JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.143.221.193

Activity Trending Down

Abuse Confidence Score

60% Elevated

120 reports

80 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 193.221.143.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

120 from 80 distinct reporters

First reported

September 16th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 32 🇺🇸 United States of America 22 🇫🇷 France 11

Most common categories Web App Attack 87 Brute-Force 39 Bad Web Bot 35 Hacking 22 Port Scan 12

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-27 00:33:42 (1 month ago)	2026-09-25 23:01:26,940 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.143.221.193 ...	Bad Web Bot
Anonymous	2026-09-24 10:51:28 (1 month ago)	IP matched detection query more than 2 hosts and only bad rq long ban.	Brute-Force Web App Attack Hacking
🇩🇪 klaus_ph	2026-09-23 13:17:27 (1 month ago)	2026-09-23 00:35:23,724 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.143.221.193 ...	Bad Web Bot
🇧🇷 Peregrine	2026-09-20 03:10:42 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 34.143.221.193 172.70.208.85 - - [16/Sep/2026:23:29:55 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 414 34.143.221.193 172.70.208.85 - - [16/Sep/2026:23:29:56 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 4 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 34.143.221.193 172.70.208.85 - - [16/Sep/2026:23:29:55 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 414 34.143.221.193 172.70.208.85 - - [16/Sep/2026:23:29:56 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 414 34.143.221.193 172.70.208.125 - - [16/Sep/2026:23:29:56 -0300] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 414 34.143.221.193 172.70.208.85 - - [16/Sep/2026:23:29:56 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414 34.143.221.193 172.70.208.125 - - [16/Sep/2026:23:29:56 -0300] "GET /_nuxt/../.env HTTP/1.1" 404 414 34.143.221.193 172.70.208.85 - - [16/Sep/2026:23:29:56 -0300] "GET /static../.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-09-19 22:20:32 (1 month ago)		Brute-Force Web App Attack
🇫🇷 Bbelguise	2026-09-19 15:31:32 (1 month ago)	34.143.221.193 account.belguise.net - [18/Sep/2026:10:33:26 +0200] "GET / HTTP/2.0" 403 158 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.143.221.193 account.belguise.net - [1 ... show more 34.143.221.193 account.belguise.net - [18/Sep/2026:10:33:26 +0200] "GET / HTTP/2.0" 403 158 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.143.221.193 account.belguise.net - [18/Sep/2026:10:33:26 +0200] "GET /api/.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)" 34.143.221.193 account.belguise.net - [18/Sep/2026:10:33:26 +0200] "GET /z9x8c7v6b5-debug-trigger-account.belguise.net HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.143.221.193 account.belguise.net - [18/Sep/2026:10:33:26 +0200] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 34.143.221.193 account.belguise.net - [18/Sep/2026:10:33:26 +0200] "GET /.aws/credentials HTTP/2.0" 403 158 "-" "CCBot/2.0 (https ... show less	Bad Web Bot Web App Attack
🇺🇸 hostmach	2026-09-19 13:50:17 (1 month ago)	(cpanel) Failed cPanel login from 34.143.221.193 (SG/Singapore/193.221.143.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-09-19 09:50:13 -0400] info [cpaneld] 34.143.221.193 - - "GET ... show more (cpanel) Failed cPanel login from 34.143.221.193 (SG/Singapore/193.221.143.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-09-19 09:50:13 -0400] info [cpaneld] 34.143.221.193 - - "GET /.idea/WebServers.xml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-19 09:50:13 -0400] info [cpaneld] 34.143.221.193 - - "GET /z9x8c7v6b5-debug-trigger-cpanel.tdnx.net HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-19 09:50:13 -0400] info [cpaneld] 34.143.221.193 - - "GET /.vscode/launch.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-19 09:50:15 -0400] info [cpaneld] 34.143.221.193 - - "GET /.ssh/config HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-19 09:50:15 -0400] info [cpaneld] 34.143.221.193 - - "GET /.ssh/known_hosts HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-19 13:41:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.143.221.193 (193.221.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 09:41:43.248609 2026] [security2:error] [pid 6589:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.143.221.193 (193.221.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 09:41:43.248609 2026] [security2:error] [pid 6589:tid 6589] [client 34.143.221.193:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.portfoliolighting.net"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "aq6RF5QMCBe91JzAxyH2rgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-19 13:30:04 (1 month ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 Charlesiv	2026-09-19 10:05:53 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Endpoint: /config/firebase-admin.json Timestamp: 2026-09-19T03:17:07Z Ray ID: a3d56f7f2945252c UA: Mozilla/5.0 AppleWebKit/5 ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Endpoint: /config/firebase-admin.json Timestamp: 2026-09-19T03:17:07Z Ray ID: a3d56f7f2945252c UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot) show less	Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-09-19 00:08:01 (1 month ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02]	Hacking SQL Injection Web App Attack
🇺🇸 interbiznw.com	2026-09-18 22:44:31 (1 month ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-09-18 22:22:02 (1 month ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]	Hacking SQL Injection Web App Attack
🇵🇱 sefinek.net	2026-09-18 22:19:31 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /actuator \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /actuator \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Charlesiv	2026-09-18 20:04:00 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Endpoint: /sendgrid.env Timestamp: 2026-09-18T18:39:32Z Ray ID: a3d27953890d3f81 UA: DuckAssistBot/1.1 (https://duckduckgo.c ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Endpoint: /sendgrid.env Timestamp: 2026-09-18T18:39:32Z Ray ID: a3d27953890d3f81 UA: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot) show less	Bad Web Bot

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.37

🇷🇴 193.46.255.86

🇨🇳 116.63.111.173

🇳🇱 77.67.26.53

🇺🇸 66.132.172.42

🇺🇸 66.33.23.198

🇸🇬 34.143.148.228

🇸🇬 34.124.210.12

🇭🇰 8.217.210.220

🇺🇸 2600:1f18:3120:f503:97b3:8c14:d8d0:a587

🇺🇸 192.253.209.126

🇳🇱 185.136.15.111

🇨🇳 116.167.235.72

🇸🇬 47.128.49.67

🇩🇪 31.70.107.46

🇮🇳 8.231.98.216

🇮🇪 3.250.169.27

🇬🇧 2a06:4883:b000::c4

🇨🇳 180.76.112.121

🇺🇸 152.32.205.153