JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.81.158.22

34.81.158.22 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	22.158.81.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.81.158.22

Whois 34.81.158.22

IP Abuse Reports for 34.81.158.22:

This IP address has been reported a total of 45 times from 35 distinct sources. 34.81.158.22 was first reported on October 14th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Secure Gateway®️	2026-10-14 22:00:20 (2 days ago)	Report By Secure Gateway Security Team: Unsolicited Connection Attempt	Web App Attack
🇺🇸 ALSCO®️	2026-10-14 22:00:20 (2 days ago)	Report By ALSCO Security Team: Unauthorized Connection Attempt	SQL Injection
🇫🇷 Murazaki	2026-10-14 18:39:58 (2 days ago)	home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:18 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_u ... show more home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:18 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 13556 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" "[fc00:db8:2::13]:9000" home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:18 +0200] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 13548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "172.22.0.19:9000" home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:19 +0200] "POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/2.0" 403 13553 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "172.22.0.19:9000 ... show less	Bad Web Bot
🇳🇱 e.fierstra	2026-10-14 18:37:39 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 Murazaki	2026-10-14 18:10:13 (2 days ago)	home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:12 +0200] "-" 500 170 "-" "-" "-" ...	Hacking
🇫🇷 LiloBzH	2026-10-14 17:40:54 (2 days ago)	34.81.158.22 - - [14/Oct/2026:19:40:45 +0200] "GET /.git/config HTTP/1.1" 404 118 "-" "DuckAssistBot ... show more 34.81.158.22 - - [14/Oct/2026:19:40:45 +0200] "GET /.git/config HTTP/1.1" 404 118 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.81.158.22 - - [14/Oct/2026:19:40:52 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.81.158.22 - - [14/Oct/2026:19:40:52 +0200] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" show less	Web App Attack
🇺🇸 jormaster3k	2026-10-14 17:38:42 (2 days ago)	Attack against Apache (too many 404s)	Web App Attack
🇬🇧 Aetherweb Ark	2026-10-14 17:27:14 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 34.81.158.22 (TW/Taiwan/22.158.81.34.bc.googleu ... show more (mod_security) mod_security (id:949110) triggered by 34.81.158.22 (TW/Taiwan/22.158.81.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇧🇪 cmbplf	2026-10-14 17:26:59 (2 days ago)	1.837 requests with url.path .env 175 requests with url.path /proc/* 125 requests with url.path ... show more 1.837 requests with url.path .env 175 requests with url.path /proc/* 125 requests with url.path .ssh/ show less	Brute-Force Bad Web Bot
🇸🇪 SkyDancer	2026-10-14 16:56:36 (2 days ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇳🇱 Alt255	2026-10-14 16:42:09 (2 days ago)	[cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ... show more [cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.81.158.22 - - [14/Oct/2026:18:42:04 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.81.158.22 - - [14/Oct/2026:18:42:04 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.81.158.22 - - [14/Oct/2026:18:42:04 +0200] "GET /dist/manifest.json HTTP/2.0" 404 20345 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.81.158.22 - - [14/Oct/2026:18:42:04 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 16:35:38 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.81.158.22 (22.158.81.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.81.158.22 (22.158.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:35:32.205476 2026] [security2:error] [pid 17051:tid 17051] [client 34.81.158.22:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cms.swarnar.com\|F\|2"] [data ".swarnar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cms.swarnar.com"] [uri "/z9x8c7v6b5-debug-trigger-cms.swarnar.com"] [unique_id "as-vVJYtBTPrNTt-yiHdigAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-10-14 16:06:39 (2 days ago)	Scanning for exposed credentials and private keys	Hacking
🇩🇪 pscriptos	2026-10-14 15:33:35 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇧🇷 ICS Labs	2026-10-14 15:19:55 (2 days ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-14 UTC.	Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 109.160.32.162

🇺🇿 84.54.73.208

🇩🇪 34.159.221.79

🇫🇷 2001:41d0:33a:a00::409

🇺🇸 195.184.76.178

🇬🇧 188.240.59.51

🇨🇳 116.179.32.92

🇧🇩 114.130.253.3

🇧🇪 104.199.36.53

🇺🇸 66.132.195.86

🇨🇦 45.198.224.119

🇧🇷 45.161.214.200

🇫🇷 45.141.22.206

🇮🇳 20.207.202.183

🇧🇪 198.235.24.227

🇳🇱 193.47.62.187

🇧🇷 179.129.253.75

🇩🇪 167.94.146.42

🇮🇳 103.88.76.27

🇭🇰 42.200.66.164