This IP address has been reported a total of
34
times from
25 distinct
sources.
34.50.120.204 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 3
reports;
Germany
with 2
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Hacking
6
times;
Brute-Force
3
times;
Bad Web Bot
2
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
{"reqId":"bNIeo9XM17lqTSSFQT0f","level":1,"time":"2026-09-22T05:34:49+02:00","remoteAddr":"34.50.120 ...
show more{"reqId":"bNIeo9XM17lqTSSFQT0f","level":1,"time":"2026-09-22T05:34:49+02:00","remoteAddr":"34.50.120.204","user":"--","app":"core","method":"GET","url":"/files/.codex/auth.json","scriptName":"/index.php","message":"Trusted domain error. \"34.50.120.204\" tried to access using \"vega.khomri.com\" as host.","userAgent":"crusader-worker/1.0","version":"35.0.0.10","data":{"app":"core"}}
{"reqId":"ydyVUkkd2FHgBuU3B45T","level":1,"time":"2026-09-22T05:34:49+02:00","remoteAddr":"34.50.120.204","user":"--","app":"core","method":"GET","url":"/html/.codex/auth.json","scriptName":"/index.php","message":"Trusted domain error. \"34.50.120.204\" tried to access using \"vega.khomri.com\" as host.","userAgent":"crusader-worker/1.0","version":"35.0.0.10","data":{"app":"core"}}
{"reqId":"dwCtDrZgD4NrzYy9nb3n","level":1,"time":"2026-09-22T05:34:49+02:00","remoteAddr":"34.50.120.204","user":"--","app":"core","method":"GET","url":"/public/.codex/auth.json","scriptName":"/index.php","message":"Trusted domai
...
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.50.120.204 (ID/Indonesia/204.120.5 ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.50.120.204 (ID/Indonesia/204.120.50.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
34.50.120.204 (ID/Indonesia/Jakarta/Jakarta/204.120.50.34.bc.googleusercontent.com), more than 30 Ap ...
show more34.50.120.204 (ID/Indonesia/Jakarta/Jakarta/204.120.50.34.bc.googleusercontent.com), more than 30 Apache 403 hits
show less
http-probing - IP: 34.50.120.204 - time="2026-09-21T14:45:27+02:00" level=info msg="(555f66b4f6a745 ...
show morehttp-probing - IP: 34.50.120.204 - time="2026-09-21T14:45:27+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.50.120.204 (ID/396982) : 4h ban on Ip 34.50.120.204" module=db
show less
Web App Attack
Anonymous
[ns3.backorder.gr] httpd-config-scan: sites=www.monitor.backorder.gr; logs=/var/log/httpd/domains/ba ...
show more[ns3.backorder.gr] httpd-config-scan: sites=www.monitor.backorder.gr; logs=/var/log/httpd/domains/backorder.gr.monitor.log; samples=/old/.claude/credentials.json | /.claude/settings.json | /.config/claude/credentials.json
show less
Detected malicious request: GET /bak/.claude/credentials.json
Detections triggered: Environment/con ...
show moreDetected malicious request: GET /bak/.claude/credentials.json
Detections triggered: Environment/config probe
Access via IP addr (v4)
show less
