JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.156.2.38

34.156.2.38 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 48%: ?

48%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	38.2.156.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.156.2.38

Whois 34.156.2.38

IP Abuse Reports for 34.156.2.38:

This IP address has been reported a total of 19 times from 16 distinct sources. 34.156.2.38 was first reported on September 20th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-30 05:00:43 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.156.2.38 (38.2.156.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.156.2.38 (38.2.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 01:00:37.418066 2026] [security2:error] [pid 4018:tid 4018] [client 34.156.2.38:35586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bidsonlineauctions.com"] [uri "/.git/config"] [unique_id "aryXdZuAFKhbKe-7aswdOwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Stara	2026-09-29 08:37:53 (3 weeks ago)	ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)	Brute-Force Hacking Web App Attack
🇦🇺 sel	2026-09-29 05:04:32 (3 weeks ago)	Web scanner on dsacustoms.co.nz: 47 requests. GET /phpinfo.php 404 \| GET /info.php 404	Web App Attack Bad Web Bot
🇳🇱 Savvii	2026-09-27 05:25:06 (3 weeks ago)	15 attempts against mh-modsecurity-ban on hostbillst4	Brute-Force Web App Attack
🇵🇱 Budyn	2026-09-27 03:20:54 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.dont-eat-the-pudding.online \| URI: /.git/config \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 loebas	2026-09-26 06:01:17 (3 weeks ago)	[4xx]Probing for non existant files, or client not authorized	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-24 18:00:40 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.156.2.38 (38.2.156.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.156.2.38 (38.2.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:00:35.663154 2026] [security2:error] [pid 22368:tid 22368] [client 34.156.2.38:42758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.supportourlibrary.org"] [uri "/.git/config"] [unique_id "arVlQ4Sm4mnZoYWE3XKl0wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-09-24 02:28:39 (4 weeks ago)	2026/09/24 03:28:36 [error] 325888#325888: 1726135 access forbidden by rule, client: 34.156.2.38, s ... show more 2026/09/24 03:28:36 [error] 325888#325888: 1726135 access forbidden by rule, client: 34.156.2.38, server: betatechnologies.info, request: "GET /.env HTTP/2.0", host: "blogs.betatechnologies.info" 34.156.2.38 - - [24/Sep/2026:03:28:36 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2026/09/24 03:28:37 [error] 325888#325888: *1726135 access forbidden by rule, client: 34.156.2.38, server: betatechnologies.info, request: "GET /app/.env HTTP/2.0", host: "blogs.betatechnologies.info" show less	Brute-Force Web App Attack
🇩🇪 FD-IX	2026-09-23 20:40:32 (4 weeks ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-23 11:12:14 (4 weeks ago)	[ti-02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.156.2.38 - - [23/Sep/2026:13:12:02 +0200] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-09-23 10:24:59 (4 weeks ago)	16.092 requests in 1 hour (4w1d8h)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-09-23 09:46:57 (4 weeks ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 middelkoopcc	2026-09-23 09:43:02 (4 weeks ago)	2026-09-23 11:40:22 GET /.git/config [404] && 2026-09-23 11:40:23 GET /.env [404] && 2026-09-23 11:4 ... show more 2026-09-23 11:40:22 GET /.git/config [404] && 2026-09-23 11:40:23 GET /.env [404] && 2026-09-23 11:40:25 GET /.env.bak [404] && 225 more within 20 minutes show less	Web App Attack
🇫🇷 masterguru	2026-09-23 07:50:35 (4 weeks ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇰🇷 ZEROVOX	2026-09-21 22:50:57 (1 month ago)	CrowdSec: crowdsecurity/http-sensitive-files detected	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a01:4020:2:b:102::55d

🇳🇱 2a01:4020:2:b:102::d1

🇧🇪 207.175.36.176

🇺🇸 195.184.76.197

🇺🇸 195.184.76.34

🇹🇷 176.236.127.114

🇺🇸 162.252.52.107

🇮🇳 103.248.120.6

🇷🇴 92.118.39.71

🇨🇦 85.217.149.56

🇳🇱 77.91.71.24

🇺🇸 73.198.127.103

🇺🇸 66.132.159.45

🇮🇳 34.47.234.53

🇧🇪 34.38.113.44

🇳🇱 2a01:4020:2:b:102::5e1

🇳🇱 2a01:4020:2:b:102::538

🇳🇱 2a01:4020:2:b:102::3dd

🇳🇱 2a01:4020:2:b:102::50

🇺🇸 205.210.31.54