JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.143.135.64

Neutral Activity

Abuse confidence score ?

0% Low Risk

44 reports

20 reporters · latest 1 month ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	64.135.143.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.143.135.64

Export CSV

This IP address has been reported a total of 44 times from 20 distinct sources. 34.143.135.64 was first reported on May 15th 2026, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: India with 1 report. The most common categories in these recent reports were: Hacking 1 time; SSH 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-18 07:13:36 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=94, sources=1)	Hacking Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-17 23:34:13 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/34.143.135.64 2026-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/34.143.135.64 2026-05-17 01:16:17 /.env.local 2026-05-17 01:16:17 /robots.txt 2026-05-17 01:16:17 /sitemap.xml 2026-05-17 01:16:17 /rest/api/1.0/shortcuts/816001/5445fc3a2eaf2d27d206b3310de52a0d/shortcuts.js 2026-05-17 01:16:17 /.env.backup 2026-05-17 01:16:17 /phpinfo.php 2026-05-17 01:16:17 /.env.production 2026-05-17 01:16:17 /.env 2026-05-17 01:16:17 /info.php 2026-05-17 01:16:17 / show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-17 09:54:18 (4 months ago)	[Sun May 17 19:54:17.677790 2026] [security2:error] [pid 1092908] [client 34.143.135.64:57652] [clie ... show more [Sun May 17 19:54:17.677790 2026] [security2:error] [pid 1092908] [client 34.143.135.64:57652] [client 34.143.135.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env.local"] [unique_id "agmQSeHuPjxQHL1XyHThfAAAAAM"] ... show less	Web App Attack
🇺🇸 wteiken	2026-05-17 09:07:29 (4 months ago)	rocinante.teiken.net:443 34.143.135.64:35636 - - [17/May/2026:05:07:28 -0400] "GET /.env.production ... show more rocinante.teiken.net:443 34.143.135.64:35636 - - [17/May/2026:05:07:28 -0400] "GET /.env.production HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:35660 - - [17/May/2026:05:07:28 -0400] "GET /.git/config HTTP/1.1" 404 3183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:35636 - - [17/May/2026:05:07:28 -0400] "GET /.env.backup HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:35674 - - [17/May/2026:05:07:29 -0400] "GET /.env.local HTTP/1.1" 404 3184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:35672 - - [17/May/2026:05:07 ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-17 09:03:06 (4 months ago)	[Sun May 17 19:03:05.420110 2026] [security2:error] [pid 1082477] [client 34.143.135.64:52634] [clie ... show more [Sun May 17 19:03:05.420110 2026] [security2:error] [pid 1082477] [client 34.143.135.64:52634] [client 34.143.135.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env.production"] [unique_id "agmESeTCfOkw8E8XiieXxQAAAA0"] ... show less	Web App Attack
🇺🇸 ANTI SCANNER	2026-05-17 08:53:15 (4 months ago)	Scanner : /.env.old	Web Spam
🇦🇺 paulshipley.com.au	2026-05-17 08:34:44 (4 months ago)	[Sun May 17 18:34:44.439720 2026] [security2:error] [pid 1082477] [client 34.143.135.64:52044] [clie ... show more [Sun May 17 18:34:44.439720 2026] [security2:error] [pid 1082477] [client 34.143.135.64:52044] [client 34.143.135.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.git/config"] [unique_id "agl9pOTCfOkw8E8XiieXqAAAAA0"] ... show less	Web App Attack
