34.52.133.111
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Google LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS396982
- Hostname(s)
- 111.133.52.34.bc.googleusercontent.com
- Domain Name
- google.com
- Country
- 🇧🇪 Belgium
- City
- Brussels, Brussels Capital
Abuse Reports
Total reports
3,830 from
899 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Sonoflet |
CrowdSec detection | scenario: appsec-vpatch
|
Web App Attack | |
| 🇫🇷 Nicolas Devot |
34.52.133.111 - Recidivist IP still active after blacklisting. Reported from IIS access logs on 2026-11-01.
|
Web App Attack Bad Web Bot | |
| Anonymous |
Automated block on a production VoIP/web server: HTTP requests probing a production web service on port 80,443/tcp after 20 detected failures. Blocked automatically at the host.
|
Web App Attack Bad Web Bot | |
| Anonymous |
Auto-reported by Fail2Ban (NPM-Auth)
|
Web App Attack | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| Anonymous |
Repeat offender: banned by fail2ban 2 times across jails
|
Hacking | |
| 🇩🇪 MBombeck |
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
|
Web App Attack | |
| 🇧🇷 Peregrine |
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 34.52.133.111 - - [19/Oct/2026:16:45:46 -0300] "GET /sendgrid.env HTTP/1.1" 404 18193
|
Bad Web Bot | |
| 🇩🇪 IVski.com |
IVski WAF | WordPress scanner detected - probing wp-content, xmlrpc or wp-login
|
Hacking Brute-Force Web App Attack | |
| 🇵🇱 Budyn |
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 yvoictra |
Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files
|
Web App Attack | |
| 🇺🇦 Scientific Route |
[30/Oct/2026:18:51:04 +0200] -- 34.52.133.111 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.aws HTTP/1.1
|
Bad Web Bot Web App Attack | |
| Anonymous |
34.52.133.111 - - [31/Oct/2026:00:46:48 +0800] "GET /.env-sample HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
|
Bad Web Bot Web App Attack | |
| 🇹🇷 Jova |
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
|
Web App Attack | |
| 🇮🇹 mgarofano80 |
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown