JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.143.249.192

Activity Trending Down

Abuse confidence score ?

44% Elevated

15 reports

7 reporters · latest 1 week ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	192.249.143.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.143.249.192

This IP address has been reported a total of 15 times from 7 distinct sources. 34.143.249.192 was first reported on September 20th 2026, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Spain with 6 reports; Germany with 3 reports; Czechia with 2 reports. The most common categories in these recent reports were: Web App Attack 15 times; Hacking 10 times; Brute-Force 5 times; Port Scan 4 times; SQL Injection 4 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 itsolon	2026-09-20 20:19:37 (1 week ago)	[20/Sep/2026:22:19:35 +0200] 178993557554.988919 34.143.249.192 54656 217.154.7.177 443 [20/Sep/2026 ... show more [20/Sep/2026:22:19:35 +0200] 178993557554.988919 34.143.249.192 54656 217.154.7.177 443 [20/Sep/2026:22:19:36 +0200] 178993557694.477696 34.143.249.192 54656 217.154.7.177 443 [20/Sep/2026:22:19:36 +0200] 178993557690.355073 34.143.249.192 54656 217.154.7.177 443 [20/Sep/2026:22:19:36 +0200] 178993557666.556711 34.143.249.192 54656 217.154.7.177 443 [20/Sep/2026:22:19:36 +0200] 178993557692.820072 34.143.249.192 54656 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇪🇸 el-brujo	2026-09-20 20:16:17 (1 week ago)	Cloudflare WAF: Request Path: /api/fs/exec Request Query: Host: n8n.elhacker.net:8443 userAgent: Mo ... show more Cloudflare WAF: Request Path: /api/fs/exec Request Query: Host: n8n.elhacker.net:8443 userAgent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot) Action: block Source: firewallManaged ASN Description: Google LLC Country: SG Method: POST Timestamp: 2026-09-20T20:16:17Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇫🇷 dynamix	2026-09-20 20:05:57 (1 week ago)	Automated web vulnerability and path enumeration scan with excessive 404 requests	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-09-20 19:36:42 (1 week ago)	Cloudflare WAF: Request Path: /read-document Request Query: Host: metrics.elhacker.net:8443 userAge ... show more Cloudflare WAF: Request Path: /read-document Request Query: Host: metrics.elhacker.net:8443 userAgent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) Action: block Source: firewallManaged ASN Description: Google LLC Country: SG Method: POST Timestamp: 2026-09-20T19:36:42Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-09-20 19:17:52 (1 week ago)	20/Sep/2026:21:17:51.669361 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 20/Sep/2026:21:17:51.669361 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.143.249.192] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ns2.elhacker.net"] [uri "/.aws/credentials"] [unique_id "arAxXyvKu93s0vgXpMGMNAADrhc"] ... show less	Hacking Web App Attack
Anonymous	2026-09-20 19:06:12 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇩🇪 itsolon	2026-09-20 18:39:59 (1 week ago)	[20/Sep/2026:20:39:59 +0200] 178992959983.690685 34.143.249.192 33056 217.154.7.177 443 [20/Sep/2026 ... show more [20/Sep/2026:20:39:59 +0200] 178992959983.690685 34.143.249.192 33056 217.154.7.177 443 [20/Sep/2026:20:39:59 +0200] 178992959984.221403 34.143.249.192 33056 217.154.7.177 443 [20/Sep/2026:20:39:59 +0200] 178992959983.191193 34.143.249.192 33056 217.154.7.177 443 [20/Sep/2026:20:39:59 +0200] 178992959972.096939 34.143.249.192 33056 217.154.7.177 443 [20/Sep/2026:20:39:59 +0200] 178992959925.426631 34.143.249.192 33056 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇪🇸 el-brujo	2026-09-20 18:30:56 (1 week ago)	Cloudflare WAF: Request Path: /api/v1/models Request Query: Host: wiki.elhacker.net:8443 userAgent: ... show more Cloudflare WAF: Request Path: /api/v1/models Request Query: Host: