JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.53.133.164

34.53.133.164 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	164.133.53.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.53.133.164

Whois 34.53.133.164

IP Abuse Reports for 34.53.133.164:

This IP address has been reported a total of 28 times from 26 distinct sources. 34.53.133.164 was first reported on July 12th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 geot	2026-07-13 14:27:03 (3 days ago)	<<removed>> / HTTP/1.1 \x16\x03 OPTIONS / HTTP/1.1 POST / HTTP/1.1	Port Scan Hacking Web App Attack
🇩🇪 paprika	2026-07-13 04:56:39 (3 days ago)	Automated report #1: 1 attacks detected. Types: Hex Encoded Attack.	Hacking
Anonymous	2026-07-12 12:17:13 (4 days ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇬🇷 setupgr	2026-07-12 08:20:22 (4 days ago)	(mod_security) mod_security (id:9999001) triggered by 34.53.133.164 (BE/Belgium/Brussels Capital/Bru ... show more (mod_security) mod_security (id:9999001) triggered by 34.53.133.164 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Jul 12 11:20:21.477209 2026] [security2:error] [pid 3520054:tid 3520199] [client 34.53.133.164:35434] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^154\\\\.57\\\\.7\\\\.73$" at REQUEST_HEADERS:Host. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "154"] [id "9999001"] [msg "Direct incoming request to server shared IP blocked by admin"] [hostname "154.57.7.73"] [uri "/"] [unique_id "alNOReBXO_AKa4rM0GkUMwAABNY"] show less	Port Scan
🇧🇷 mubusys.com	2026-07-12 08:00:37 (4 days ago)	34.53.133.164 - - [12/Jul/2026:05:00:26 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB9\xBA ... show more 34.53.133.164 - - [12/Jul/2026:05:00:26 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB9\xBA}\x1E\x1A\xFF\x85\x89\xCD$\xF1\x97p\xF7\xC9\xB2\xC5!\x1E\x95\x0E\x812KA\xAE\xD4\x18\xDF\xBE\xC7\x99 Z\x07\x98\xB9C\x81\xE6\xB0\x18\xF2\xA5\xF4\x1D\xA9\x8F'z*\xB6\xCF\xA9\xA0D\x95\x91Y+\xD0\xC4\xC8\xDF\xB8\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" "-" 34.53.133.164 - - [12/Jul/2026:05:00:31 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 157 "-" "-" "-" show less	Hacking Brute-Force
🇩🇪 firestorm	2026-07-12 07:58:54 (4 days ago)	34.53.133.164 - - [12/Jul/2026:09:58:54 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ... show more 34.53.133.164 - - [12/Jul/2026:09:58:54 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-" 34.53.133.164 - - [12/Jul/2026:09:58:54 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x038JZ\xC4i\x80\xB1\x1A\x10\xFF!\xC0" 400 150 "-" "-" 34.53.133.164 - - [12/Jul/2026:09:58:54 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xF9\xAC\xABN\x84B\xEB\x9C\x04\x8E\x8C\xC2\x05\x1E0\x7F\x9Al\xD6C\xA0\x906/A\x80ag,\x22\xBEZ \xB6PM>\xDAi\x89\x91u\xDF\xDA\xF6-\xFF\xD1\x90\x96\xA6\x12\x10B?\xB59\x1C\xB7\x84\xF4\xC6\x83v8\x00\x9C\x13\x02\x13\x03\x13\x01\x003\x009\x005\x00/\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4\x00\xC3\xC0#\xC0'\x00g\x00@\xC0r\xC0v\x00\xBE\x00\xBD\xC0" 400 150 "-" "-" ... show less	Brute-Force Web App Attack
🇩🇪 Ano_Nym	2026-07-12 07:56:50 (4 days ago)	CrowdSec IDS alert on VPS 85.215.198.123 (DE). Scenario: crowdsecurity/http-probing	Web App Attack
🇧🇷 somosbr	2026-07-12 07:16:43 (4 days ago)	[2026-07-12T07:16:43Z] Unsolicited scan from 34.53.133.164 to port 80/tcp	Port Scan
🇺🇸 gu-alvareza	2026-07-12 07:05:13 (4 days ago)	Nmap.Script.Scanner	Port Scan
🇨🇦 lakered	2026-07-12 07:03:16 (4 days ago)	Detectors: [NGINX] \| Reasons: Nginx: Default server trap hit \| Evidence: High-Criminality-Signature ... show more Detectors: [NGINX] \| Reasons: Nginx: Default server trap hit \| Evidence: High-Criminality-Signature (p0f::64:0::mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95), OS-Signature-Mismatch (UA:Windows/p0f:Linux) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 \| TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:67520m) show less	Port Scan Exploited Host
🇩🇪 evilrave	2026-07-12 06:41:03 (4 days ago)	34.53.133.164 - - [12/Jul/2026:06:41:03 +0000] "GET / HTTP/1.1" 444 0 Host="[REDACTED_IP]" SNI="-" . ... show more 34.53.133.164 - - [12/Jul/2026:06:41:03 +0000] "GET / HTTP/1.1" 444 0 Host="[REDACTED_IP]" SNI="-" ... show less	Bad Web Bot
🇫🇷 pm33	2026-07-12 06:35:22 (4 days ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 brantknudson.org	2026-07-12 06:32:46 (4 days ago)	Incorrect Host header	Web App Attack Brute-Force
🇳🇱 donarev419	2026-07-12 06:04:53 (4 days ago)	Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 109.110.170.76:80 Use ... show more Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 109.110.170.76:80 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple show less	Port Scan Hacking
🇩🇪 Mykola Spesivtsev	2026-07-12 05:49:38 (4 days ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0 ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa show less	Port Scan Web App Attack Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.77

🇺🇿 84.54.114.145

🇩🇪 77.90.19.14

🇳🇱 45.156.128.131

🇺🇸 2600:1f18:5b75:b800:e568:6e2a:b875:69ee

🇰🇷 175.214.123.177

🇩🇪 167.94.146.69

🇻🇳 103.63.108.25

🇻🇳 103.61.122.229

🇺🇸 16.148.179.76

🇳🇱 5.187.35.142

🇧🇴 181.188.176.242

🇺🇸 173.239.240.119

🇯🇵 160.251.169.213

🇨🇳 124.220.147.218

🇨🇿 109.164.49.219

🇺🇸 95.181.189.175

🇺🇸 2a09:bac1:7680:460::5e:7c

🇷🇴 193.230.189.189

🇻🇳 171.244.39.95