JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.156.52.120

34.156.52.120 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 85%: ?

85%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	120.52.156.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.156.52.120

Whois 34.156.52.120

IP Abuse Reports for 34.156.52.120:

This IP address has been reported a total of 21 times from 15 distinct sources. 34.156.52.120 was first reported on August 31st 2026, and the most recent report was 39 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-09-01 04:25:12 (39 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇿🇦 vanderhost	2026-09-01 04:11:03 (53 minutes ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.lo ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage/logs show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-01 03:47:03 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:46:56.337988 2026] [security2:error] [pid 12075:tid 12075] [client 34.156.52.120:51410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazingthailand.net"] [uri "/.env.old"] [unique_id "apZKsHliCricOrfr55qGBAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 02:41:21 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:41:15.423911 2026] [security2:error] [pid 5407:tid 5407] [client 34.156.52.120:46684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.quantumacceleration.org"] [uri "/.env"] [unique_id "apY7S4PKowvxU8wvwaXe4gAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 febrian.de	2026-09-01 02:40:14 (2 hours ago)	Malicious HTTP(S) probing detected by Fail2Ban	Web App Attack
🇸🇪 vaia.cloud	2026-09-01 02:30:04 (2 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 01:38:59 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:38:52.189105 2026] [security2:error] [pid 25799:tid 25799] [client 34.156.52.120:59574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quick2sleep.com.bestprostate.com"] [uri "/.env.old"] [unique_id "apYsrOohoHxvhyhhFxT9IwAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 00:55:07 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:55:02.215196 2026] [security2:error] [pid 30341:tid 30341] [client 34.156.52.120:34488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debbieparisi.com"] [uri "/.env.backup"] [unique_id "apYiZreT9cx-8gGP3B7W6AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-09-01 00:24:45 (4 hours ago)	34.156.52.120 - - [01/Sep/2026:03:24:44 +0300] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-work ... show more 34.156.52.120 - - [01/Sep/2026:03:24:44 +0300] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.156.52.120 - - [01/Sep/2026:03:24:44 +0300] "GET /.env.local HTTP/1.1" 401 36 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 00:14:41 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.156.52.120 (120.52.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:14:32.647179 2026] [security2:error] [pid 3478:tid 3478] [client 34.156.52.120:41722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.btccasting.com"] [uri "/.env.prod"] [unique_id "apYY6EgHfdxZVQ20b4_v5QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-08-31 23:38:25 (5 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.156.52.120 (BE/Belgium/120.52.156.34.bc.goog ... show more (mod_security) mod_security (id:949110) triggered by 34.156.52.120 (BE/Belgium/120.52.156.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
Anonymous	2026-08-31 22:55:02 (6 hours ago)	suspicious request in access.log	Web App Attack
🇫🇷 dynamix	2026-08-31 22:47:56 (6 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-08-31 22:42:02 (6 hours ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.e ... show more Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.example HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /actuator/env HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.production HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /.env.bak HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.save HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.backup HTTP/1.1, GET /env HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.old HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-08-31 22:27:44 (6 hours ago)	Fail2Ban triggered	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 183.96.163.213

🇺🇸 137.184.32.199

🇨🇳 117.72.76.203

🇫🇷 85.217.140.41

🇩🇪 45.135.193.193

🇳🇱 40.99.204.197

🇺🇸 8.234.162.138

🇬🇧 193.176.29.8

🇱🇹 188.69.225.188

🇧🇷 179.0.119.245

🇳🇱 176.65.148.244

🇫🇷 169.58.151.194

🇺🇸 162.216.150.55

🇺🇸 153.75.82.229

🇩🇪 138.199.207.57

🇫🇷 91.231.89.145

🇷🇺 85.174.199.239

🇳🇱 45.148.10.151

🇭🇰 35.220.197.78

🇺🇸 24.251.174.177