This IP address has been reported a total of
36
times from
35 distinct
sources.
34.140.2.156 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-10T09:19:55.582431+02:00 srv02 postfix/postscreen[1024758]: HANGUP after 10 from [34.140.2.1 ...
show more2026-07-10T09:19:55.582431+02:00 srv02 postfix/postscreen[1024758]: HANGUP after 10 from [34.140.2.156]:34952 in tests after SMTP handshake
2026-07-10T09:19:55.594680+02:00 srv02 postfix/postscreen[1024758]: PREGREET 6 after 0 from [34.140.2.156]:22372: HELP\r\n
2026-07-10T09:20:03.094820+02:00 srv02 postfix/postscreen[1024758]: HANGUP after 5.3 from [34.140.2.156]:22372 in tests after SMTP handshake
...
show less
Mail Rejected due to Dynamic/Pool PTR on port 25, EHLO: example.com
Email Spam
Exploited Host
Anonymous
Honeypot hit: Brute-force attack detected on 23/TELNET
• Credentials: GET / HTTP/1.1:Host: 50.206.24 ...
show moreHoneypot hit: Brute-force attack detected on 23/TELNET
• Credentials: GET / HTTP/1.1:Host: 50.206.245.53:23, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36:Accept-Encoding: gzip
• Number of login attempts: 2
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-07-10T06:26:40.100052 liberator sendmail[3128639]: 66A6QSZw3128639: 156.2.140.34.bc.googleuserc ...
show more2026-07-10T06:26:40.100052 liberator sendmail[3128639]: 66A6QSZw3128639: 156.2.140.34.bc.googleusercontent.com [34.140.2.156] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
...
show less
Unsolicited TCP connection from 34.140.2.156 to port 0 at 2026-07-10T06:14:27Z. Source IP completed ...
show moreUnsolicited TCP connection from 34.140.2.156 to port 0 at 2026-07-10T06:14:27Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
Jul 10 07:53:43 [postfix/smtpd] NOQUEUE: lost connection after EHLO from 156.2.140.34.bc.googleuserc ...
show moreJul 10 07:53:43 [postfix/smtpd] NOQUEUE: lost connection after EHLO from 156.2.140.34.bc.googleusercontent.com[34.140.2.156]
Jul 10 07:53:43 [postfix/smtpd] improper command pipelining after CONNECT from 156.2.140.34.bc.googleusercontent.com[34.140.2.156]: HELP\r\n
...
show less
(eximsyntax) Exim syntax errors from 34.140.2.156 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 ...
show more(eximsyntax) Exim syntax errors from 34.140.2.156 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_EXIMSYNTAX; Logs: 2026-07-10 07:06:15 SMTP call from 156.2.140.34.bc.googleusercontent.com [34.140.2.156]:27184 dropped: too many syntax or protocol errors (last command was "\300#\300'?<\300\007\300\021?\005\023\001\023\002\023\003\001?\005E?\v?\002\001?\377\001?\001??\027???\022???\005?\005\001?????", NULL)
show less