1 hour ago)	BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:user-agent. (1100000-122)	Bad Web Bot
🇫🇷 dynamix	2026-09-20 12:33:28 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇩🇪 maxpower	2026-09-20 12:22:02 (2 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.79.48.103 (BE/Belgium/103.48.79.34.bc ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.79.48.103 (BE/Belgium/103.48.79.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.79.48.103 - - [20/Sep/2026:14:21:59 +0200] "GET /.aws/credentials HTTP/2.0" 200 4811 "http://marialauracaselli.com:8080/.aws/credentials" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" "34.79.48.103" host=marialauracaselli.com show less	Port Scan
🇺🇸 TPI-Abuse	2026-09-20 12:21:48 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:21:41.983310 2026] [security2:error] [pid 27311:tid 27311] [client 34.79.48.103:58036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariakhalitov.com"] [uri "/.env.backup"] [unique_id "aq_P1Rpeg7bZZPI7kR0tiQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-20 12:10:03 (2 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 12:05:08 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.79.48.103 (103.48.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:05:03.965555 2026] [security2:error] [pid 14054:tid 14054] [client 34.79.48.103:60324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "malta-boat-registration.com"] [uri "/apps/.env"] [unique_id "aq_L71I2E852MOTFZAfQ-AAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-09-20 10:40:59 (3 hours ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 188.166.214.6

🇷🇸 178.222.99.154

🇺🇸 157.230.235.43

🇨🇳 125.77.129.193

🇲🇰 92.53.15.232

🇨🇦 85.217.149.63

🇫🇷 85.217.140.34

🇫🇷 85.217.140.30

🇪🇸 79.147.63.215

🇩🇪 69.5.169.54

🇺🇸 64.94.159.220

🇱🇹 62.60.130.242

🇺🇸 34.73.187.195

🇺🇸 20.119.76.17

🇷🇺 212.35.184.239

🇭🇰 152.32.186.193

🇺🇸 143.244.175.181

🇺🇸 70.184.96.172

🇷🇴 2.57.121.112

🇰🇪 197.248.236.155