JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.156.189.45

34.156.189.45 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	45.189.156.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.156.189.45

Whois 34.156.189.45

IP Abuse Reports for 34.156.189.45:

This IP address has been reported a total of 19 times from 17 distinct sources. 34.156.189.45 was first reported on June 14th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-16 00:13:31 (1 week ago)	Scanning/Probing (144) Request Overload (149)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-15 22:03:38 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14. show less	Web App Attack SSH Hacking
🇷🇺 6o6ep	2026-06-15 12:35:48 (1 week ago)	GET / HTTP/2.0	Port Scan Hacking
🇳🇱 vaddilyin	2026-06-15 06:42:32 (1 week ago)	{"ClientAddr":"34.156.189.45:42478","ClientHost":"34.156.189.45","ClientPort":"42478","ClientUsernam ... show more {"ClientAddr":"34.156.189.45:42478","ClientHost":"34.156.189.45","ClientPort":"42478","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":31274,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":31274,"RequestAddr":"qdrant.vdkln.com","RequestContentSize":0,"RequestCount":27686,"RequestHost":"qdrant.vdkln.com","RequestMethod":"GET","RequestPath":"/.env.production","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-15T06:42:29.476654084Z","StartUTC":"2026-06-15T06:42:29.476654084Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-15T06:42:29Z"} {"ClientAddr":"34.156.189.45:42504","ClientHost":"34.156.189.45","ClientPort":"42504","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":32400,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhe ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-15 03:52:40 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-15 03:27:34 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.156.189.45 (45.189.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.189.45 (45.189.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:27:29.604513 2026] [security2:error] [pid 18971:tid 18971] [client 34.156.189.45:37374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "journ-e.sabri.es"] [uri "/.env.backup.txt"] [unique_id "ai9xIej3Q-kucJ6JX_xK3wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 00:23:46 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.156.189.45 (45.189.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.189.45 (45.189.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:23:39.495642 2026] [security2:error] [pid 10497:tid 10510] [client 34.156.189.45:35152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pecanvalleyestates.net"] [uri "/.env.backup"] [unique_id "ai9GC9MGYCRLuXoEYcfztQAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-06-14 23:56:50 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 COMAITE	2026-06-14 21:37:40 (1 week ago)	Suspicious URL access.	Web App Attack
🇿🇦 rockethost	2026-06-14 13:58:00 (1 week ago)		DDoS Attack Brute-Force
🇷🇺 Reaper	2026-06-14 13:46:20 (1 week ago)	GET /.env.backup	Web App Attack
🇬🇧 consul.to	2026-06-14 07:02:08 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-14 06:31:56 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.156.189.45 (BE/Belgium/45.189.156.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.156.189.45 (BE/Belgium/45.189.156.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 big-cloud.nl	2026-06-14 05:47:07 (1 week ago)	Try to access /.env	Web App Attack
🇩🇪 updown.io	2026-06-14 05:18:32 (1 week ago)	{"level":"info","ts":1781414306.624175,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1781414306.624175,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.156.189.45","remote_port":"54744","client_ip":"34.156.189.45","proto":"HTTP/1.1","method":"GET","host":"status.tykr.com","uri":"/admin/api/.env","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Linux; Android 9; MI 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.42 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.tykr.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000077869,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1781414306.6352963,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.156.189.45","remote_port":"54340","client_ip":"34.156.189.45","proto":"HTTP/1.1","method":"GET","host":"s ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.172.180.124

🇭🇰 156.146.45.101

🇫🇮 147.185.133.7

🇨🇦 104.207.49.254

🇨🇳 42.232.0.55

🇨🇳 27.18.85.157

🇺🇸 20.57.47.226

🇧🇬 193.24.211.107

🇳🇱 176.65.149.64

🇺🇸 173.71.106.55

🇮🇹 172.213.152.46

🇺🇸 161.123.166.43

🇺🇸 40.119.32.47

🇺🇸 13.218.80.192

🇺🇸 185.180.142.129

🇸🇪 158.174.210.161

🇨🇳 112.111.141.7

🇷🇴 80.94.92.234

🇮🇩 2406:da19:776:6e00:97a1:e30a:e391:9ec9

🇩🇪 212.132.64.89