JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.50.27.27

34.50.27.27 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	27.27.50.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.50.27.27

Whois 34.50.27.27

IP Abuse Reports for 34.50.27.27:

This IP address has been reported a total of 40 times from 26 distinct sources. 34.50.27.27 was first reported on June 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-12 04:15:28 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 updown.io	2026-06-12 02:30:12 (1 week ago)	{"level":"info","ts":1781231411.3125713,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781231411.3125713,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.50.27.27","remote_port":"51426","client_ip":"34.50.27.27","proto":"HTTP/1.1","method":"GET","host":"status.comics.westwilliams.com","uri":"/.env.production","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Linux; Android 5.1.1; Coolpad 3622A Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.comics.westwilliams.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000162551,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1781231411.5964782,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.50.27.27","remote_port":"51436","client_ip":"34.50. ... show less	DDoS Attack Web App Attack
🇺🇦 URAN Publishing Service	2026-06-11 15:51:37 (1 week ago)	34.50.27.27 - - [11/Jun/2026:18:51:36 +0300] "GET /frontend/.env HTTP/1.1" 404 3300 "-" "Mozilla/5.0 ... show more 34.50.27.27 - - [11/Jun/2026:18:51:36 +0300] "GET /frontend/.env HTTP/1.1" 404 3300 "-" "Mozilla/5.0 (Android; Linux armv7l; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 Fennec/2.0.1" 34.50.27.27 - - [11/Jun/2026:18:51:36 +0300] "GET /.env HTTP/1.1" 404 3300 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-11 15:46:53 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 4server	2026-06-11 09:50:18 (1 week ago)	[ThuJun1111:50:16.2639902026][security2:error][pid1831529:tid1831660][client34.50.27.27:0]ModSecurit ... show more [ThuJun1111:50:16.2639902026][security2:error][pid1831529:tid1831660][client34.50.27.27:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cxservices.ch.136-243-54-122.cpanel.site\"][uri\"/.env.production.bak\"][unique_id\"aiqE2N9CZJjv2B9an5UW1AAAARM\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-06-11 09:15:10 (1 week ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-06-10 22:01:37 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
🇧🇪 cmbplf	2026-06-10 16:33:07 (1 week ago)	845 requests with url.path *.env	Brute-Force Bad Web Bot
Anonymous	2026-06-10 15:36:06 (1 week ago)	(caddyscan) Scanner path probe from 34.50.27.27 (KR/South Korea/27.27.50.34.bc.googleusercontent.com ... show more (caddyscan) Scanner path probe from 34.50.27.27 (KR/South Korea/27.27.50.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:15:36:04 +0000] "GET /api/.env.production HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:15:36:04 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:15:36:04 +0000] "GET /.env.old HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:15:36:04 +0000] "GET /.env.uat HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:15:36:04 +0000] "GET /.env.dev HTTP/1.1" show less	Port Scan
🇬🇧 consul.to	2026-06-10 12:41:08 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-10 08:57:29 (1 week ago)	(caddyscan) Scanner path probe from 34.50.27.27 (KR/South Korea/27.27.50.34.bc.googleusercontent.com ... show more (caddyscan) Scanner path probe from 34.50.27.27 (KR/South Korea/27.27.50.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:08:57:28 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:08:57:28 +0000] "GET /.env.testing HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:08:57:28 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:08:57:28 +0000] "GET /.env.staging HTTP/1.1" [REDACTED] 200 2627 34.50.27.27 - - [10/Jun/2026:08:57:28 +0000] "GET /.env.orig HTTP/1.1" show less	Port Scan
🇨🇭 🇨🇭 Hosting	2026-06-10 05:10:13 (1 week ago)	Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-10 03:04:24 (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇫🇷 masterguru	2026-06-10 02:35:24 (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇳🇱 Site.eu	2026-06-10 00:29:58 (1 week ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:10ff:4d::

🇨🇳 219.153.103.109

🇮🇳 182.70.255.242

🇳🇬 102.90.117.158

🇺🇸 20.102.98.53

🇰🇷 211.253.31.143

🇸🇬 152.42.240.74

🇻🇳 113.190.15.190

🇵🇱 109.206.219.9

🇨🇳 106.75.77.231

🇨🇦 99.248.75.50

🇫🇷 88.183.91.155

🇺🇸 74.114.29.219

🇨🇦 72.251.8.112

🇮🇶 65.20.166.171

🇳🇱 45.148.10.230

🇳🇱 45.148.10.121

🇨🇳 180.167.128.203

🇺🇸 165.154.134.190

🇪🇬 156.205.221.186