JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.146.143.201

34.146.143.201 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	201.143.146.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.146.143.201

Whois 34.146.143.201

IP Abuse Reports for 34.146.143.201:

This IP address has been reported a total of 29 times from 21 distinct sources. 34.146.143.201 was first reported on August 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-08-28 10:49:22 (1 day ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-08-28 09:46:05 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 maxpower	2026-08-28 09:23:44 (1 day ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.146.143.201 (JP/Japan/201.143.146.34. ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.146.143.201 (JP/Japan/201.143.146.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.146.143.201 - - [28/Aug/2026:11:23:41 +0200] "GET /@fs/root/.aws/credentials.bak?raw?? HTTP/1.1" 200 11965 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" "-" host=falone.com show less	Port Scan
🇺🇸 antlac1	2026-08-28 09:22:36 (1 day ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇩🇪 YF	2026-08-28 07:00:14 (1 day ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇩🇪 raph	2026-08-28 06:43:30 (1 day ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 06:40:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:40:33.312492 2026] [security2:error] [pid 24468:tid 24468] [client 34.146.143.201:36278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.paintedoverwhite.com"] [uri "/@fs/root/.env"] [unique_id "apEtYYJWjBwR-GyzaRX82wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 06:01:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:01:17.419391 2026] [security2:error] [pid 4607:tid 4607] [client 34.146.143.201:52814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atelier92.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apEkLQk4lxTBHgK2h89hBAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-28 05:45:05 (1 day ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 04:52:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 00:52:27.649038 2026] [security2:error] [pid 173427:tid 173464] [client 34.146.143.201:39810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.backcountrygardens.com"] [uri "/@fs/.env.local"] [unique_id "apEUC2bcPtvGkvJZj-h8jwAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-28 04:21:59 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.146.143.201 (JP/Japan/201.143.146.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.146.143.201 (JP/Japan/201.143.146.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-08-28 02:13:01 (1 day ago)	Bot / scanning and/or hacking attempts: GET /config/openai.json HTTP/1.1, GET /secrets.env HTTP/1.1, ... show more Bot / scanning and/or hacking attempts: GET /config/openai.json HTTP/1.1, GET /secrets.env HTTP/1.1, GET /.github/workflows/deploy.yml HTTP/1.1, GET /azure-credentials.json HTTP/1.1, GET /app/.env.production HTTP/1.1, GET /production/.env HTTP/1.1, GET /dev/.env HTTP/1.1, GET /gcp-service-account.json HTTP/1.1, GET /.gcp/credentials.json HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.gitlab-ci.yml HTTP/1.1, GET /backup/.env HTTP/1.1, GET /.codex/config.toml HTTP/1.1, GET /config/secrets.yml HTTP/1.1, GET /.claude/settings.json HTTP/1.1, GET /staging/.env HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.prod HTTP/1.1, GET /api/graphql HTTP/1.1, GET /aws.json HTTP/1.1, GET /.azure/azureProfile.json HTTP/1.1, GET /app/.env.local HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 snappic	2026-08-28 01:28:01 (1 day ago)	Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +htt ... show more Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-28 00:59:40 (1 day ago)	Aggressive web scan	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 00:58:09 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.146.143.201 (201.143.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 20:58:05.099103 2026] [security2:error] [pid 21823:tid 21823] [client 34.146.143.201:42224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.chiggerland.com"] [uri "/@fs/root/.env"] [unique_id "apDdHQj3O6UHCNUYvP4Y0AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.112

🇨🇳 117.158.166.73

🇫🇷 51.75.21.168

🇵🇰 39.46.64.93

🇨🇳 27.19.119.75

🇰🇷 211.228.118.94

🇫🇮 204.168.204.157

🇧🇷 200.225.48.85

🇧🇴 186.121.202.10

🇷🇺 185.16.214.226

🇺🇸 162.0.232.233

🇩🇪 151.241.171.80

🇺🇸 147.185.132.126

🇩🇪 146.70.117.55

🇻🇳 113.163.202.114

🇨🇳 111.36.152.14

🇺🇸 108.162.237.60

🇧🇩 103.69.149.148

🇳🇱 45.156.128.58

🇺🇸 43.166.137.151