JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.140.143.231

34.140.143.231 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	231.143.140.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.140.143.231

Whois 34.140.143.231

IP Abuse Reports for 34.140.143.231:

This IP address has been reported a total of 115 times from 88 distinct sources. 34.140.143.231 was first reported on July 31st 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 updown.io	2026-08-02 01:09:27 (18 minutes ago)	{"level":"info","ts":1785632966.5747564,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1785632966.5747564,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.140.143.231","remote_port":"13408","client_ip":"34.140.143.231","proto":"HTTP/1.1","method":"GET","host":"ipv4-1259.akmchk.netactuate.com","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"],"Accept":["/"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000091022,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://ipv4-1259.akmchk.netactuate.com/"],"Content-Type":[]}} {"level":"info","ts":1785632966.7979903,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.140.143.231","remote_port":"20720","client_ip":"34.140.143.231","proto":"HTTP/1.1","method":"GET","host":"ipv4-1259.akmchk.netactuate.com","uri":"/.docker/config.json","headers":{"User-Agent":["CCBot/2.0 (https://commoncrawl.org/faq/)"],"Accep ... show less	DDoS Attack Web App Attack
🇩🇪 DEV-DNS	2026-08-01 23:56:52 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇩🇪 Bedios GmbH	2026-08-01 23:42:15 (1 hour ago)	Login credentials theft attempt	Hacking
🇳🇱 Site.eu	2026-08-01 22:35:09 (2 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 getdk	2026-08-01 22:17:50 (3 hours ago)	[Sat Aug 01 22:17:49.278057 2026] [security2:error] [pid 130345] [client 34.140.143.231:48756] [clie ... show more [Sat Aug 01 22:17:49.278057 2026] [security2:error] [pid 130345] [client 34.140.143.231:48756] [client 34.140.143.231] ModSecurity: Access denied with code 403 (p ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 s@ch@	2026-08-01 22:15:02 (3 hours ago)	Jail: plesk-modsecurity \| Web application attack (Plesk ModSecurity)	Web App Attack
🇷🇺 DZBOT	2026-08-01 22:08:35 (3 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-01 21:59:25 (3 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-31. show less	Web App Attack SSH Hacking
Anonymous	2026-08-01 21:02:45 (4 hours ago)	Apache exploit attempt	Hacking Web App Attack
🇩🇪 4server	2026-08-01 20:58:45 (4 hours ago)	[SatAug0122:58:39.2667792026][security2:error][pid1972915:tid1972963][client34.140.143.231:0]ModSecu ... show more [SatAug0122:58:39.2667792026][security2:error][pid1972915:tid1972963][client34.140.143.231:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"vivereintrentino.it\"][uri\"/.env.bak\"][unique_id\"am5d_79ReBCk2X_dbtQvnwAAAEc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 XICTRON	2026-08-01 20:30:06 (4 hours ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇺🇸 kosada.com	2026-08-01 20:13:12 (5 hours ago)	Web vulnerability probing: /config/database.yml	Web App Attack
Anonymous	2026-08-01 20:00:43 (5 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=BE; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Hacking
🇩🇪 IVski	2026-08-01 19:45:27 (5 hours ago)	IVski WAF \| Multiple 403 Forbidden responses detected from this IP. Likely automated scanning.	DDoS Attack Bad Web Bot
Anonymous	2026-08-01 19:09:05 (6 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet.io; Paths=/.env,/.git/HEAD,/.git/config,/api/.env,/app/.env; Country=BE; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Hacking Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 186.89.10.18

🇩🇪 167.94.146.63

🇭🇰 156.225.1.10

🇨🇳 124.117.194.142

🇱🇹 77.90.185.20

🇩🇪 217.154.120.73

🇹🇭 203.154.158.195

🇮🇩 202.51.214.98

🇳🇱 193.176.31.252

🇧🇷 179.189.199.122

🇺🇸 135.237.125.106

🇩🇪 104.28.229.14

🇺🇸 85.239.151.10

🇧🇬 79.124.40.126

🇧🇬 45.95.170.170

🇸🇬 43.173.173.74

🇳🇱 31.14.32.8

🇵🇱 176.53.159.198

🇨🇳 124.221.89.25

🇺🇦 109.254.240.252