JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.22.237.214

Recent Activity

Abuse Confidence Score

100% Critical

38 reports

32 reporters · latest 15 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 214.237.22.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

38 from 32 distinct reporters

First reported

September 20th 2025

Most recent report

15 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇺🇸 United States of America 5 🇫🇷 France 4

Most common categories Web App Attack 28 Bad Web Bot 11 Hacking 7 Brute-Force 6 Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 altenglaner	2026-10-28 06:50:24 (15 hours ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
🇳🇱 middelkoopcc	2026-10-28 05:58:15 (15 hours ago)	2026-10-28 06:56:50 GET /credentials.json [301] && 2026-10-28 06:56:50 GET /.git/HEAD [301] && 2026-10-28 06:56:50 GET /.aws/credentials [301] && 189 more within 20 minutes	Web App Attack
🇫🇷 spongebob1234	2026-10-28 05:29:33 (16 hours ago)	Wazuh SIEM: 26 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : Web (Bad Bot / Scanner), Web (Bot d'indexation / Crawler), Web (Erreur 404 Non Trouvé).	Port Scan Hacking Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-27 19:58:39 (1 day ago)	[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.237.214 - - [27/Oct/2026:20:58:12 +0100] "GET /.env?raw HTTP/2.0" 403 369 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatibl ... show more [ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.237.214 - - [27/Oct/2026:20:58:12 +0100] "GET /.env?raw HTTP/2.0" 403 369 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-27 18:08:53 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.22.237.214 (BE/Belgium/214.237.22.34.bc.googleusercontent.com)	SQL Injection
🇧🇷 ICS Labs	2026-10-27 18:08:24 (1 day ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-27 UTC.	Brute-Force
🇺🇸 TPI-Abuse	2026-10-27 16:49:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.22.237.214 (214.237.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 12:48:57.942233 2026] [security2:error] [pid 28427:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.22.237.214 (214.237.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 12:48:57.942233 2026] [security2:error] [pid 28427:tid 28427] [client 34.22.237.214:57942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.piments.com"] [uri "/.htpasswd"] [unique_id "auDV-ZSWasA9gnw-FyikeAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-10-27 14:20:22 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-27 14:15:48 (1 day ago)	34.22.237.214 - - [27/Oct/2026:15:15:45 +0100] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 294 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.22.237.214 - - [27/Oct/2026:15:1 ... show more 34.22.237.214 - - [27/Oct/2026:15:15:45 +0100] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 294 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.22.237.214 - - [27/Oct/2026:15:15:45 +0100] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 34.22.237.214 - - [27/Oct/2026:15:15:45 +0100] "GET /.env.development::$DATA?raw HTTP/2.0" 303 404 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.22.237.214 - - [27/Oct/2026:15:15:45 +0100] "GET /.env.production::$DATA?raw HTTP/2.0" 303 402 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.22.237.214 - - [27/Oct/2026:15:15:45 +0100] "GET /pages/index.astro.mjs.map HTTP/2.0" 303 398 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.22.237.214 - - [27/Oct/2026:15:15:45 +0100] "GET /@fs/proc show less	Bad Web Bot
🇩🇪 23p02732	2026-10-27 13:32:16 (1 day ago)	Automated web scanning and malicious probing	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ruusvuu	2026-10-27 13:26:08 (1 day ago)	Automated abuse report: 25 attack/probe requests from Google LLC / BE. Targeted paths: /@fs/proc/self/cmdline, /@fs/var/run/secrets/kubernetes.io/serviceaccount/token, /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt, /e117a589828a408c/fx6ab7 ... show more Automated abuse report: 25 attack/probe requests from Google LLC / BE. Targeted paths: /@fs/proc/self/cmdline, /@fs/var/run/secrets/kubernetes.io/serviceaccount/token, /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt, /e117a589828a408c/fx6ab7.js.map. Sample log lines: [phpMyDEV] [10/27/2026 06:26:06] 34.22.237.214 - GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw?? 404 8563 - 2.367 ms - referrer: - [phpMyDEV] [10/27/2026 06:26:06] 34.22.237.214 - GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw?? 404 8565 - 2.176 ms - referrer: - [phpMyDEV] [10/27/2026 06:26:06] 34.22.237.214 - GET /e117a589828a408c/fx6ab7.js.map 404 - - 1.329 ms - referrer: - Detected by an automated web-server log monitor. show less	Web App Attack
🇳🇱 Site.eu	2026-10-27 10:57:28 (1 day ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇨🇦 CentiDevOps	2026-10-27 10:52:45 (1 day ago)	Web app scan: 68 requests in 1 s across 2 domains (301/404). Paths: /.git/HEAD, /.git/config, /fr/.git/HEAD (+16 more). Sample: 2026-10-27T10:52:45Z "GET /.git/config" 301	Hacking Web App Attack
🇨🇦 polycoda	2026-10-27 10:49:23 (1 day ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)	Hacking Bad Web Bot Web App Attack
🇫🇷 spongebob1234	2026-10-27 06:20:52 (1 day ago)	Wazuh SIEM: 740 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : Web (Bad Bot / Scanner), Web (Bot d'indexation / Crawler), Web (Erreur 403 Interdit), Web (Erreur 404 Non Trouvé).	Port Scan Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 190.89.55.250

🇺🇸 172.191.239.155

🇧🇷 170.246.224.138

🇺🇸 165.154.255.63

🇮🇹 151.59.121.114

🇺🇸 68.10.53.113

🇺🇸 43.135.182.43

🇺🇸 216.36.112.159

🇹🇷 213.142.159.216

🇵🇱 194.180.49.53

🇬🇧 185.247.137.253

🇨🇭 179.43.153.2

🇸🇬 145.223.147.248

🇨🇳 106.75.177.59

🇮🇳 103.87.175.110

🇭🇰 65.181.71.117

🇺🇸 64.144.28.27

🇺🇸 54.205.137.236

🇺🇸 52.44.229.124

🇬🇧 35.203.211.55