JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.174.222.42

34.174.222.42 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 76%: ?

76%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	42.222.174.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.174.222.42

Whois 34.174.222.42

IP Abuse Reports for 34.174.222.42:

This IP address has been reported a total of 17 times from 14 distinct sources. 34.174.222.42 was first reported on October 26th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-27 07:40:21 (2 hours ago)	[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. E ... show more [backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.174.222.42 - - [27/Oct/2026:08:40:06 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-27 07:33:29 (2 hours ago)	34.174.222.42 - - [27/Oct/2026:08:33:12 +0100] "GET /info.php HTTP/1.1" 404 29617 34.174.222.42 - - ... show more 34.174.222.42 - - [27/Oct/2026:08:33:12 +0100] "GET /info.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:13 +0100] "GET /php.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:15 +0100] "GET /i.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:16 +0100] "GET /pi.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:18 +0100] "GET /pinfo.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:19 +0100] "GET /test.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:21 +0100] "GET /phpinfo HTTP/1.1" 404 30255 34.174.222.42 - - [27/Oct/2026:08:33:22 +0100] "GET /p.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:24 +0100] "GET /debug.php HTTP/1.1" 404 29617 34.174.222.42 - - [27/Oct/2026:08:33:26 +0100] "GET /info HTTP/1.1" 404 30255 ... show less	Web Spam Web App Attack
Anonymous	2026-10-27 06:03:39 (3 hours ago)	harvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. / ... show more harvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. /.env, /.git/config, /.env.production. Requests blocked by our WAF (automated report). show less	Web App Attack Hacking
Anonymous	2026-10-27 05:13:23 (4 hours ago)	Scan for .env Files at 2026-10-27T05:13:23+00:00	Web App Attack
🇺🇸 TPI-Abuse	2026-10-27 03:41:38 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:41:35.275596 2026] [security2:error] [pid 2490:tid 2490] [client 34.174.222.42:57766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisingforsex.com"] [uri "/.git/config"] [unique_id "auAdb_MW8TbgfV2Y9RXsZQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-27 03:10:29 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:10:26.121836 2026] [security2:error] [pid 8417:tid 8417] [client 34.174.222.42:49086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisedawgs.com"] [uri "/.git/config"] [unique_id "auAWInjq76zG54YOuaVZIgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-27 02:48:47 (7 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-10-27 02:15:53 (7 hours ago)	Web scanning / probing for vulnerable paths \| URL: /.env.sample \| Evidence: www.crucerofluvial.com 3 ... show more Web scanning / probing for vulnerable paths \| URL: /.env.sample \| Evidence: www.crucerofluvial.com 34.174.222.42 - - [27/Oct/2026:03:15:07 +0100] \"GET /.env.sample HTTP/1.1\" 403 213 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: US show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-10-27 00:05:30 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:05:25.034325 2026] [security2:error] [pid 16828:tid 16877] [client 34.174.222.42:36788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crowns.org"] [uri "/.git/config"] [unique_id "at_qxU-N_7JNyVRZDHfkZgAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 SecMario	2026-10-26 21:57:44 (11 hours ago)	CrowdSec/fail2ban: appsec-vpatch, http-sensitive-files, vpatch-CVE-2025-55182 (WAF), vpatch-env-acce ... show more CrowdSec/fail2ban: appsec-vpatch, http-sensitive-files, vpatch-CVE-2025-55182 (WAF), vpatch-env-access (WAF), vpatch-git-config (WAF) show less	Hacking Web App Attack
Anonymous	2026-10-26 21:57:11 (11 hours ago)	CrowdSec detection: crowdsecurity/http-sensitive-files	Web App Attack
🇩🇪 curiosity	2026-10-26 21:56:40 (11 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-10-26 21:41:22 (12 hours ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 20:41:41 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.174.222.42 (42.222.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:41:34.939493 2026] [security2:error] [pid 3946:tid 3946] [client 34.174.222.42:33396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crosswalk2026.org"] [uri "/.git/config"] [unique_id "at-6_uocWD5eNIZvgG36QAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-26 18:10:31 (15 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.121.77.168

🇳🇱 213.126.101.35

🇨🇭 209.99.190.113

🇧🇷 200.219.200.16

🇳🇱 185.136.15.81

🇵🇰 182.180.119.239

🇷🇺 178.234.247.32

🇷🇺 176.211.16.244

🇩🇪 167.94.145.16

🇺🇸 129.121.124.39

🇰🇷 119.199.176.30

🇱🇰 112.135.111.4

🇹🇼 111.70.29.158

🇧🇩 103.138.123.250

🇿🇦 102.222.20.174

🇷🇺 81.28.167.30

🇳🇱 45.153.34.230

🇳🇱 45.148.10.151

🇩🇪 213.209.159.228

🇹🇼 198.235.24.51