This IP address has been reported a total of
15
times from
14 distinct
sources.
34.22.160.102 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Coordinated GCP credential-harvesting campaign against 84.46.253.134. Targeted GCP service account k ...
show moreCoordinated GCP credential-harvesting campaign against 84.46.253.134. Targeted GCP service account keys + Firebase credentials. ZAC Bayern ref BY0257-500359-26/8.
show less
Blocked by UFW (TCP on 80)
Source port: 38120
TTL: 59
Packet length: 60
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 38120
TTL: 59
Packet length: 60
TOS: 0x00
This report (for 34.22.160.102) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show moreTriggered Cloudflare WAF (firewallManaged) from BE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /info.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
{"ClientAddr":"104.23.225.192:10366","ClientHost":"34.22.160.102","ClientPort":"10366","ClientUserna ...
show more{"ClientAddr":"104.23.225.192:10366","ClientHost":"34.22.160.102","ClientPort":"10366","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":18590554,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":18590554,"RequestAddr":"phpmyadmin.timvdberg.dev","RequestContentSize":0,"RequestCount":26321,"RequestHost":"phpmyadmin.timvdberg.dev","RequestMethod":"GET","RequestPath":"/.env","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"https-0-g781j1l22qyid4grmjq8a0lf-phpmyadmin@docker","StartLocal":"2026-05-25T20:17:03.648505238Z","StartUTC":"2026-05-25T20:17:03.648505238Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"34.22.160.102","request_X-Forwarded-For":"34.22.160.102","request_X-Real-Ip":"104.23.225.192","time":"2026-05-25T20:17:03Z"}
{"ClientAddr":"172.68.151.108:13246","ClientHost":"34.22.160.102","Clien
...
show less
(mod_security) mod_security triggered on hostname [redacted] 34.22.160.102 (BE/Belgium/102.160.22.34 ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.22.160.102 (BE/Belgium/102.160.22.34.bc.googleusercontent.com)
show less
time="2026-05-24T08:05:12Z" level=info msg="Access to https://portainer.sw0ok.dev/.env (method GET) ...
show moretime="2026-05-24T08:05:12Z" level=info msg="Access to https://portainer.sw0ok.dev/.env (method GET) is not authorized to user <anonymous>, responding with status code 401 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F.env&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=34.22.160.102
time="2026-05-24T08:05:14Z" level=info msg="Access to https://portainer.sw0ok.dev/.git/config (method GET) is not authorized to user <anonymous>, responding with status code 401 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F.git%2Fconfig&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=34.22.160.102
time="2026-05-24T08:05:15Z" level=info msg="Access to https://portainer.sw0ok.dev/.env (method GET) is not authorized to user <anonymous>, responding with status code 401 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F.env&rm=GET" method=GET path=/api/authz/forward-au
...
show less
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /google-services.json
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less