This IP address has been reported a total of
138
times from
68 distinct
sources.
34.52.164.192 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Heralding honeypot: mysql on port 3306, 1 auth attempts, user=root
Unsolicited TCP connection from 34.52.164.192 to port 0 at 2026-06-03T04:05:47Z. Source IP completed ...
show moreUnsolicited TCP connection from 34.52.164.192 to port 0 at 2026-06-03T04:05:47Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ...
show moreHoneypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud
show less
[TueJun0222:46:36.7210542026][security2:error][pid668361:tid668391][client34.52.164.192:0]ModSecurit ...
show more[TueJun0222:46:36.7210542026][security2:error][pid668361:tid668391][client34.52.164.192:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"farmaciaferrari.ch\"][uri\"/\"][unique_id\"ah9BLGe9gvkFToPGnQi23QAAAAw\"]
show less
[TueJun0222:27:55.2932612026][security2:error][pid3602463:tid3602703][client34.52.164.192:0]ModSecur ...
show more[TueJun0222:27:55.2932612026][security2:error][pid3602463:tid3602703][client34.52.164.192:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"203\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"lemox.ch\"][uri\"/\"][unique_id\"ah88y4lDa0duaxY2wiYCXwAAARE\"]
show less
TLS/SNI Probe | rDNS: 192.164.52.34.bc.googleusercontent.com | F2B/angie-blackhole@2026-06-02T19:49: ...
show moreTLS/SNI Probe | rDNS: 192.164.52.34.bc.googleusercontent.com | F2B/angie-blackhole@2026-06-02T19:49:20Z
show less
Port Scan
Hacking
Anonymous
Honeypot hit: Unauthorized traffic on 27017/mongod
Reported by: https://github.com/sefinek/T-Pot-To- ...
show moreHoneypot hit: Unauthorized traffic on 27017/mongod
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Port Scan
Anonymous
tls scan
Port Scan
Showing 1 to
15
of 138 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