JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.143.130.249

34.143.130.249 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	249.130.143.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.143.130.249

Whois 34.143.130.249

IP Abuse Reports for 34.143.130.249:

This IP address has been reported a total of 56 times from 42 distinct sources. 34.143.130.249 was first reported on August 20th 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sdos.es	2026-08-22 23:15:48 (13 minutes ago)	"Restricted File Access Attempt - Matched Data: .aws/credentials found within REQUEST_FILENAME: /@fs ... show more "Restricted File Access Attempt - Matched Data: .aws/credentials found within REQUEST_FILENAME: /@fs/root/.aws/credentials" show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-22 21:59:05 (1 hour ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-21. show less	Web App Attack SSH Hacking
🇫🇮 paissangroup	2026-08-22 21:44:23 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇺🇸 ArturShelby	2026-08-22 21:40:36 (1 hour ago)	Critical file access: /.aws/credentials	Web App Attack
🇩🇪 ghostwarriors	2026-08-22 21:20:24 (2 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 initsol	2026-08-22 17:51:48 (5 hours ago)	[Sat Aug 22 19:51:47.374003 2026] [authz_core:error] [pid 385023:tid 385023] [client 34.143.130.249: ... show more [Sat Aug 22 19:51:47.374003 2026] [authz_core:error] [pid 385023:tid 385023] [client 34.143.130.249:20048] AH01630: client denied by server configuration: /var/www/@fs [Sat Aug 22 19:51:47.374754 2026] [authz_core:error] [pid 353342:tid 353342] [client 34.143.130.249:20024] AH01630: client denied by server configuration: /var/www/@fs [Sat Aug 22 19:51:47.374773 2026] [authz_core:error] [pid 385022:tid 385022] [client 34.143.130.249:20032] AH01630: client denied by server configuration: /var/www/@fs ... show less	Brute-Force
🇩🇪 4server	2026-08-22 17:29:13 (5 hours ago)	[SatAug2219:29:10.1391202026][security2:error][pid2746181:tid2746203][client34.143.130.249:0]ModSecu ... show more [SatAug2219:29:10.1391202026][security2:error][pid2746181:tid2746203][client34.143.130.249:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"ggarchitetti.ch\"][uri\"/files../etc/passwd\"][unique_id\"aoncZg4IvhSxln0_L3D3kgAAAQs\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-22 13:23:26 (10 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 neckaralb-admin.de	2026-08-22 12:41:00 (10 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇲🇾 Rizzy	2026-08-22 12:21:40 (11 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-08-22 12:00:02 (11 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 WellSpring	2026-08-22 11:17:23 (12 hours ago)	env leak on 626.today/web/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇧🇪 voormedia	2026-08-22 10:48:21 (12 hours ago)	Accessed trap at '/actuator/env'	Web App Attack
Anonymous	2026-08-22 08:02:51 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.143.130.249 (SG/Singapore/249.130.14 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.143.130.249 (SG/Singapore/249.130.143.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-08-22 06:25:09 (17 hours ago)	34.143.130.249 - - [22/Aug/2026:08:25:08 +0200] "GET /proc/self/environ HTTP/1.1" 403 153 "-" "Mozil ... show more 34.143.130.249 - - [22/Aug/2026:08:25:08 +0200] "GET /proc/self/environ HTTP/1.1" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 34.143.130.249 - - [22/Aug/2026:08:25:08 +0200] "GET /app/.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.143.130.249 - - [22/Aug/2026:08:25:08 +0200] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.143.130.249 - - [22/Aug/2026:08:25:08 +0200] "GET /.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.143.130.249 - - [22/Aug/2026:08:25:08 +0200] "GET /.env.local HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.143.130.249 - - [22/Aug/2026:08:25:08 +0 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.29.115.216

🇳🇱 176.65.148.84

🇧🇷 147.15.110.51

🇸🇪 83.255.102.217

🇺🇸 154.16.116.152

🇻🇳 117.4.81.106

🇨🇳 113.108.88.121

🇺🇸 66.132.172.98

🇨🇳 120.221.12.98

🇮🇳 115.246.242.2

🇺🇸 104.234.53.94

🇧🇬 79.124.59.178

🇸🇬 35.198.238.76

🇫🇷 15.224.107.106

🇷🇺 213.234.11.10

🇭🇹 153.67.87.118

🇺🇸 104.248.79.195

🇺🇸 45.56.85.254

🇦🇷 170.245.171.208

🇺🇸 143.42.164.204