JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.53.167.54

34.53.167.54 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	54.167.53.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.53.167.54

Whois 34.53.167.54

IP Abuse Reports for 34.53.167.54:

This IP address has been reported a total of 74 times from 60 distinct sources. 34.53.167.54 was first reported on March 9th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 dermatovirtual	2026-09-19 11:01:19 (3 hours ago)	Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ... show more Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 102 unauthorized requests recorded between 2026-09-18 10:57:10 UTC and 2026-09-18 10:57:21 UTC (rate: ~102 req/min). Edge perimeter firewall drop active. Log sample: [2026-09-18 10:57:21 UTC] IP: 34.53.167.54 - W3C IIS (Port 443): GET /uploads../.env -> HTTP 404 [CLIENT: 34.53.167.54] [2026-09-18 10:57:21 UTC] IP: 34.53.167.54 - W3C IIS (Port 443): GET /assets../.env -> HTTP 404 [CLIENT: 34.53.167.54] [2026-09-18 10:57:21 UTC] IP: 34.53.167.54 - W3C IIS (Port 443): GET /img../.env -> HTTP 404 [CLIENT: 34.53.167.54] show less	Bad Web Bot Web App Attack
🇧🇷 Sysadmin-CLC	2026-09-18 23:58:57 (14 hours ago)	2026/09/18 23:58:57 [error] 475#475: 20180 limiting requests, excess: 40.100 by zone "general", cli ... show more 2026/09/18 23:58:57 [error] 475#475: 20180 limiting requests, excess: 40.100 by zone "general", client: 34.53.167.54, server: git.literaturaclassica.com.br, request: "GET /dist/.env HTTP/1.1", host: "git.literaturaclassica.com.br" ... show less	Web App Attack DDoS Attack
🇫🇷 mrcrassi	2026-09-18 21:20:17 (17 hours ago)	Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /api UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇧🇷 Sysadmin-CLC	2026-09-18 20:22:16 (18 hours ago)	Probing and trying to access sensitive files caught in f2b nginx-forbidden filter	Web App Attack Port Scan
🇧🇷 SvrAdmin	2026-09-18 18:16:44 (20 hours ago)	[204] (cpanel) Failed cPanel login from 34.53.167.54 (BE/Belgium/54.167.53.34.bc.googleusercontent.c ... show more [204] (cpanel) Failed cPanel login from 34.53.167.54 (BE/Belgium/54.167.53.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-09-18 15:16:34 -0300] info [cpaneld] 34.53.167.54 - - "GET /manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 15:16:34 -0300] info [cpaneld] 34.53.167.54 - - "GET /webpack-stats.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 15:16:34 -0300] info [cpaneld] 34.53.167.54 - - "GET /api/config HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 15:16:34 -0300] info [cpaneld] 34.53.167.54 - - "POST /graphql HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 15:16:34 -0300] info [cpaneld] 34.53.167.54 - - "GET /wp-json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username show less	Port Scan Hacking Brute-Force Exploited Host
🇧🇷 govfacil.app	2026-09-18 17:05:38 (21 hours ago)	(cpanel) Failed cPanel login from 34.53.167.54 (BE/Belgium/54.167.53.34.bc.googleusercontent.com): 5 ... show more (cpanel) Failed cPanel login from 34.53.167.54 (BE/Belgium/54.167.53.34.bc.googleusercontent.com): 50 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-09-18 14:05:24 -0300] info [cpaneld] 34.53.167.54 - - "GET /z9x8c7v6b5-debug-trigger-cpanel.hostmine.com.br HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 14:05:25 -0300] info [cpaneld] 34.53.167.54 - - "GET /settings.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 14:05:25 -0300] info [cpaneld] 34.53.167.54 - - "GET /api/v1/settings HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 14:05:25 -0300] info [cpaneld] 34.53.167.54 - - "GET /api/v2/config HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 14:05:25 -0300] info [cpaneld] 34.53.167.54 - - "GET /.well-known/jwks.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 14:05:25 -0300] info [cpaneld] 34.53.167.54 - - "G [truncated] show less	Brute-Force
🇺🇸 hostmach	2026-09-18 17:05:30 (21 hours ago)	(cpanel) Failed cPanel login from 34.53.167.54 (BE/Belgium/54.167.53.34.bc.googleusercontent.com): 5 ... show more (cpanel) Failed cPanel login from 34.53.167.54 (BE/Belgium/54.167.53.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-09-18 13:05:23 -0400] info [cpaneld] 34.53.167.54 - - "GET /403.shtml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 13:05:24 -0400] info [cpaneld] 34.53.167.54 - - "GET /.aws/config HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 13:05:24 -0400] info [cpaneld] 34.53.167.54 - - "POST /graphql HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 13:05:25 -0400] info [cpaneld] 34.53.167.54 - - "GET /.aws/config HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-09-18 13:05:25 -0400] info [cpaneld] 34.53.167.54 - - "GET /403.shtml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username show less	Brute-Force SSH
