JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.156.242.137

34.156.242.137 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 67%: ?

67%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	137.242.156.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.156.242.137

Whois 34.156.242.137

IP Abuse Reports for 34.156.242.137:

This IP address has been reported a total of 16 times from 12 distinct sources. 34.156.242.137 was first reported on May 26th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-05-29 11:25:12 (5 days ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)	Hacking Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-27 19:05:27 (1 week ago)	Too many Status 40X (11) Scanning/Probing (61) Request Overload (382)	Brute-Force Web App Attack
🇨🇦 polycoda	2026-05-27 17:35:34 (1 week ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)	Hacking Bad Web Bot Web App Attack
🇩🇪 4server	2026-05-27 13:25:20 (1 week ago)	[WedMay2715:25:17.3773942026][security2:error][pid3261000:tid3261112][client34.156.242.137:0]ModSecu ... show more [WedMay2715:25:17.3773942026][security2:error][pid3261000:tid3261112][client34.156.242.137:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.your-team.ch\"][uri\"/api/env\"][unique_id\"ahbwvT1jknSCmBXrqxNCcAAAAQ4\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 dynamix	2026-05-27 12:09:19 (1 week ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 11:29:05 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.156.242.137 (137.242.156.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.156.242.137 (137.242.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 07:29:00.732871 2026] [security2:error] [pid 17442:tid 17442] [client 34.156.242.137:34746] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.wevfc.org\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wevfc.org"] [uri "/.config/gcloud/credentials.db"] [unique_id "ahbVfJohJV16Wfl-JSF6UQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-05-27 09:54:23 (1 week ago)	20 attempts against mh-misbehave-ban on train	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-05-27 09:17:28 (1 week ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 06:40:43 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 34.156.242.137 (137.242.156.34.bc.googleusercon ... show more (mod_security) mod_security (id:210831) triggered by 34.156.242.137 (137.242.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 02:40:35.044660 2026] [security2:error] [pid 4429:tid 4429] [client 34.156.242.137:52056] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ftp.summitartists.com\|F\|4"] [data "grub-client"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ftp.summitartists.com"] [uri "/v1/actuator/env"] [unique_id "ahaR42fDp2bYCsuyB5zgGwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-27 06:05:15 (1 week ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇳🇱 Savvii	2026-05-27 01:53:26 (1 week ago)	20 attempts against mh-misbehave-ban on mars	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-27 01:39:33 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.156.242.137 (US/United States/137. ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.156.242.137 (US/United States/137.242.156.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇭🇺 bcsaba	2026-05-27 00:53:48 (1 week ago)	Multiple web server 400 error codes from same source ip. 34.156.242.137 - - [27/May/2026:02:53:37 +0 ... show more Multiple web server 400 error codes from same source ip. 34.156.242.137 - - [27/May/2026:02:53:37 +0200] "GET /app/actuator/heapdump HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Linux; Android 7.1.2; Redmi 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" show less	Web App Attack Brute-Force
🇩🇪 XICTRON	2026-05-26 23:55:07 (1 week ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇳🇱 e.fierstra	2026-05-26 23:47:26 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 219.78.63.235

🇫🇷 194.5.53.73

🇮🇱 176.231.150.223

🇺🇸 157.230.216.45

🇫🇮 147.185.133.214

🇺🇸 100.31.248.192

🇺🇸 54.153.81.119

🇺🇸 52.8.29.185

🇸🇬 47.128.222.236

🇺🇸 45.79.207.181

🇺🇸 45.73.160.139

🇨🇳 39.154.8.241

🇻🇪 38.3.195.64

🇺🇸 13.58.234.1

🇬🇧 213.171.208.62

🇳🇱 194.120.230.72

🇬🇧 191.101.80.202

🇨🇴 186.87.33.35

🇦🇷 186.56.11.2

🇧🇷 186.0.149.151