JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.47.27.22

34.47.27.22 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	22.27.47.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.47.27.22

Whois 34.47.27.22

IP Abuse Reports for 34.47.27.22:

This IP address has been reported a total of 32 times from 22 distinct sources. 34.47.27.22 was first reported on September 1st 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-09-03 11:14:32 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 08:08:11 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 04:08:05.855532 2026] [security2:error] [pid 19265:tid 19265] [client 34.47.27.22:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.nyemdr.com"] [uri "/www/.git/config"] [unique_id "apkq5QZ5FXpnCn68MmeDbAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-03 07:25:06 (8 hours ago)	Multiple WAF Violations	Web App Attack
🇨🇿 akac	2026-09-03 05:01:55 (10 hours ago)	Web vulnerability scanning: HTTP/1.1 GET /htdocs/.git/config	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 04:01:20 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 00:01:15.515394 2026] [security2:error] [pid 4078:tid 4078] [client 34.47.27.22:54570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessicalevant.com"] [uri "/public/.git/config"] [unique_id "apjxC5iUW6gpZAlQXxetZwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-03 03:03:09 (12 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 01:39:23 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:39:17.973530 2026] [security2:error] [pid 18873:tid 18873] [client 34.47.27.22:44632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.crearetest.com"] [uri "/api/.git/config"] [unique_id "apjPxW7eNn35ern0_Q5djAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-09-03 01:36:43 (14 hours ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇫🇷 masterguru	2026-09-03 01:00:21 (14 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 Philister11	2026-09-03 00:35:12 (15 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files (CA/AS396982)	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-09-02 22:00:35 (17 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-02 19:14:59 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.47.27.22 (22.27.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 15:14:54.087448 2026] [security2:error] [pid 2244:tid 2244] [client 34.47.27.22:44744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haisten.net"] [uri "/public/.git/config"] [unique_id "aph1rkr9-xgKFy5XTnp76QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 leasj	2026-09-02 13:41:50 (1 day ago)	Observed Scanned 12 known-sensitive endpoint(s), e.g.: /html/.git/config, /wordpress/.git/config, /. ... show more Observed Scanned 12 known-sensitive endpoint(s), e.g.: /html/.git/config, /wordpress/.git/config, /.git/config, /backend/.git/config, /public/.git/config. show less	Hacking Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-02 12:10:21 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-09-02 10:25:01 (1 day ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a02:c207:2271:181::1

🇦🇷 181.209.125.170

🇳🇱 80.242.227.154

🇨🇳 60.172.54.36

🇳🇱 46.151.178.11

🇳🇱 45.148.10.183

🇺🇸 34.148.186.62

🇮🇹 31.199.224.56

🇮🇩 210.79.142.201

🇺🇿 198.163.195.46

🇲🇽 187.198.189.129

🇺🇸 172.237.156.206

🇺🇸 158.94.187.67

🇸🇬 103.7.11.134

🇳🇱 93.123.109.53

🇫🇷 77.239.124.184

🇨🇳 61.160.213.144

🇸🇬 47.84.111.82

🇩🇪 46.236.203.226

🇺🇸 18.190.15.50