wiki.elhacker.net:8443 userAgent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html) Action: block Source: firewallManaged ASN Description: Google LLC Country: SG Method: GET Timestamp: 2026-09-20T18:30:56Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-09-20 17:45:13 (1 week ago)	34.143.249.192 - - [20/Sep/2026:19:45:13 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0 ... show more 34.143.249.192 - - [20/Sep/2026:19:45:13 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 34.143.249.192 - - [20/Sep/2026:19:45:13 +0200] "GET /.aws/credentials HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.143.249.192 - - [20/Sep/2026:19:45:13 +0200] "GET /.aws/config HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" 34.143.249.192 - - [20/Sep/2026:19:45:13 +0200] "GET /api/v1/env HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... show less	Web App Attack Hacking
🇫🇷 dynamix	2026-09-20 17:26:44 (1 week ago)	Multiple WAF Violations	Web App Attack
🇪🇸 el-brujo	2026-09-20 17:12:32 (1 week ago)	20/Sep/2026:19:12:32.112914 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 20/Sep/2026:19:12:32.112914 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.143.249.192] ModSecurity: Warning. Matched phrase "proc/self/environ" at ARGS:0. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: proc/self/environ found within ARGS:0: {\\\\x22then\\\\x22:\\\\x22$1:__proto__:then\\\\x22,\\\\x22status\\\\x22:\\\\x22resolved_model\\\\x22,\\\\x22reason\\\\x22:-1,\\\\x22value\\\\x22:\\\\x22{/\\\\x22then/\\\\x22:/\\\\x22$b1337/\\\\x22}\\\\x22,\\\\x22_response\\\\x22:{\\\\x22_prefix\\\\x22:\\\\x22process.mainmodule.require('child_process').execsync('env 2>/dev/null \|\| cat /proc/self/environ 2>/dev/null');\\\\x22,\\\\x22_formdata\\\\x22:{\\\\x22get\\\\x22:\\\\x22$1:constructor:constructor\\\\x22}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 17:11:56 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.143.249.192 (192.249.143.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.143.249.192 (192.249.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 13:11:51.246634 2026] [security2:error] [pid 27924:tid 27924] [client 34.143.249.192:45868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.darkcodedesign.net"] [uri "/admin/.env"] [unique_id "arAT1_spvGDEFyNKjp5sxAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-20 17:00:25 (1 week ago)	\| [Dangerous/Singapore] Aggressive IP 34.143.249.192 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Singapore] Aggressive IP 34.143.249.192 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 itsolon	2026-09-20 16:57:22 (1 week ago)	[20/Sep/2026:18:57:21 +0200] 178992344195.854369 34.143.249.192 60714 217.154.7.177 443 [20/Sep/2026 ... show more [20/Sep/2026:18:57:21 +0200] 178992344195.854369 34.143.249.192 60714 217.154.7.177 443 [20/Sep/2026:18:57:22 +0200] 178992344245.838903 34.143.249.192 60714 217.154.7.177 443 [20/Sep/2026:18:57:22 +0200] 178992344298.550490 34.143.249.192 60714 217.154.7.177 443 [20/Sep/2026:18:57:22 +0200] 178992344257.645194 34.143.249.192 60714 217.154.7.177 443 [20/Sep/2026:18:57:22 +0200] 178992344246.652546 34.143.249.192 60714 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 xmission.com	2026-09-20 16:44:11 (1 week ago)	Blocked by UFW (TCP on 8080) Source port: 42948 TTL: 61 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8080) Source port: 42948 TTL: 61 Packet length: 60 TOS: 0x00 This report (for 34.143.249.192) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.117.62.230

🇧🇷 189.125.111.177

🇧🇷 177.95.127.96

🇺🇸 154.59.103.35

🇳🇱 130.12.180.117

🇰🇷 121.191.167.81

🇮🇩 103.188.173.249

🇺🇸 96.78.177.249

🇱🇹 77.90.185.20

🇨🇳 61.145.56.3

🇺🇸 47.251.24.151

🇳🇱 45.148.10.240

🇺🇸 40.77.167.156

🇧🇪 35.205.17.1

🇮🇶 5.175.146.239

🇰🇷 221.161.235.168

🇰🇷 221.149.43.154

🇧🇷 177.11.35.4

🇺🇸 167.172.154.151

🇺🇸 162.216.150.244