AbuseIPDB » 34.7.245.222
34.7.245.222
This IP was reported 9 times. Confidence of
Abuse
is 33% : ?
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
222.245.7.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇳🇱
Netherlands
City
Groningen, Groningen
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 34.7.245.222 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
34.7.245.222 was first reported on
May 10th 2026 , and the most recent report was
3 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇮
23p02732
2026-05-19 14:53:50
(3 weeks ago)
Mailserver and mailaccount attacks
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇨🇿
kronos
2026-05-19 00:21:57
(3 weeks ago)
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:1600 | alerts5m:62321
Port Scan
🇳🇱
homeshowdomain.nl
2026-05-16 22:04:04
(3 weeks ago)
Auto-ban: 1036 malicious requests on 2026-05-15 (e.g., env/backup probes, brute-force, or error burs ...
show more
Auto-ban: 1036 malicious requests on 2026-05-15 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇦🇷
whost
2026-05-15 08:46:00
(3 weeks ago)
bfa
Brute-Force
🇦🇹
penguin-solutions.at
2026-05-15 07:19:04
(3 weeks ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 04:34:13
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.7.245.222 (222.245.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.245.222 (222.245.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:34:08.033086 2026] [security2:error] [pid 12427:tid 12427] [client 34.7.245.222:59072] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||johnsshoehospital.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "johnsshoehospital.com"] [uri "/api.sql"] [unique_id "agaiQAgKlsjcDa67INDYlAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-15 02:04:42
(3 weeks ago)
(caddyscan) Scanner path probe from 34.7.245.222 (NL/The Netherlands/222.245.7.34.bc.googleuserconte ...
show more
(caddyscan) Scanner path probe from 34.7.245.222 (NL/The Netherlands/222.245.7.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.7.245.222 - - [15/May/2026:02:04:36 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.7.245.222 - - [15/May/2026:02:04:37 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.7.245.222 - - [15/May/2026:02:04:38 +0000] "GET /.env.tar HTTP/1.1"
[REDACTED] 200 2627 34.7.245.222 - - [15/May/2026:02:04:39 +0000] "GET /.env.tar.bz2 HTTP/1.1"
[REDACTED] 200 2627 34.7.245.222 - - [15/May/2026:02:04:39 +0000] "GET /.env.tgz HTTP/1.1"
show less
Port Scan
🇧🇪
cmbplf
2026-05-11 01:35:08
(1 month ago)
364 requests with url.path *.sql.gz
Brute-Force
Bad Web Bot
🇩🇪
ghostwarriors
2026-05-10 17:20:06
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: