JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.50.55.81

34.50.55.81 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 79%: ?

79%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	81.55.50.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.50.55.81

Whois 34.50.55.81

IP Abuse Reports for 34.50.55.81:

This IP address has been reported a total of 29 times from 21 distinct sources. 34.50.55.81 was first reported on August 31st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 13:46:54 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:46:47.939889 2026] [security2:error] [pid 1346:tid 1346] [client 34.50.55.81:33456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.blackstarmgmt.net"] [uri "/.env.save"] [unique_id "apbXR4TmBMj7oULJsedXUgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 12:35:44 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:35:37.426256 2026] [security2:error] [pid 13515:tid 13515] [client 34.50.55.81:57296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chickiesbeef.com"] [uri "/wp-config.php.swp"] [unique_id "apbGmTOAF8CtQAvewP5hlAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-09-01 12:35:04 (2 weeks ago)	Malicious activity from IP detected: crowdsecurity/http-sensitive-files.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-01 11:20:05 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:19:55.891041 2026] [security2:error] [pid 24578:tid 24578] [client 34.50.55.81:40946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.smart-tech.hk"] [uri "/.env.save"] [unique_id "apa023a6hcppZ7tKIz6l6AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Celtic	2026-09-01 11:00:59 (2 weeks ago)	Blocked by Fail2Ban with Jail (plesk-modsecurity)	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-01 10:58:25 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:58:19.335332 2026] [security2:error] [pid 18463:tid 18463] [client 34.50.55.81:57214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jdsqrd.com"] [uri "/.env.prod"] [unique_id "apavy3ix-QUUE0IUXkqrQQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 10:55:19 (2 weeks ago)	Banned by Fail2Ban on server	Web App Attack
Anonymous	2026-09-01 10:54:04 (2 weeks ago)	Bot / scanning and/or hacking attempts: GET /.env.prod HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET / ... show more Bot / scanning and/or hacking attempts: GET /.env.prod HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env HTTP/1.1 show less	Hacking Web App Attack
🇫🇮 JLKnoch Software GmbH	2026-09-01 07:43:36 (2 weeks ago)	CrowdSec crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
Anonymous	2026-09-01 07:30:54 (2 weeks ago)	34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /wp-config.php.swp HTTP/1.1" 403 164 "-" "crusader ... show more 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /wp-config.php.swp HTTP/1.1" 403 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /crusader-404-probe HTTP/1.1" 404 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /.env.save HTTP/1.1" 403 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /.env.production HTTP/1.1" 403 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /.env.old HTTP/1.1" 403 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /wp-config.php~ HTTP/1.1" 403 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /.env.bak HTTP/1.1" 403 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /env HTTP/1.1" 404 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/2026:09:30:51 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 164 "-" "crusader-worker/1.0" 34.50.55.81 - - [01/Sep/202 ... show less	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 06:32:22 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-01 06:32:14 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.50.55.81 (81.55.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:32:08.281445 2026] [security2:error] [pid 2644:tid 2644] [client 34.50.55.81:43582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studioarmanni.com"] [uri "/.env.old"] [unique_id "apZxaJdm0MUtPUfxaj2FnAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-01 05:25:01 (2 weeks ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇮🇳 aks4226	2026-09-01 03:56:23 (2 weeks ago)	Bot search, attacking common web applications.	Web App Attack
🇨🇭 4server	2026-09-01 03:40:58 (2 weeks ago)	[TueSep0105:40:53.8311342026][security2:error][pid1569684:tid1569722][client34.50.55.81:0]ModSecurit ... show more [TueSep0105:40:53.8311342026][security2:error][pid1569684:tid1569722][client34.50.55.81:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"annunci-ticino.ch.81-17-25-250.cpanel.site\"][uri\"/.env.old\"][unique_id\"apZJRbH_7opvr6SLTmz8FwAAARU\"] show less	Hacking Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.173.223.191

🇧🇩 180.149.234.100

🇬🇧 81.19.219.235

🇺🇸 73.198.204.4

🇺🇸 50.253.186.118

🇮🇳 34.126.218.150

🇩🇪 194.187.176.150

🇪🇬 156.210.145.225

🇹🇼 152.32.230.94

🇫🇷 91.231.89.186

🇫🇷 91.196.152.235

🇫🇷 91.196.152.193

🇫🇷 85.217.140.45

🇺🇸 66.132.172.138

🇺🇸 64.23.145.126

🇺🇿 45.255.124.188

🇺🇸 209.38.142.109

🇲🇽 189.194.140.170

🇺🇸 172.245.12.40

🇵🇰 165.101.118.252