JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.156.6.139

Activity Trending Down

Abuse Confidence Score

36% Elevated

44 reports

32 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 139.6.156.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

44 from 32 distinct reporters

First reported

September 6th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 10 🇩🇪 Germany 8 🇫🇷 France 7

Most common categories Web App Attack 29 Bad Web Bot 19 Brute-Force 15 Port Scan 7 Hacking 4

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-08 00:01:54 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇮 Christopher Hughes	2026-09-07 03:19:51 (1 month ago)	34.156.6.139 - - [07/Sep/2026:04:19:50 +0100] "GET /storage/.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...	Web App Attack
🇳🇱 Savvii	2026-09-07 01:37:12 (1 month ago)	21 attempts against mh-misbehave-ban on twig	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Philister11	2026-09-07 00:41:45 (1 month ago)	CrowdSec: crowdsecurity/http-bad-user-agent (US/AS396982)	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-07 00:07:29 (1 month ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197) show less	Bad Web Bot
🇫🇷 COMAITE	2026-09-06 22:47:11 (1 month ago)	Suspicious URL access.	Web App Attack
🇯🇵 tttomomi	2026-09-06 21:58:20 (1 month ago)	Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /api/fs/read?path=/app/.env&allo ... show more Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /api/fs/read?path=/app/.env&allowOutsideWorkspace=true, /.env?raw, /.env.local?raw. show less	Web App Attack
🇱🇹 Evag Touf	2026-09-06 18:11:21 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.156.6.139 (BE/Belgium/139.6.156.34.bc.googleusercontent.com)	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-09-06 18:02:25 (1 month ago)	[06/Sep/2026:21:02:25 +0300] -- 34.156.6.139 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-09-06 17:24:36 (1 month ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.156.6.139 (BE/Belgium/139.6.156.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.156.6.139 - - [06/Sep/2026:19:24:33 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.156.6.139 (BE/Belgium/139.6.156.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.156.6.139 - - [06/Sep/2026:19:24:33 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 429 41 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "34.156.6.139" host=villapardi.it show less	Port Scan
🇳🇱 Site.eu	2026-09-06 17:01:25 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Baking333	2026-09-06 15:02:44 (1 month ago)	[redacted] 34.156.6.139 - - [06/Sep/2026:16:02:43 +0100] "GET /api/fs/read?path=/app/.env&allowOutsideWorkspace=true HTTP/1.1" 302 1591 0/51784 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://[redacted]/)" [redacted] 34.156.6.139 - - [06/Sep/ ... show more [redacted] 34.156.6.139 - - [06/Sep/2026:16:02:43 +0100] "GET /api/fs/read?path=/app/.env&allowOutsideWorkspace=true HTTP/1.1" 302 1591 0/51784 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://[redacted]/)" [redacted] 34.156.6.139 - - [06/Sep/2026:16:02:43 +0100] "GET /.env?import&raw HTTP/1.1" 302 1559 0/44295 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://[redacted]/)" show less	Bad Web Bot Web App Attack
Anonymous	2026-09-06 13:38:08 (1 month ago)	Portscan: TCP/8443 (5x), TCP/8080 (5x)	Port Scan
🇺🇸 TPI-Abuse	2026-09-06 13:11:23 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.156.6.139 (139.6.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 09:11:17.530238 2026] [security2:error] [pid 21787:tid 21 ... show more (mod_security) mod_security (id:210492) triggered by 34.156.6.139 (139.6.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 09:11:17.530238 2026] [security2:error] [pid 21787:tid 21787] [client 34.156.6.139:42834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.doctorc.net"] [uri "/.env"] [unique_id "ap1mddsGRvRVWV2xPlEupQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-09-06 13:08:09 (1 month ago)	20 attempts against mh-misbehave-ban on train	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇬 193.24.211.219

🇨🇳 140.246.137.102

🇳🇱 45.156.87.252

🇭🇰 43.132.150.89

🇩🇪 172.70.243.249

🇸🇬 165.154.200.214

🇳🇱 138.226.239.90

🇺🇸 137.184.92.40

🇵🇱 91.236.172.41

🇩🇪 213.209.159.203

🇲🇽 187.174.238.116

🇺🇸 185.180.141.45

🇰🇷 175.209.156.146

🇺🇸 157.245.80.200

🇷🇸 77.243.26.226

🇨🇳 60.188.112.159

🇺🇸 40.124.171.204

🇮🇹 37.100.222.148

🇩🇪 35.242.241.43

🇩🇪 23.132.164.215