JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.156.205.54

34.156.205.54 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	54.205.156.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.156.205.54

Whois 34.156.205.54

IP Abuse Reports for 34.156.205.54:

This IP address has been reported a total of 21 times from 20 distinct sources. 34.156.205.54 was first reported on July 23rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-23 20:22:05 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.156.205.54 (54.205.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.205.54 (54.205.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 16:21:58.927607 2026] [security2:error] [pid 4035682:tid 4035695] [client 34.156.205.54:54404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manage.aafm.us"] [uri "/.env.example"] [unique_id "amJ35mySRXQFNc6z1BhMeQAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 bohl-aiG5aef	2026-07-23 19:43:38 (1 hour ago)	Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound	Hacking
🇦🇺 AWW-Admin	2026-07-23 19:11:32 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.156.205.54 (BE/Belgium/54.205.156.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.156.205.54 (BE/Belgium/54.205.156.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 Hary74656	2026-07-23 18:15:14 (3 hours ago)	[Thu Jul 23 20:14:53.454567 2026] [security2:error] [pid 159180:tid 159201] [remote 34.156.205.54:46 ... show more [Thu Jul 23 20:14:53.454567 2026] [security2:error] [pid 159180:tid 159201] [remote 34.156.205.54:46944] [client 34.156.205.54] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "auth.aschi.at"] [uri "/admin/.env"] [unique_id "amJaHR56CGSaqll3iipLVgABagM"] [Thu Jul 23 20:14:53.465242 2026] [security2:error] [pid 159180:tid 159199] [remote 34.156.205.54:46944] [client 34.156.205.54] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file ... show less	Web App Attack
🇳🇱 e.fierstra	2026-07-23 17:56:22 (3 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-07-23 17:45:57 (3 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.156.205.54 (BE/Belgium/54.205.156.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.156.205.54 (BE/Belgium/54.205.156.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-07-23 16:57:56 (4 hours ago)	34.156.205.54 - - [23/Jul/2026:18:57:55 +0200] "GET /key.json HTTP/1.1" 404 512 "-" "Mozilla/5.0 (co ... show more 34.156.205.54 - - [23/Jul/2026:18:57:55 +0200] "GET /key.json HTTP/1.1" 404 512 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.156.205.54 - - [23/Jul/2026:18:57:55 +0200] "GET /firebase-adminsdk.json HTTP/1.1" 404 512 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.156.205.54 - - [23/Jul/2026:18:57:55 +0200] "GET /.git/HEAD HTTP/1.1" 403 5512 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 34.156.205.54 - - [23/Jul/2026:18:57:55 +0200] "GET /.ssh/id_ecdsa HTTP/1.1" 404 512 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected]" 34.156.205.54 - - [23/Jul/2026:18:57:55 +0200] "GET /config.js HTTP/1.1" 404 5509 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 34.156.205.54 - - [23/Jul/2026:18:57:55 +0200] ... show less	DDoS Attack
Anonymous	2026-07-23 16:57:30 (4 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 Aetherweb Ark	2026-07-23 16:51:01 (4 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.156.205.54 (BE/Belgium/54.205.156.34.bc.goog ... show more (mod_security) mod_security (id:949110) triggered by 34.156.205.54 (BE/Belgium/54.205.156.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇸🇪 vaia.cloud	2026-07-23 16:45:01 (4 hours ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-23 16:33:01 (4 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Ba-Yu	2026-07-23 16:17:28 (5 hours ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 dynamix	2026-07-23 16:10:50 (5 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Savvii	2026-07-23 16:03:19 (5 hours ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-23 15:58:47 (5 hours ago)	Aggressive web search of vulnerable pages: /config/.env /api/.env /.env /backend/.env /admin/.env . ... show more Aggressive web search of vulnerable pages: /config/.env /api/.env /.env /backend/.env /admin/.env ... show less	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.34

🇧🇷 191.178.223.110

🇺🇸 185.180.141.15

🇧🇷 177.84.107.224

🇸🇪 171.25.158.74

🇬🇧 35.203.211.246

🇬🇧 195.96.139.144

🇬🇧 195.96.139.116

🇬🇾 190.80.24.14

🇧🇷 187.67.248.91

🇺🇸 185.180.141.13

🇺🇸 185.180.141.12

🇺🇸 162.216.150.40

🇺🇸 91.230.168.248

🇬🇧 87.236.176.145

🇺🇸 66.132.224.90

🇨🇴 45.225.227.91

🇳🇱 45.148.10.157

🇮🇳 35.200.201.144

🇺🇸 20.169.222.183