This IP address has been reported a total of
34
times from
29 distinct
sources.
34.22.42.162 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
XORP (haproxy): 270x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_i ...
show moreXORP (haproxy): 270x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Automated report from web, SSH and FTP server logs: 350 requests probing for exposed secrets (.env, ...
show moreAutomated report from web, SSH and FTP server logs: 350 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-16 18:05 UTC, last reported 2026-10-17 07:05 UTC; counts cover the current log rotation window.
show less
Hacking
Web App Attack
Anonymous
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.22.42.162 (162.42.22.34.bc.googleusercont ...
show more(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.22.42.162 (162.42.22.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.22.42.162 - - [17/Oct/2026:00:31:00 +0200] "GET /.env HTTP/1.1" 406 518 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.42.162 - - [17/Oct/2026:00:31:00 +0200] "GET /.env.local HTTP/1.1" 406 4886 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.42.162 - - [17/Oct/2026:00:31:00 +0200] "GET /.env.production HTTP/1.1" 406 4885 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
34.22.42.162 - - [16/Oct/2026:19:55:49 +0200] "GET /.git/config HTTP/1.1" 404 465 "-" "Mozilla/5.0 ( ...
show more34.22.42.162 - - [16/Oct/2026:19:55:49 +0200] "GET /.git/config HTTP/1.1" 404 465 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Port Scan
Brute-Force
Anonymous
[Fri Oct 16 19:12:04.425471 2026] [php:error] [pid 2618492:tid 2618492] [client 34.22.42.162:38212] ...
show more[Fri Oct 16 19:12:04.425471 2026] [php:error] [pid 2618492:tid 2618492] [client 34.22.42.162:38212] script '/var/www/webmail/phpinfo.php' not found or unable to stat
...
show less
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.42.162 - - [16/Oct/2026:15:14:02 +0200] "GET /.git/config HTTP/1.1" 404 1434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
(mod_security) mod_security (id:210492) triggered by 34.22.42.162 (US/United States/162.42.22.34.bc. ...
show more(mod_security) mod_security (id:210492) triggered by 34.22.42.162 (US/United States/162.42.22.34.bc.googleusercontent.com): 10 in the last 3600 secs
show less
Malicious web probe on bearstool.com: 34.22.42.162 - - [16/Oct/2026:07:55:07 -0400] "GET /.git/confi ...
show moreMalicious web probe on bearstool.com: 34.22.42.162 - - [16/Oct/2026:07:55:07 -0400] "GET /.git/config HTTP/1.1" 444 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
Showing 1 to
15
of 34 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