JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.158.34.22

34.158.34.22 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	22.34.158.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.158.34.22

Whois 34.158.34.22

IP Abuse Reports for 34.158.34.22:

This IP address has been reported a total of 42 times from 32 distinct sources. 34.158.34.22 was first reported on August 27th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ruusvuu	2026-08-28 11:54:24 (7 hours ago)	Automated abuse report: 25 attack/probe requests from Google LLC / SG. Targeted paths: /@fs/proc/sel ... show more Automated abuse report: 25 attack/probe requests from Google LLC / SG. Targeted paths: /@fs/proc/self/environ, /@fs/etc/passwd, /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ, /@fs/var/run/secrets/kubernetes.io/serviceaccount/token, /@fs/app/credentials.json. Sample log lines: [splitser] 34.158.34.22 - [28/Aug/2026:11:54:23 +0000] "GET /@fs/root/.config/gcloud/application_default_credentials.json?raw??" 404 "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.a… [splitser] 34.158.34.22 - [28/Aug/2026:11:54:23 +0000] "GET /@fs/home/ubuntu/.config/gcloud/application_default_credentials.json?raw??" 404 "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36… [splitser] 34.158.34.22 - [28/Aug/2026:11:54:23 +0000] "GET /@fs/root/.azure/credentials?raw??" 404 "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; co… Detected by an automated web-server log monitor. show less	Web App Attack
🇬🇧 consul.to	2026-08-28 11:40:57 (7 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 entangled_mongoose	2026-08-28 09:25:19 (10 hours ago)	Probed /wp-config.php.	Web App Attack
🇦🇹 penguin-solutions.at	2026-08-28 09:23:20 (10 hours ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-08-28 08:08:00 (11 hours ago)	2026-08-28 @ 10:07:59 (CET) ~ Blocked for trying to access: /@fs/.env?raw??	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 07:50:47 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 03:50:41.582191 2026] [security2:error] [pid 7414:tid 7414] [client 34.158.34.22:53806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.angelachawkins.com"] [uri "/@fs/src/.env"] [unique_id "apE90e7w2vUSNrFN6eycKQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 06:40:51 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:40:45.473573 2026] [security2:error] [pid 6720:tid 6856] [client 34.158.34.22:3266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.asrtrax.com"] [uri "/@fs/.env"] [unique_id "apEtbcwT5LTbNZlah3g6VAAAAY0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 05:34:00 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 01:33:56.317178 2026] [security2:error] [pid 21988:tid 21988] [client 34.158.34.22:39226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itsopossum.flyingdodostudio.com"] [uri "/@fs/app/.env"] [unique_id "apEdxFbQih766H09NQGxngAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 zumbo.net	2026-08-28 05:32:03 (14 hours ago)	[Fri Aug 28 08:30:21.642625 2026] [proxy_fcgi:error] [pid 3085384:tid 3085408] [client 34.158.34.22: ... show more [Fri Aug 28 08:30:21.642625 2026] [proxy_fcgi:error] [pid 3085384:tid 3085408] [client 34.158.34.22:0] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:30:21.656531 2026] [proxy_fcgi:error] [pid 3085384:tid 3085409] [client 34.158.34.22:0] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:30:33.217077 2026] [proxy_fcgi:error] [pid 3085385:tid 3085429] [client 34.158.34.22:0] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:30:33.220343 2026] [proxy_fcgi:error] [pid 3085384:tid 3085401] [client 34.158.34.22:0] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:32:02.598735 2026] [proxy_fcgi:error] [pid 3085385:tid 3085410] [client 34.158.34.22:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 05:00:30 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 01:00:19.297698 2026] [security2:error] [pid 32386:tid 32386] [client 34.158.34.22:65496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tgcindustrial.com"] [uri "/@fs/src/.env"] [unique_id "apEV4wk-H3ze2Ti-0pgOMgAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-28 03:50:06 (15 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-28 03:42:14 (15 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 yitzhaq	2026-08-28 03:24:18 (16 hours ago)	34.158.34.22 - - [28/Aug/2026:05:24:14 +0200] "GET /@fs/home/ubuntu/.aws/config?raw?? HTTP/1.1" 404 ... show more 34.158.34.22 - - [28/Aug/2026:05:24:14 +0200] "GET /@fs/home/ubuntu/.aws/config?raw?? HTTP/1.1" 404 766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.17) Gecko/20100101 Firefox/128.17; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.158.34.22 - - [28/Aug/2026:05:24:14 +0200] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 404 766 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.158.34.22 - - [28/Aug/2026:05:24:14 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 766 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/126.0.2165.69 Mobile Safari/537.36" 34.158.34.22 - - [28/Aug/2026:05:24:14 +0200] "GET /@fs/root/.aws/credentials.bak?raw?? HTTP/1.1" 404 766 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.158.34.22 - - [28/Aug/2026:05:24:14 +0200] "GET /@fs/../.env?raw?? show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-28 03:16:07 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.158.34.22 (22.34.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 23:16:02.647254 2026] [security2:error] [pid 18515:tid 18515] [client 34.158.34.22:29736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.crowmoonmarketing.com"] [uri "/@fs/../.env"] [unique_id "apD9ciAlrYrK2UAwxQ3NEAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-28 03:11:12 (16 hours ago)	Bot / seems abusive / Apache connections: 37	DDoS Attack Web Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.79

🇦🇷 181.23.123.157

🇺🇸 170.253.206.5

🇱🇺 64.89.161.219

🇭🇰 61.239.126.80

🇳🇱 45.148.10.141

🇰🇷 222.120.176.6

🇹🇼 198.235.24.78

🇹🇼 198.235.24.38

192.168.254.70

🇦🇷 181.20.213.7

🇨🇳 175.43.184.238

🇮🇳 122.160.137.230

🇿🇦 102.214.117.223

🇬🇧 92.18.106.108

🇺🇸 66.132.186.137

🇯🇵 34.97.199.162

🇺🇸 34.24.97.99

🇻🇳 27.79.42.143

🇧🇪 198.235.24.252