JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.22.194.238

34.22.194.238 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	238.194.22.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.22.194.238

Whois 34.22.194.238

IP Abuse Reports for 34.22.194.238:

This IP address has been reported a total of 25 times from 25 distinct sources. 34.22.194.238 was first reported on October 23rd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 lakered	2026-10-23 12:37:44 (3 days ago)	Detectors: [nginx_monitor, NGINX] \| Reasons: Nginx: Default server trap hit \| Invalid HTTP protocol ... show more Detectors: [nginx_monitor, NGINX] \| Reasons: Nginx: Default server trap hit \| Invalid HTTP protocol or SSTP scan attempt detected on sinkhole \| Evidence: High-Criminality-Signature (p0f::64:0::mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.99), OS-Signature-Mismatch (UA:Windows/p0f:Linux) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 \| TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:1421m) show less	Port Scan Exploited Host
🇳🇱 ItsJustStan	2026-10-23 07:38:24 (4 days ago)	Multi-protocol port scanner sending binary payloads to HTTP port	Port Scan
🇻🇳 edata-vn	2026-10-23 07:21:32 (4 days ago)	"GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck ... show more "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 aks4226	2026-10-23 06:53:21 (4 days ago)	Attacking common web applications. (n01)	Web App Attack
🇹🇷 pashait	2026-10-23 06:49:46 (4 days ago)	Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (1 events in 5min) at 2026-10-23 06:49	Web App Attack Bad Web Bot
Anonymous	2026-10-23 06:20:11 (4 days ago)	Fail2Ban nginx-bad-request on Security-Instance. Persistent malicious activity detected. Evidence: / ... show more Fail2Ban nginx-bad-request on Security-Instance. Persistent malicious activity detected. Evidence: /var/log/nginx/access.log:34.22.194.238 - - [23/Oct/2026:08:19:27 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x8B" 400 150 "-" "-" "-" /var/log/nginx/access.log:34.22.194.238 - - [23/Oct/2026:08:19:27 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" /var/log/nginx/access.log:34.22.194.238 - - [23/Oct/2026:08:19:32 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-" /var/log/nginx/access.log:34.22.194.238 - - [23/Oct/2026:0 show less	Web App Attack
🇩🇪 HoneyPotFRI	2026-10-23 06:18:56 (4 days ago)	34.22.194.238 - - [23/Oct/2026:08:18:41 +0200] "x16x03x00x00ix01x00x00ex03x03Ux1CxA7xE4random1random ... show more 34.22.194.238 - - [23/Oct/2026:08:18:41 +0200] "x16x03x00x00ix01x00x00ex03x03Ux1CxA7xE4random1random2random3random4x00x00x0Cx00/x00" 400 157 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-23 06:15:39 (4 days ago)	Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ... show more Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Oct 23, 06:15 UTC. Origin: Belgium, Brussels. show less	Hacking Bad Web Bot Web App Attack
🇹🇷 Domainhizmetleri.com	2026-10-23 06:14:56 (4 days ago)	Source: DH Hunter (Honeypot) \| Reason: HTTP Probe (80/tcp)	Web App Attack
🇩🇪 Starburst SysOp Team	2026-10-23 06:09:58 (4 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-2)	Hacking Bad Web Bot
Anonymous	2026-10-23 05:56:41 (4 days ago)	SSH brute force detected by CrowdSec	Brute-Force
🇭🇺 HoneyPotEu	2026-10-23 05:47:43 (4 days ago)	34.22.194.238 - - [23/Oct/2026:07:47:41 +0200] "GET /pub/ HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compat ... show more 34.22.194.238 - - [23/Oct/2026:07:47:41 +0200] "GET /pub/ HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible)" 34.22.194.238 - - [23/Oct/2026:07:47:41 +0200] "GET /files/ HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible)" ... show less	Bad Web Bot Web App Attack
🇩🇪 Serpentex	2026-10-23 05:22:01 (4 days ago)	34.22.194.238 - - [23/Oct/2026:07:21:55 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03h\xEB4\x ... show more 34.22.194.238 - - [23/Oct/2026:07:21:55 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03h\xEB4\xB4\xDB\xAC\xBB\x8A\x15\x88\x1C7<\xC3\xC9\x05\xE6i\x8C\x16_N\xA9`\xCEd\x8E\xA7\xE0hB* \xB5'\x9B\x8E`\x88\xA3\xB0\xDD\x97\xB7\xD6\xF4 \xCD*9\xF3\xB8\xEEJ\xEC\x8A3\x13\xDB\x1BEt\x9Dy\xDB\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 34.22.194.238 - - [23/Oct/2026:07:22:00 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 34.22.194.238 - - [23/Oct/2026:07:22:00 +0200] "\x91\x5C\x90\xBE\xE0\xBE\xBF\x1C\x10\x9B\xE3\x07R\xB9\x13\xC9w\x97M\xC1a\xCBvAw\xB8&\xDBY'\xF5\xCA\xAAn\xA0f\x06=\x1D\xC6\xF4\xEF\x8A\xD1i\x95\x88\xCF\x10\x1B\xDB\xCFV\x814!\x93\x10\x91q-\xB7\xED\xE6" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
🇫🇷 Kejult	2026-10-23 04:57:20 (4 days ago)	Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 3 application-level events across 3 ... show more Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 3 application-level events across 3 source port(s). Sensor(s): Tanner. show less	Port Scan
🇹🇭 MWA SOC	2026-10-23 04:00:09 (4 days ago)		Hacking

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.227.149.237

🇬🇧 51.89.129.107

🇲🇽 201.141.120.25

🇬🇧 198.244.168.128

🇺🇸 195.184.76.49

🇦🇷 186.139.251.57

🇺🇸 172.200.195.165

🇮🇳 159.65.154.1

🇵🇰 153.117.13.236

🇲🇴 125.31.2.160

🇮🇳 124.123.68.73

🇮🇳 103.207.9.246

🇫🇷 92.170.33.146

🇺🇦 91.197.19.196

🇷🇺 91.185.75.244

🇵🇹 85.241.114.218

🇬🇧 84.92.119.106

🇺🇸 68.183.52.89

🇺🇦 46.33.39.134

🇭🇳 45.190.187.105