JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.143.139.227

34.143.139.227 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 77%: ?

77%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	227.139.143.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.143.139.227

Whois 34.143.139.227

IP Abuse Reports for 34.143.139.227:

This IP address has been reported a total of 22 times from 15 distinct sources. 34.143.139.227 was first reported on September 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-09-08 21:26:21 (1 week ago)	2.210 requests with url.path /@fs/ 1.052 requests with url.path .env 600 requests with url.pat ... show more 2.210 requests with url.path /@fs/* 1.052 requests with url.path .env 600 requests with url.path .aws/* 556 requests with url.path credentials.json 524 requests with url.path config.json 375 requests with url.path .config/ 233 requests with url.path /proc/ 176 requests with url.path .ssh/ 132 requests with url.path /auth.json 104 requests with url.path .php.bak show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-08 20:32:06 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 16:31:59.265743 2026] [security2:error] [pid 11785:tid 11785] [client 34.143.139.227:31882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.adrienberthaud.com"] [uri "/@fs/app/.env"] [unique_id "aqBwvyW0_1Dw3GkJ1Tx_AwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Interceptor_HQ	2026-09-08 20:00:19 (1 week ago)	request_uri: /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? -- automatic report --	Brute-Force Hacking
Anonymous	2026-09-08 19:20:13 (1 week ago)	Web application attack detected.	Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 18:59:37 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 14:59:32.384720 2026] [security2:error] [pid 17422:tid 17422] [client 34.143.139.227:2022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "designersdock.com"] [uri "/@fs/.env"] [unique_id "aqBbFOdqZWRd41Yf-Z8EMQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kivitendo.de	2026-09-08 18:58:32 (1 week ago)	[Tue Sep 08 20:58:29.637305 2026] [access_compat:error] [pid 218006:tid 218053] [client 34.143.139.2 ... show more [Tue Sep 08 20:58:29.637305 2026] [access_compat:error] [pid 218006:tid 218053] [client 34.143.139.227:19454] AH01797: client denied by server configuration: /var/www/kivitendo/config/.env [Tue Sep 08 20:58:38.308201 2026] [access_compat:error] [pid 218006:tid 218057] [client 34.143.139.227:36676] AH01797: client denied by server configuration: /var/www/kivitendo/.git/config ... show less	Brute-Force Web App Attack
🇬🇧 Apache	2026-09-08 18:31:48 (1 week ago)	(mod_security) mod_security (id:930130) triggered by 34.143.139.227 (SG/Singapore/227.139.143.34.bc. ... show more (mod_security) mod_security (id:930130) triggered by 34.143.139.227 (SG/Singapore/227.139.143.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
Anonymous	2026-09-08 17:31:24 (1 week ago)	34.143.139.227 - - [08/Sep/2026:19:30:46 +0200] "GET /.env.bak HTTP/1.1" 403 1856 "https://webseiten ... show more 34.143.139.227 - - [08/Sep/2026:19:30:46 +0200] "GET /.env.bak HTTP/1.1" 403 1856 "https://webseitenserver.de/.env.bak" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/" show less	Web Spam Blog Spam Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 16:54:57 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 12:54:49.629507 2026] [security2:error] [pid 10036:tid 10036] [client 34.143.139.227:51914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bastardesign.com"] [uri "/@fs/../../.env"] [unique_id "aqA92UA9t2_CITuwGXY4PgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-08 16:33:37 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.143.139.227 (SG/Singapore/227.139.14 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.143.139.227 (SG/Singapore/227.139.143.34.bc.googleusercontent.com) show less	SQL Injection
🇫🇷 dynamix	2026-09-08 16:24:48 (1 week ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-09-08 16:16:29 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-09-08 16:09:26 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.143.139.227 (227.139.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 12:09:19.950094 2026] [security2:error] [pid 19238:tid 19238] [client 34.143.139.227:62382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thomaschemical.com"] [uri "/@fs/.env"] [unique_id "aqAzL_viR8K564gw4SwA9wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-08 15:50:56 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-08 15:20:08 (1 week ago)	Aggressive web scan	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.240

🇺🇸 40.124.187.6

🇺🇸 40.124.186.136

🇺🇸 8.231.59.80

🇵🇱 2a03:cfc0:8000:2d::c122:d62b

🇨🇳 182.122.233.43

🇺🇸 162.216.150.250

🇨🇳 115.190.165.165

🇳🇴 79.127.150.108

🇮🇩 202.148.4.118

🇷🇺 194.28.29.5

🇺🇦 193.189.127.110

🇨🇳 183.238.10.198

🇵🇰 175.107.224.200

🇸🇳 154.125.246.162

🇺🇸 107.175.248.71

🇺🇸 91.230.168.8

🇺🇸 44.212.74.78

🇺🇸 24.234.208.166

🇺🇸 20.168.121.141