JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.50.47.138

34.50.47.138 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	138.47.50.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.50.47.138

Whois 34.50.47.138

IP Abuse Reports for 34.50.47.138:

This IP address has been reported a total of 49 times from 29 distinct sources. 34.50.47.138 was first reported on September 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-20 16:18:09 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇧🇷 Halux	2026-09-20 12:11:33 (5 hours ago)	34.50.47.138 Probing protected path or service	Web App Attack
🇬🇧 consul.to	2026-09-20 09:19:21 (8 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇳 evicky2002	2026-09-19 06:00:05 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇳🇱 Site.eu	2026-09-18 19:03:01 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 FD-IX	2026-09-18 17:53:18 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 marten_o	2026-09-18 15:49:13 (2 days ago)	34.50.47.138 - - [18/Sep/2026:17:49:12 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 403 239 "-" "Mozilla/5 ... show more 34.50.47.138 - - [18/Sep/2026:17:49:12 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 325 461 ... show less	Web App Attack
🇩🇪 pscriptos	2026-09-18 14:59:47 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇳🇱 melroy89	2026-09-18 13:29:05 (2 days ago)	34.50.47.138 - - [18/Sep/2026:15:27:00 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; ... show more 34.50.47.138 - - [18/Sep/2026:15:27:00 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "retromessenger.com" 0.001 34.50.47.138 - - [18/Sep/2026:15:27:00 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "retromessenger.com" 0.015 34.50.47.138 - - [18/Sep/2026:15:27:01 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "retromessenger.com" 0.001 34.50.47.138 - - [18/Sep/2026:15:27:01 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "retromessenger.com" 0.000 34.50.47.138 - - [18/Sep/2026:15:27:02 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Ma ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 13:14:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.50.47.138 (138.47.50.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.50.47.138 (138.47.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:14:49.284991 2026] [security2:error] [pid 8593:tid 8593] [client 34.50.47.138:58142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronnycarrera.com"] [uri "/.git/config"] [unique_id "aq05SY5BTc02_9r3xHbRxAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-18 12:48:55 (2 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-09-18 12:48 UTC show less	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2026-09-18 10:37:30 (2 days ago)	Malware host detected by rbl.malware.expert. RBL lookup of 138.47.50.34.rbl.malware.expert succeeded ... show more Malware host detected by rbl.malware.expert. RBL lookup of 138.47.50.34.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-stl2-17) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-18 10:04:55 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.50.47.138 (138.47.50.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.50.47.138 (138.47.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 06:04:49.666616 2026] [security2:error] [pid 13607:tid 13607] [client 34.50.47.138:39446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rongrapes.com"] [uri "/.git/config"] [unique_id "aq0MwWjoqZQOlZhoAlbZoQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 masterguru	2026-09-18 08:54:44 (2 days ago)	Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\$(?:\\\\(.\\\\ ... show more Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.\\\$\|.)\\\\)\|\\\\{.\\\\})\| (932130-169) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-18 08:50:07 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.50.47.138 (138.47.50.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.50.47.138 (138.47.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 04:50:04.243975 2026] [security2:error] [pid 8607:tid 8607] [client 34.50.47.138:58760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronelgas.com"] [uri "/.git/config"] [unique_id "aqz7PNbbtNRf_2HVoUZ7bwAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 200.46.151.238

🇷🇺 176.115.140.245

🇨🇳 175.30.48.97

🇹🇼 165.154.14.170

🇻🇳 165.101.40.109

🇰🇷 118.32.133.197

🇻🇳 222.255.90.70

🇭🇳 200.115.97.5

🇺🇦 94.131.240.190

🇺🇸 66.240.219.146

🇳🇱 45.148.10.157

🇺🇸 2603:3026:285:6100:6c9c:8f01:b02:54d7

🇨🇳 218.92.251.198

🇻🇪 181.208.242.207

🇧🇷 177.168.202.28

🇧🇷 177.75.55.172

🇺🇸 162.216.150.197

🇭🇰 154.83.15.101

🇧🇾 146.120.37.36

🇱🇰 122.255.14.70