JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.101.56.63

34.101.56.63 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Google Asia Pacific Pte. Ltd. (GAPPL)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	63.56.101.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.101.56.63

Whois 34.101.56.63

IP Abuse Reports for 34.101.56.63:

This IP address has been reported a total of 37 times from 27 distinct sources. 34.101.56.63 was first reported on August 31st 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 13:08:51 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:08:44.254801 2026] [security2:error] [pid 22747:tid 22747] [client 34.101.56.63:46848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "po.semisysteme.com"] [uri "/.env.old"] [unique_id "apbOXH6x8Ci1AT6A8Ws32AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-09-01 13:05:26 (7 hours ago)	34.101.56.63 - - [01/Sep/2026:16:05:25 +0300] "GET /actuator/env HTTP/2.0" 404 2757 "-" "crusader-wo ... show more 34.101.56.63 - - [01/Sep/2026:16:05:25 +0300] "GET /actuator/env HTTP/2.0" 404 2757 "-" "crusader-worker/1.0" 34.101.56.63 - - [01/Sep/2026:16:05:25 +0300] "GET /_ignition/health-check HTTP/2.0" 404 2757 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 11:00:08 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:00:03.217867 2026] [security2:error] [pid 29977:tid 29977] [client 34.101.56.63:46956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.30daysout.com"] [uri "/.env.example"] [unique_id "apawM26cMnV7_oBo5VmJFAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-01 10:02:09 (10 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Séfora Srl	2026-09-01 10:01:20 (10 hours ago)	crowdsecurity/http-probing detected by CrowdSec	Web App Attack
🇩🇪 netclix.gr	2026-09-01 09:31:14 (10 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.101.56.63 (ID/Indonesia/63.56.101.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.101.56.63 (ID/Indonesia/63.56.101.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
Anonymous	2026-09-01 09:05:26 (11 hours ago)	Scanner hitting /.env.backup on 176.31.46.240 (GOOGLE-CLOUD) — aaguard	Brute-Force Port Scan
Anonymous	2026-09-01 08:36:03 (11 hours ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-01 08:17:23 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:17:19.634711 2026] [security2:error] [pid 14543:tid 14543] [client 34.101.56.63:51912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "austintrauma.com"] [uri "/.env.save"] [unique_id "apaKD38LypWBrKO9jhn8twAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 07:49:27 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:49:23.453150 2026] [security2:error] [pid 18844:tid 18844] [client 34.101.56.63:49682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galego.anxo.org"] [uri "/.env.bak"] [unique_id "apaDgzsTzAItb73aVSwcSQAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-09-01 06:43:50 (13 hours ago)	(nginxENVSCAN) nginx environment-file scanner detected from 34.101.56.63 (ID/Indonesia/Jakarta/Jakar ... show more (nginxENVSCAN) nginx environment-file scanner detected from 34.101.56.63 (ID/Indonesia/Jakarta/Jakarta/63.56.101.34.bc.googleusercontent.com) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-01 06:28:32 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.101.56.63 (63.56.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:28:24.827320 2026] [security2:error] [pid 14495:tid 14495] [client 34.101.56.63:44348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sveum.net"] [uri "/.env.old"] [unique_id "apZwiBwlsGpRHqOpmtgAuQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 gadix	2026-09-01 05:42:47 (14 hours ago)	[01/Sep/2026:07:42:45.459866 +0200] apZl1Sxj6cD0i9IFtT64eQAAAAQ 34.101.56.63 58208 127.0.0.1 7081 [0 ... show more [01/Sep/2026:07:42:45.459866 +0200] apZl1Sxj6cD0i9IFtT64eQAAAAQ 34.101.56.63 58208 127.0.0.1 7081 [01/Sep/2026:07:42:45.466656 +0200] apZl1SkO2L1woj4WF0oL7AAAAAM 34.101.56.63 58236 127.0.0.1 7081 [01/Sep/2026:07:42:45.469153 +0200] apZl1fExYojLFRYWUDf9YAAAAAo 34.101.56.63 58252 127.0.0.1 7081 ... show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-09-01 05:14:12 (15 hours ago)	13 attacks on PHP URLs, env grabbing URLs: GET /wp-config.php~ HTTP/1.1 GET /.env.backup HTTP/1.1	Web App Attack Hacking
Anonymous	2026-09-01 04:36:03 (15 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env HTTP/1.1, GET /actuator/env HTTP/1.1, GET /.env.old HTTP/1.1 show less	Hacking Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.48.20.195

🇹🇼 198.235.24.65

🇲🇽 189.155.84.72

🇨🇳 124.161.224.81

🇩🇪 89.238.70.229

🇩🇪 87.162.147.254

🇧🇬 79.124.62.178

🇯🇵 34.84.21.60

🇺🇸 216.25.89.75

🇹🇼 198.235.24.77

🇨🇳 121.24.148.2

🇺🇸 35.86.109.130

🇲🇾 202.165.22.102

🇺🇸 170.106.117.80

🇨🇳 120.194.50.39

🇮🇩 103.98.176.164

🇬🇧 35.203.210.61

🇺🇸 216.244.66.239

🇩🇪 213.209.159.228

🇺🇸 104.207.47.196