JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.50.80.234

34.50.80.234 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	234.80.50.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.50.80.234

Whois 34.50.80.234

IP Abuse Reports for 34.50.80.234:

This IP address has been reported a total of 33 times from 23 distinct sources. 34.50.80.234 was first reported on September 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-17 06:00:05 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 louis77	2026-09-17 03:20:15 (2 days ago)	Sensitive file access attempt - Path: /.git/config, Method: GET, UA: Mozilla/5.0 (Macintosh; Intel M ... show more Sensitive file access attempt - Path: /.git/config, Method: GET, UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Web App Attack Hacking
Anonymous	2026-09-16 13:21:02 (3 days ago)	Bot / scanning and/or hacking attempts: GET /mailgun/.env HTTP/1.1, GET /campaign/.env HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /mailgun/.env HTTP/1.1, GET /campaign/.env HTTP/1.1, GET /transactional/.env HTTP/1.1, GET /ses/.env HTTP/1.1, GET /newsletter/.env HTTP/1.1, GET /postmark/.env HTTP/1.1, GET /.env.backup1 HTTP/1.1, GET /cronlab/.env HTTP/1.1, GET /mailing/.env HTTP/1.1, GET /sendgrid/.env HTTP/1.1, GET /mandrill/.env HTTP/1.1, GET /cache/.env HTTP/1.1, GET /sender/.env HTTP/1.1, GET /mailjet/.env HTTP/1.1, GET /notify/.env HTTP/1.1, GET /sparkpost/.env HTTP/1.1, GET /notifications/.env HTTP/1.1, GET /brevo/.env HTTP/1.1, GET /smtp/.env HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 12:27:26 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.50.80.234 (234.80.50.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.50.80.234 (234.80.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:27:20.673151 2026] [security2:error] [pid 19600:tid 19634] [client 34.50.80.234:60936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockabyecotons.com"] [uri "/.git/config"] [unique_id "aqqLKNaJFskwiv5ealdO1gAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-16 11:24:13 (3 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 wteiken	2026-09-16 11:17:31 (3 days ago)	rocinante.teiken.net:443 34.50.80.234:44722 - - [16/Sep/2026:07:17:28 -0400] "GET /.git/config HTTP/ ... show more rocinante.teiken.net:443 34.50.80.234:44722 - - [16/Sep/2026:07:17:28 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.50.80.234:44722 - - [16/Sep/2026:07:17:29 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.50.80.234:44722 - - [16/Sep/2026:07:17:29 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.50.80.234:44722 - - [16/Sep/2026:07:17:29 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.50.80.234:44722 - - [16/Sep/2026:07:17:30 -0400] "GE ... show less	Web App Attack
🇬🇧 consul.to	2026-09-16 10:29:21 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 Halux	2026-09-16 09:46:28 (3 days ago)	34.50.80.234 Probing protected path or service	Web App Attack
🇦🇺 screwlooseit.com.au	2026-09-16 09:06:59 (3 days ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/234.80.50.34.bc.googleusercontent ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/234.80.50.34.bc.googleusercontent.com show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-16 08:20:48 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-09-16 08:19:17 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.50.80.234 (ID/Indonesia/234.80.50.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.50.80.234 (ID/Indonesia/234.80.50.34.bc.googleusercontent.com) show less	SQL Injection
🇳🇱 Alt255	2026-09-16 07:28:39 (3 days ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.50.80.234 - - [16/Sep/2026:09:28:35 +0200] "GET /.git/config HTTP/1.1" 301 406 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 07:26:28 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Mangelot Hosting	2026-09-16 07:26:27 (3 days ago)	(php_susp_dir) srv103 PHP Suspicious Directory 34.50.80.234 (ID/Indonesia/234.80.50.34.bc.googleuser ... show more (php_susp_dir) srv103 PHP Suspicious Directory 34.50.80.234 (ID/Indonesia/234.80.50.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 06:46:57 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.50.80.234 (234.80.50.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.50.80.234 (234.80.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:46:50.455020 2026] [security2:error] [pid 2181772:tid 2181772] [client 34.50.80.234:41618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robstax.com.cctaxpro.com"] [uri "/.git/config"] [unique_id "aqo7WuGsFE6MevrM28BQnAAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.228.137

🇨🇳 218.21.182.228

🇺🇸 216.250.251.219

🇺🇸 216.81.200.63

🇸🇬 159.223.59.82

🇹🇼 111.70.23.251

🇹🇼 101.13.4.124

🇱🇹 62.60.130.253

🇨🇳 39.96.26.63

🇭🇰 2602:80d:1004::f

🇺🇿 213.230.93.0

🇩🇪 194.88.98.92

🇺🇸 157.230.183.107

🇻🇳 103.149.86.208

🇳🇱 82.101.207.161

🇫🇷 51.75.127.195

🇸🇬 47.84.141.13

🇺🇸 20.83.36.83

🇺🇸 20.64.98.155

🇺🇸 20.42.110.118