Name: Threat Intelligence: 34.156.164.53
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelCRITICAL72/1001 rule type

6 incidents on record · last seen 13d ago

PTR	53.164.156.34.bc.googleusercontent.com
Org / ASN	Google Cloud (europe-west1)
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital
Timezone	Europe/Brussels

Attack Analysis

Port 22 Honeypot Probe

This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.

Reports (6)

Date	Severity	Description
16 Sep 2026 - 16:49	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server — Honeypot: probe to closed SSH port 22
16 Sep 2026 - 15:41	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server — Honeypot: probe to closed SSH port 22
16 Sep 2026 - 14:41	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server — Honeypot: probe to closed SSH port 22
16 Sep 2026 - 13:33	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server — Honeypot: probe to closed SSH port 22
16 Sep 2026 - 13:33	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server
16 Sep 2026 - 11:27	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server

Report for IP: 34.156.164.53

Attack Analysis

Reports (6)

Related IPs — Same /24 Block (34.156.164.0/24)