JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.156.0.106

34.156.0.106 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	106.0.156.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.156.0.106

Whois 34.156.0.106

IP Abuse Reports for 34.156.0.106:

This IP address has been reported a total of 45 times from 35 distinct sources. 34.156.0.106 was first reported on August 26th 2026, and the most recent report was 44 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-27 10:07:07 (44 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:07:04.142014 2026] [security2:error] [pid 2697:tid 2697] [client 34.156.0.106:34758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.medioskreativos.com.spyasociados.com"] [uri "/wp-config.php~"] [unique_id "apAMSL-vSYQURdFTyXVWSwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-08-27 09:55:06 (56 minutes ago)		Web App Attack
🇪🇸 yvoictra	2026-08-27 09:22:39 (1 hour ago)	34.156.0.106 - - [27/Aug/2026:11:22:39 +0200] "GET /.env.dev HTTP/1.1" 404 19 "-" "crusader-worker/1 ... show more 34.156.0.106 - - [27/Aug/2026:11:22:39 +0200] "GET /.env.dev HTTP/1.1" 404 19 "-" "crusader-worker/1.0" 34.156.0.106 - - [27/Aug/2026:11:22:39 +0200] "GET /env HTTP/1.1" 404 19 "-" "crusader-worker/1.0" 34.156.0.106 - - [27/Aug/2026:11:22:39 +0200] "GET /actuator/env HTTP/1.1" 404 19 "-" "crusader-worker/1.0" 34.156.0.106 - - [27/Aug/2026:11:22:39 +0200] "GET /.env.bak HTTP/1.1" 404 19 "-" "crusader-worker/1.0" 34.156.0.106 - - [27/Aug/2026:11:22:39 +0200] "GET /.env.old HTTP/1.1" 404 19 "-" "crusader-worker/1.0" ... show less	Brute-Force Web App Attack
🇫🇷 Catalin Negru	2026-08-27 09:04:02 (1 hour ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇩🇪 0x44	2026-08-27 08:40:02 (2 hours ago)	TCP SYN Discovery - Flooding	DDoS Attack
🇧🇷 Halux	2026-08-27 08:29:48 (2 hours ago)	34.156.0.106 Probing protected path or service	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 08:21:00 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 04:20:52.192576 2026] [security2:error] [pid 32543:tid 32543] [client 34.156.0.106:56260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.albionglobalmarketing.com"] [uri "/wp-config.php.swp"] [unique_id "ao_zZCSjJhlgxuJ_uDaa0gAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-27 07:06:55 (3 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-27 06:29:06 (4 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 06:28:42 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 02:28:35.266510 2026] [security2:error] [pid 4055:tid 4055] [client 34.156.0.106:35506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotdog.to.raularrue.com"] [uri "/.env.example"] [unique_id "ao_ZExNkd2McQtAPoeuBzgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-08-27 06:00:33 (4 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-27 05:55:27 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.156.0.106 (106.0.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 01:55:22.220816 2026] [security2:error] [pid 5244:tid 5244] [client 34.156.0.106:50634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honeybeeplace.com"] [uri "/.env.bak"] [unique_id "ao_RSnEMOhCrTD90M-pR0wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-27 05:44:51 (5 hours ago)	34.156.0.106 - - [27/Aug/2026:05:44:51 +0000] "GET /.env.local HTTP/1.1" 404 4401 "-" "crusader-work ... show more 34.156.0.106 - - [27/Aug/2026:05:44:51 +0000] "GET /.env.local HTTP/1.1" 404 4401 "-" "crusader-worker/1.0" ... show less	Bad Web Bot Web App Attack
🇭🇺 bcsaba	2026-08-27 05:37:33 (5 hours ago)	Probing for .env file: 34.156.0.106 - - [27/Aug/2026:07:34:23 +0200] "GET /.env.prod HTTP/1.1" 403 1 ... show more Probing for .env file: 34.156.0.106 - - [27/Aug/2026:07:34:23 +0200] "GET /.env.prod HTTP/1.1" 403 146 "-" "crusader-worker/1.0" show less	Web App Attack
Anonymous	2026-08-27 05:23:05 (5 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.save HTTP/1.1, GET /crusader-404-probe HTTP/1.1, G ... show more Bot / scanning and/or hacking attempts: GET /.env.save HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /actuator/env HTTP/1.1, GET /env HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.bak HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.old HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.local HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.backup HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env HTTP/1.1 show less	Hacking Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 221.120.5.198

🇩🇪 195.30.15.36

🇳🇱 94.154.43.60

🇧🇷 45.230.131.222

🇷🇴 2.57.122.238

🇰🇷 222.107.156.227

🇨🇳 220.179.255.180

🇺🇿 213.230.90.238

🇲🇽 187.241.46.253

🇩🇪 178.63.249.86

🇲🇽 177.230.70.117

🇺🇸 167.253.17.91

🇫🇮 147.185.133.119

🇫🇷 141.95.203.240

🇨🇦 138.197.164.175

🇨🇳 106.15.236.209

🇫🇷 91.196.152.221

🇪🇸 85.50.121.120

🇺🇸 54.226.15.31

🇳🇱 45.198.224.26