JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.45.42.22

Activity Trending Down

Abuse Confidence Score

63% Elevated

44 reports

20 reporters · latest 3 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 22.42.45.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

44 from 20 distinct reporters

First reported

October 4th 2026

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 27 🇩🇪 Germany 3 🇫🇷 France 3

Most common categories Web App Attack 36 Bad Web Bot 32 Brute-Force 28 Hacking 3 Port Scan 3

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-06 08:08:57 (3 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal	Bad Web Bot Web App Attack
🇺🇸 EvilTurkey	2026-10-05 12:50:46 (3 weeks ago)	Web app attack against financial institution website.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-05 08:14:30 (3 weeks ago)	(mod_security) mod_security (id:218420) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 04:14:22.720550 2026] [security2:error] [pid 29026:tid 2902 ... show more (mod_security) mod_security (id:218420) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 04:14:22.720550 2026] [security2:error] [pid 29026:tid 29026] [client 34.45.42.22:55082] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|toepferlab.org\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "toepferlab.org"] [uri "/index.php"] [unique_id "asNcXtZZQvCKr14M3d76cwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇲 arm osint	2026-10-05 07:58:19 (3 weeks ago)	Automated web vulnerability scanning: 245 HTTP 4xx probes for sensitive paths (/api/graphql, /graphql, /v1/graphql, /%2Fadmin). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.	Web App Attack Brute-Force
Anonymous	2026-10-05 07:30:57 (3 weeks ago)	Blocked by ModSec and CSF	Port Scan
🇺🇸 TPI-Abuse	2026-10-05 07:10:13 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 03:10:06.494942 2026] [security2:error] [pid 16916:tid 1691 ... show more (mod_security) mod_security (id:210492) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 03:10:06.494942 2026] [security2:error] [pid 16916:tid 16916] [client 34.45.42.22:35874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sekel.org"] [uri "/.htpasswd"] [unique_id "asNNTkegC4yu4qs6cRhJ1QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-05 07:08:49 (3 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-05 06:41:31 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-10-05 06:14:48 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 02:14:42.140533 2026] [security2:error] [pid 12663:tid 1266 ... show more (mod_security) mod_security (id:210492) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 02:14:42.140533 2026] [security2:error] [pid 12663:tid 12663] [client 34.45.42.22:51640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perron.org"] [uri "/.htpasswd"] [unique_id "asNAUjGykx9NmmN3sFmHkgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-05 05:44:18 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 01:44:10.949315 2026] [security2:error] [pid 22091:tid 2209 ... show more (mod_security) mod_security (id:210492) triggered by 34.45.42.22 (22.42.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 01:44:10.949315 2026] [security2:error] [pid 22091:tid 22091] [client 34.45.42.22:38708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nhgrange.org"] [uri "/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env"] [unique_id "asM5KvM6PLwUPPidlA9V6wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2026-10-05 05:42:08 (3 weeks ago)	(PERMBLOCK) 34.45.42.22 (US/United States/22.42.45.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:	Brute-Force SSH
🇫🇮 oh.mg	2026-10-05 05:27:41 (3 weeks ago)	[Mon Oct 05 07:27:30.332804 2026] [security2:error] [pid 2450823:tid 2450841] [client 34.45.42.22:0] [client 34.45.42.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/shar ... show more [Mon Oct 05 07:27:30.332804 2026] [security2:error] [pid 2450823:tid 2450841] [client 34.45.42.22:0] [client 34.45.42.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "us.mmn.ca"] [uri "/@fs/home/ubuntu/.aws/credentials"] [unique_id "asM1Qqizp77v0FrLvXxYegAAAVA"] [Mon Oct 05 07:27:41.200968 2026] [security2:error] [pid 2570363:tid 2570367] [client 34.45.42.22:0] [client 34.45.42.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [ver "OWASP_CRS/4.10.0-dev ... show less	Web App Attack Bad Web Bot
🇳🇱 melroy89	2026-10-05 05:21:05 (3 weeks ago)	34.45.42.22 - - [05/Oct/2026:07:20:43 +0200] "POST / HTTP/2.0" 403 93 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" "melroy.org" 0.000 34.45.42.22 - - [05/Oct/2026:07:20:43 +0200] "GET /z9x8c7v6b5-debu ... show more 34.45.42.22 - - [05/Oct/2026:07:20:43 +0200] "POST / HTTP/2.0" 403 93 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" "melroy.org" 0.000 34.45.42.22 - - [05/Oct/2026:07:20:43 +0200] "GET /z9x8c7v6b5-debug-trigger-melroy.org HTTP/2.0" 403 93 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "melroy.org" 0.000 34.45.42.22 - - [05/Oct/2026:07:20:43 +0200] "GET /assets/manifest.json HTTP/2.0" 403 64 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "melroy.org" 0.001 34.45.42.22 - - [05/Oct/2026:07:20:43 +0200] "GET /8w59gnkmw6mjcf5savf4 HTTP/2.0" 403 93 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" "melroy.org" 0.002 34.45.42.22 - - [05/Oct/2026:07:20:43 +0200] "POST /graphql HTTP/2.0" 403 64 "https://me ... show less	Web App Attack
🇫🇷 LoneRider	2026-10-05 05:14:57 (3 weeks ago)	[05/Oct/2026:07:14:56.923840 +0200] asMyUIh704RM7WVDV07dUAAAAAQ 34.45.42.22 48820 127.0.0.1 7081 [05/Oct/2026:07:14:57.113647 +0200] asMyUYCobiilQ5WUoaIf1QAAAAI 34.45.42.22 48868 127.0.0.1 7081 [05/Oct/2026:07:14:57.181211 +0200] asMyUdp7T11Pt1IAEHpm ... show more [05/Oct/2026:07:14:56.923840 +0200] asMyUIh704RM7WVDV07dUAAAAAQ 34.45.42.22 48820 127.0.0.1 7081 [05/Oct/2026:07:14:57.113647 +0200] asMyUYCobiilQ5WUoaIf1QAAAAI 34.45.42.22 48868 127.0.0.1 7081 [05/Oct/2026:07:14:57.181211 +0200] asMyUdp7T11Pt1IAEHpmRgAAAAs 34.45.42.22 48914 127.0.0.1 7081 ... show less	Hacking
🇩🇪 bazter.pro	2026-10-05 05:14:31 (3 weeks ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 104.28.207.218

🇮🇳 223.185.53.215

🇰🇷 210.222.103.70

🇳🇱 195.178.110.227

🇦🇷 190.244.24.186

🇨🇳 180.153.236.80

🇯🇵 172.104.82.104

🇺🇸 129.121.140.71

🇮🇩 128.14.232.142

🇨🇦 109.204.35.75

🇮🇩 103.130.18.162

🇺🇸 96.244.120.123

🇷🇸 77.105.37.219

🇺🇸 65.49.1.192

🇩🇪 34.141.1.10

🇧🇪 34.38.81.253

🇻🇳 14.247.183.55

🇺🇸 13.89.123.94

🇨🇱 191.113.58.32

🇷🇺 178.176.83.98