🇺🇸 lime	2026-05-17 08:20:41 (4 months ago)	[Sun May 17 08:20:40.301126 2026] [php7:error] [pid 1145797] [client 34.143.135.64:39468] script '/v ... show more [Sun May 17 08:20:40.301126 2026] [php7:error] [pid 1145797] [client 34.143.135.64:39468] script '/var/www/html/phpinfo.php' not found or unable to stat [Sun May 17 08:20:40.842843 2026] [php7:error] [pid 1137796] [client 34.143.135.64:39500] script '/var/www/html/info.php' not found or unable to stat show less	Hacking Web App Attack
🇮🇪 AutosOnShow	2026-05-17 08:20:06 (4 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-05-17 08:19:05.300 \|	Web App Attack
🇸🇪 donarev419	2026-05-17 08:16:09 (4 months ago)	Connection to port 443 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 pixiekat	2026-05-17 08:14:45 (4 months ago)	[Sun May 17 08:14:43.838962 2026] [authz_core:error] [pid 50107:tid 50134] [client 34.143.135.64:549 ... show more [Sun May 17 08:14:43.838962 2026] [authz_core:error] [pid 50107:tid 50134] [client 34.143.135.64:54958] AH01630: client denied by server configuration: /var/www/html/ [Sun May 17 08:14:44.279526 2026] [authz_core:error] [pid 50107:tid 50145] [client 34.143.135.64:42958] AH01630: client denied by server configuration: /var/www/html/ [Sun May 17 08:14:44.279526 2026] [authz_core:error] [pid 50107:tid 50145] [client 34.143.135.64:42958] AH01630: client denied by server configuration: /var/www/html/ [Sun May 17 08:14:44.500822 2026] [authz_core:error] [pid 50107:tid 50149] [client 34.143.135.64:54958] AH01630: client denied by server configuration: /var/www/html/robots.txt ... show less	Brute-Force
🇺🇸 lime	2026-05-17 07:59:56 (4 months ago)	[Sun May 17 07:59:55.081983 2026] [php7:error] [pid 1137800] [client 34.143.135.64:43092] script '/v ... show more [Sun May 17 07:59:55.081983 2026] [php7:error] [pid 1137800] [client 34.143.135.64:43092] script '/var/www/html/phpinfo.php' not found or unable to stat [Sun May 17 07:59:55.993521 2026] [php7:error] [pid 1137800] [client 34.143.135.64:43092] script '/var/www/html/info.php' not found or unable to stat show less	Hacking Web App Attack
🇮🇪 AutosOnShow	2026-05-17 07:33:05 (4 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-05-17 07:32:06.298 \|	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-16 19:59:20 (4 months ago)	paulshipley.com.au:443 34.143.135.64 - - [17/May/2026:05:59:15 +1000] "GET /info.php HTTP/1.1" 404 7 ... show more paulshipley.com.au:443 34.143.135.64 - - [17/May/2026:05:59:15 +1000] "GET /info.php HTTP/1.1" 404 71793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 wteiken	2026-05-16 19:24:08 (4 months ago)	rocinante.teiken.net:443 34.143.135.64:51908 - - [16/May/2026:15:24:07 -0400] "GET /info.php HTTP/1. ... show more rocinante.teiken.net:443 34.143.135.64:51908 - - [16/May/2026:15:24:07 -0400] "GET /info.php HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:51908 - - [16/May/2026:15:24:07 -0400] "GET /.env.bak HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:51926 - - [16/May/2026:15:24:07 -0400] "GET /.git/config HTTP/1.1" 404 3184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:51928 - - [16/May/2026:15:24:07 -0400] "GET /phpinfo.php HTTP/1.1" 404 3183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.143.135.64:51936 - - [16/May/2026:15:24:07 -0400 ... show less	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:1987:a001

🇵🇰 202.70.139.192

🇺🇸 162.241.230.122

🇲🇽 148.216.28.11

🇮🇳 122.176.122.24

🇳🇱 109.160.32.127

🇺🇸 50.26.86.167

🇰🇷 20.214.109.68

🇳🇱 204.76.203.237

🇺🇸 201.79.20.166

🇺🇸 134.209.120.216

🇩🇪 91.92.240.251

🇺🇸 73.81.45.109

🇺🇸 72.211.57.162

🇺🇸 66.249.73.12

🇬🇷 62.38.192.68

🇲🇾 47.250.80.158

🇺🇿 45.255.124.132

🇹🇼 34.80.147.52

🇰🇷 211.106.133.202