JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.166.134.22

34.166.134.22 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	22.134.166.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇦 Saudi Arabia
City	Dammam, Eastern Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.166.134.22

Whois 34.166.134.22

IP Abuse Reports for 34.166.134.22:

This IP address has been reported a total of 50 times from 35 distinct sources. 34.166.134.22 was first reported on September 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-19 13:31:16 (6 hours ago)	[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ... show more [livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.166.134.22 - - [19/Sep/2026:15:31:12 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-19 13:20:21 (6 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-19 12:51:30 (6 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-18 21:29:54 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 17:29:47.849054 2026] [security2:error] [pid 17663:tid 17663] [client 34.166.134.22:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.luisgtechgroup.com"] [uri "/.git/config"] [unique_id "aq2tS1ZwpbrMYPmYRRZAVQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 16:02:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 12:02:48.173396 2026] [security2:error] [pid 2187:tid 2187] [client 34.166.134.22:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.livingawakenedbook.com"] [uri "/.git/config"] [unique_id "aq1gqMh3cIIX_I18MVDWiAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 gtheo99	2026-09-18 15:03:01 (1 day ago)	(mod_security) mod_security (id:900006) triggered by 34.166.134.22 (SA/Saudi Arabia/22.134.166.34.bc ... show more (mod_security) mod_security (id:900006) triggered by 34.166.134.22 (SA/Saudi Arabia/22.134.166.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE) show less	Port Scan
🇩🇪 4server	2026-09-18 13:51:20 (1 day ago)	[FriSep1815:51:18.4628092026][security2:error][pid3708017:tid3708050][client34.166.134.22:0]ModSecur ... show more [FriSep1815:51:18.4628092026][security2:error][pid3708017:tid3708050][client34.166.134.22:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpanel.hdcadvisory.ch\"][uri\"/.env.bak\"][unique_id\"aq1B1lL4fN0qr0bXXglr-QAAAVY\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-09-18 11:02:16 (1 day ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/22.134.166.34.bc.googleuserconten ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/22.134.166.34.bc.googleusercontent.com show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 02:42:20 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 22:42:14.019363 2026] [security2:error] [pid 13191:tid 13191] [client 34.166.134.22:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.grainavi.com"] [uri "/.git/config"] [unique_id "aqylBiUYVUJk78ykwqkhEQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-17 23:21:09 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.goblinpot.online \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-17 13:10:04 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 4server	2026-09-17 12:48:33 (2 days ago)	[ThuSep1714:48:30.5118752026][security2:error][pid2189155:tid2189206][client34.166.134.22:0]ModSecur ... show more [ThuSep1714:48:30.5118752026][security2:error][pid2189155:tid2189206][client34.166.134.22:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpanel.galardi.ch\"][uri\"/.env.bak\"][unique_id\"aqvhnmGzMaxXZomqRgVkwAAAAAc\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 08:11:20 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.166.134.22 (22.134.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:11:14.136301 2026] [security2:error] [pid 17966:tid 17966] [client 34.166.134.22:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.frogmouthatx.com"] [uri "/.git/config"] [unique_id "aqugolGHIxIweh4TYf_0FwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-09-17 06:00:05 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 FD-IX	2026-09-17 03:28:30 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.9.228.120

🇮🇳 103.176.64.36

🇸🇬 47.79.197.242

🇸🇬 47.79.197.227

🇹🇳 41.227.234.187

🇩🇪 213.209.159.236

🇺🇸 185.139.214.221

🇬🇧 154.16.44.206

🇺🇿 87.192.248.10

🇸🇬 47.79.197.70

🇲🇽 200.52.196.233

🇧🇷 189.126.91.107

🇪🇨 186.47.77.39

🇧🇷 179.177.126.211

🇮🇩 156.230.191.193

🇧🇷 45.91.90.254

🇻🇳 14.225.239.154

🇺🇸 2605:a140:2358:419::1

🇺🇸 216.25.89.151

🇹🇼 198.235.24.105