JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.143.164.241

Recent Activity

Abuse Confidence Score

100% Critical

33 reports

31 reporters · latest 9 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 241.164.143.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

33 from 31 distinct reporters

First reported

August 7th 2025

Most recent report

9 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 6 🇳🇱 Netherlands 5 🇨🇭 Switzerland 3

Most common categories Web App Attack 24 Bad Web Bot 11 Brute-Force 9 Hacking 7 Port Scan 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-06 11:34:00 UTC · (9 hours ago)	Excessive crawling/scraping. Vulnerable file probing.	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2026-11-06 09:12:57 UTC · (12 hours ago)	trying to access non-authorized port	Port Scan
🇬🇧 consul.to	2026-11-06 05:59:47 UTC · (15 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 rh24	2026-11-06 05:31:44 UTC · (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.143.164.241 (SG/Singapore/241.164.143.34.bc.googleusercontent.com): (CF_ENABLE)	SQL Injection
🇩🇪 MarkGGN	2026-11-06 04:29:09 UTC · (17 hours ago)	Web attack. 34.143.164.241 - - [06/Nov/2026:05:29:09 +0100] "GET /wp-admin/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://[HOST]/)" 34.143.164.241 - - [06/Nov/2026:05:29:09 +0100] "GET /img../.env HTTP/2.0" 403 146 "-" ... show more Web attack. 34.143.164.241 - - [06/Nov/2026:05:29:09 +0100] "GET /wp-admin/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://[HOST]/)" 34.143.164.241 - - [06/Nov/2026:05:29:09 +0100] "GET /img../.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[HOST])" show less	Web App Attack
Anonymous	2026-11-06 04:04:02 UTC · (17 hours ago)	Bot / scanning and/or hacking attempts: GET /server/.env HTTP/2.0, GET /admin/.env HTTP/2.0, GET /gcp-service.json HTTP/2.0, GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP, GET /laravel../.env HTTP/2.0, GET /push_config.json HTTP/2.0 ... show more Bot / scanning and/or hacking attempts: GET /server/.env HTTP/2.0, GET /admin/.env HTTP/2.0, GET /gcp-service.json HTTP/2.0, GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP, GET /laravel../.env HTTP/2.0, GET /push_config.json HTTP/2.0, GET /laravel../config/database.php HTTP/2.0, GET /css../.env HTTP/2.0 show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-11-06 03:07:45 UTC · (18 hours ago)	7.955 requests from abuseipdb.com blacklisted IP (1w6d23h)	Brute-Force Bad Web Bot
🇩🇪 creoline GmbH	2026-11-06 01:20:40 UTC · (20 hours ago)	[WAF] Multiple suspicious HTTP requests has been blocked	Bad Web Bot Web App Attack
🇩🇪 svr	2026-11-06 00:44:10 UTC · (20 hours ago)	Abusive Automated Web Scanner	Web App Attack
🇳🇱 Site.eu	2026-11-05 23:38:03 UTC · (21 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇨🇭 zynex	2026-11-05 23:29:15 UTC · (22 hours ago)	URL Probing: /static/.env	Web App Attack
🇨🇭 4server	2026-11-05 23:15:20 UTC · (22 hours ago)	[FriNov0600:15:16.7535462026][security2:error][pid1450552:tid1451710][client34.143.164.241:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\\|__schema\\\\\\\\\?{\?\(\?:querytype\\|types\?\)\)\?\\\\\\\\{\"atRE ... show more [FriNov0600:15:16.7535462026][security2:error][pid1450552:tid1451710][client34.143.164.241:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\\|__schema\\\\\\\\\?{\?\(\?:querytype\\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"labaita-lanzo.it\"][uri\"/graphql\"][unique_id\"au0OBFa0mpkaFWSNZwwTAgAAAMA\"]\,referer:https://labaita-lanzo.it show less	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-11-05 23:08:58 UTC · (22 hours ago)	cloudlinux2 fail2ban: 2026-11-06 00:03:52,327 fail2ban.actions [1800]: NOTICE [plesk-modsecurity] Unban 34.14.113.124cloudlinux2 fail2ban: 2026-11-06 00:04:09,698 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 185.238.231.35 ... show more cloudlinux2 fail2ban: 2026-11-06 00:03:52,327 fail2ban.actions [1800]: NOTICE [plesk-modsecurity] Unban 34.14.113.124cloudlinux2 fail2ban: 2026-11-06 00:04:09,698 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 185.238.231.35 - 2026-11-06 00:04:08cloudlinux2 fail2ban: 2026-11-06 00:04:09,520 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 185.238.231.35 - 2026-11-06 00:04:08cloudlinux2 fail2ban: 2026-11-06 00:04:10,840 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 185.238.231.169 - 2026-11-06 00:04:08cloudlinux2 fail2ban: 2026-11-06 00:04:17,902 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 79.177.157.117 - 2026-11-06 00:04:16cloudlinux2 fail2ban: 2026-11-06 00:05:31,875 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 181.63.150.177 - 2026-11-06 00:05:31cloudlinux2 fail2ban: 2026-11-06 00:06:12,473 fail2ban.filter [1800]: INFO [plesk-modsecurity] Found 34.143.164.241 - 2026-11-06 00:06:12cloudlinux2 fail2ban show less	Web App Attack
Anonymous	2026-11-05 22:45:28 UTC · (22 hours ago)	34.143.164.241 - - [06/Nov/2026:06:45:24 +0800] "GET /sitemap.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.143.164.241 - - [06/Nov/2026:06:4 ... show more 34.143.164.241 - - [06/Nov/2026:06:45:24 +0800] "GET /sitemap.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.143.164.241 - - [06/Nov/2026:06:45:25 +0800] "GET /sitemap_index.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 34.143.164.241 - - [06/Nov/2026:06:45:27 +0800] "GET /z9x8c7v6b5-debug-trigger-witgang.com HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.143.164.241 - - [06/Nov/2026:06:45:28 +0800] "GET /dist/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.143.164.241 - - [06/Nov/2026:06:45:28 +0800] "GET /assets/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 ... show less	Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-11-05 21:23:39 UTC · (1 day ago)	Common web attack from 34.143.164.241.	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.216

🇺🇸 195.184.76.171

🇸🇮 176.65.134.73

🇺🇸 142.251.156.119

🇺🇸 100.28.44.58

🇳🇱 89.21.67.135

🇳🇱 81.19.216.95

🇲🇾 47.254.244.233

🇮🇷 45.81.17.177

🇨🇦 34.47.29.168

🇲🇴 27.109.244.54

🇺🇸 4.148.17.138

🇧🇪 198.235.24.215

🇩🇪 195.182.16.183

🇸🇪 185.246.130.20

🇩🇪 151.243.11.37

🇭🇰 116.49.143.85

🇿🇦 102.206.95.28

🇷🇺 94.243.15.250

🇳🇱 93.123.109.95