JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.130.168.143

34.130.168.143 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 61%: ?

61%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	143.168.130.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.130.168.143

Whois 34.130.168.143

IP Abuse Reports for 34.130.168.143:

This IP address has been reported a total of 12 times from 10 distinct sources. 34.130.168.143 was first reported on August 29th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-30 22:04:52 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-29. show less	Web App Attack SSH Hacking
🇩🇪 4server	2026-08-30 11:24:47 (3 days ago)	[SunAug3013:24:44.0945812026][security2:error][pid1206370:tid1206384][client34.130.168.143:0]ModSecu ... show more [SunAug3013:24:44.0945812026][security2:error][pid1206370:tid1206384][client34.130.168.143:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\*271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varr=\(process.mainmodule\ show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 11:23:23 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.130.168.143 (143.168.130.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.130.168.143 (143.168.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 07:23:18.167276 2026] [security2:error] [pid 8123:tid 8123] [client 34.130.168.143:55166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbrcabrero.cl.tecnoconce.com"] [uri "/.git/config"] [unique_id "apQSpsPA5E08rUQpjy2GxQAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 melroy89	2026-08-30 02:42:23 (3 days ago)	34.130.168.143 - - [30/Aug/2026:04:42:17 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linu ... show more 34.130.168.143 - - [30/Aug/2026:04:42:17 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.000 34.130.168.143 - - [30/Aug/2026:04:42:17 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.008 34.130.168.143 - - [30/Aug/2026:04:42:17 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.000 34.130.168.143 - - [30/Aug/2026:04:42:17 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.001 34.130.168.143 - - [30/Aug/2026:04:42:17 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 02:37:19 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.130.168.143 (143.168.130.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.130.168.143 (143.168.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 22:37:12.634694 2026] [security2:error] [pid 1529266:tid 1529305] [client 34.130.168.143:49934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buy-directv.com"] [uri "/.git/config"] [unique_id "apOXWI286szWfQOiP2JfkQAAAVg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2026-08-30 02:30:18 (3 days ago)	Web Shell Access Attempt	Web App Attack Brute-Force Open Proxy
🇮🇹 VHosting	2026-08-30 02:00:04 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 dynamix	2026-08-29 17:18:41 (4 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 16:12:26 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.130.168.143 (143.168.130.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.130.168.143 (143.168.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 12:12:20.347937 2026] [security2:error] [pid 20421:tid 20421] [client 34.130.168.143:53102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwieser.com"] [uri "/.git/config"] [unique_id "apME5Kl0XbwMKeWAXQiklAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alboweb B.V.	2026-08-29 16:11:11 (4 days ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇩🇪 kev-ac	2026-08-29 15:43:30 (4 days ago)	Automated web attack detected and blocked by Fail2Ban	Web App Attack
🇸🇪 vaia.cloud	2026-08-29 15:20:01 (4 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 212.73.46.196

🇧🇷 205.210.31.162

🇺🇸 193.202.12.18

🇨🇴 170.239.207.36

🇭🇰 152.32.239.206

🇭🇰 152.32.239.122

🇹🇼 152.32.232.185

🇭🇰 152.32.226.88

🇱🇹 141.98.10.216

🇮🇩 118.99.110.141

🇨🇳 117.80.186.239

🇨🇳 117.80.146.195

🇺🇸 109.105.210.62

🇨🇳 101.70.109.52

🇩🇪 69.5.169.179

🇺🇸 65.111.4.206

🇩🇪 57.129.120.143

🇩🇪 45.3.42.2

🇬🇧 35.203.210.159

🇬🇧 35.203.210.78