🇳🇱 Site.eu	2026-09-18 15:59:54 (22 hours ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 el-brujo	2026-09-18 14:38:00 (1 day ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇧🇷 maviei	2026-09-18 11:29:00 (1 day ago)	app.sorrisodacrianca.org.br 34.53.167.54 - - [18/Sep/2026:08:28:58 -0300] "GET /userfiles?path=../.. ... show more app.sorrisodacrianca.org.br 34.53.167.54 - - [18/Sep/2026:08:28:58 -0300] "GET /userfiles?path=../../.env HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" app.sorrisodacrianca.org.br 34.53.167.54 - - [18/Sep/2026:08:28:59 -0300] "GET /userfiles?path=../../../.env HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" app.sorrisodacrianca.org.br 34.53.167.54 - - [18/Sep/2026:08:28:59 -0300] "GET /userfiles?path=../../../../.env HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" ... show less	Bad Web Bot Web App Attack
🇺🇸 9LEVEL.com.br	2026-09-18 11:21:53 (1 day ago)	Blocked by Fail2ban for traefik-404 abuse	Web App Attack
🇧🇷 noconex	2026-09-18 11:09:07 (1 day ago)	Wazuh Alert \| Rule ID: 110100 \| Desc: Suricata: Exploit (ET WEB_SERVER Next.js Middleware Authorizat ... show more Wazuh Alert \| Rule ID: 110100 \| Desc: Suricata: Exploit (ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927)) 34.53.167.54 show less	Port Scan Brute-Force SSH
🇧🇷 dermatovirtual	2026-09-18 10:59:24 (1 day ago)	Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ... show more Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 102 unauthorized requests recorded between 2026-09-18 10:57:10 UTC and 2026-09-18 10:57:21 UTC (rate: ~102 req/min). Edge perimeter firewall drop active. Log sample: [2026-09-18 10:57:21 UTC] IP: 34.53.167.54 - W3C IIS (Port 443): GET /uploads../.env -> HTTP 404 [CLIENT: 34.53.167.54] [2026-09-18 10:57:21 UTC] IP: 34.53.167.54 - W3C IIS (Port 443): GET /assets../.env -> HTTP 404 [CLIENT: 34.53.167.54] [2026-09-18 10:57:21 UTC] IP: 34.53.167.54 - W3C IIS (Port 443): GET /img../.env -> HTTP 404 [CLIENT: 34.53.167.54] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-18 10:32:42 (1 day ago)	34.53.167.54 - - [18/Sep/2026:07:32:41 -0300] "GET /z9x8c7v6b5-debug-trigger-api.sorotop.com.br HTTP ... show more 34.53.167.54 - - [18/Sep/2026:07:32:41 -0300] "GET /z9x8c7v6b5-debug-trigger-api.sorotop.com.br HTTP/2.0" 404 159 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" 34.53.167.54 - - [18/Sep/2026:07:32:41 -0300] "GET /@fs/../.env?raw?? HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 34.53.167.54 - - [18/Sep/2026:07:32:41 -0300] "GET /@fs/app/.env?raw?? HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.53.167.54 - - [18/Sep/2026:07:32:41 -0300] "GET /@fs/src/.env?raw?? HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.53.167.54 - - [18/Sep/2026:07:32:41 -0300] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/2.0" 403 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)" ... show less	Port Scan
🇺🇸 paulo.apoloni	2026-09-18 09:16:30 (1 day ago)	34.53.167.54 - - [18/Sep/2026:06:16:25 -0300] "GET /.aws/credentials HTTP/2.0" 444 0 "-" "Mozilla/5. ... show more 34.53.167.54 - - [18/Sep/2026:06:16:25 -0300] "GET /.aws/credentials HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.53.167.54 - - [18/Sep/2026:06:16:25 -0300] "GET /@fs/app/.env?raw?? HTTP/2.0" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 34.53.167.54 - - [18/Sep/2026:06:16:25 -0300] "GET /rclone.conf HTTP/2.0" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 34.53.167.54 - - [18/Sep/2026:06:16:29 -0300] "GET /.aws/config HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.53.167.54 - - [18/Sep/2026:06:16:30 -0300] "GET /@fs/../.env?raw?? HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.213.238.91

🇮🇩 103.79.90.26

🇺🇸 91.230.168.78

🇰🇷 220.95.40.69

🇬🇧 193.163.125.144

🇲🇽 189.190.143.229

🇦🇷 181.84.169.115

🇺🇸 147.185.132.113

🇨🇳 112.46.213.31

🇺🇸 108.55.241.21

🇨🇳 101.126.141.163

🇫🇷 85.217.140.51

🇺🇸 66.164.72.50

🇺🇸 47.149.130.67

🇩🇪 213.209.159.19

🇮🇩 202.75.97.38

🇬🇧 193.163.125.226

🇩🇪 193.124.20.231

🇺🇸 184.190.12.223

🇭🇰 123.58.213.128