JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.73.238.50

34.73.238.50 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 43%: ?

43%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	50.238.73.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.73.238.50

Whois 34.73.238.50

IP Abuse Reports for 34.73.238.50:

This IP address has been reported a total of 18 times from 16 distinct sources. 34.73.238.50 was first reported on July 29th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Secure Gateway®️	2026-09-22 22:00:23 (4 weeks ago)	Report By Secure Gateway Security Team: SQL Injection Attempt Detected	Web App Attack
🇺🇸 ALSCO®️	2026-09-22 22:00:23 (4 weeks ago)	Report By ALSCO Security Team: Unauthorized Connection Attempt	Web App Attack
🇮🇩 Burayot	2026-09-22 16:40:19 (4 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.73.238.50 (US/United States/50.23 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.73.238.50 (US/United States/50.238.73.34.bc.googleusercontent.com): 2 in the last 3600 secs show less	Web App Attack
🇨🇭 4server	2026-09-22 16:02:24 (4 weeks ago)	[TueSep2218:02:16.4947332026][security2:error][pid3594934:tid3595055][client34.73.238.50:0]ModSecuri ... show more [TueSep2218:02:16.4947332026][security2:error][pid3594934:tid3595055][client34.73.238.50:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"www.4-server.com\"][uri\"/z9x8c7v6b5-debug-trigger-www.4-server.com\"][unique_id\"arKmiECE8r6Eq3fMer2K3gAAARg\"] show less	Hacking Web App Attack
🇬🇧 noise.agency	2026-09-22 15:45:04 (4 weeks ago)	34.73.238.50 (US/United States/50.238.73.34.bc.googleusercontent.com), more than 10 Apache 403 hits	Hacking
🇳🇱 Alt255	2026-09-22 15:15:51 (4 weeks ago)	[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.73.238.50 - - [22/Sep/2026:17:15:49 +0200] "GET /@fs/../.env?raw?? HTTP/2.0" 404 1338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 14:42:42 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 34.73.238.50 (50.238.73.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.73.238.50 (50.238.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:42:34.791470 2026] [security2:error] [pid 8530:tid 8530] [client 34.73.238.50:59730] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|4photogifts.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "4photogifts.com"] [uri "/z9x8c7v6b5-debug-trigger-4photogifts.com"] [unique_id "arKT2uFuBn8oivKnOD-RZQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RLDD	2026-09-22 14:24:32 (4 weeks ago)	WP probing for vulnerabilities -4th	Web App Attack
🇺🇸 mnsf	2026-09-22 13:06:30 (4 weeks ago)	Scanning/Probing (17)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 10:09:53 (1 month ago)	(mod_security) mod_security (id:210580) triggered by 34.73.238.50 (50.238.73.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210580) triggered by 34.73.238.50 (50.238.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:09:45.921843 2026] [security2:error] [pid 15720:tid 15720] [client 34.73.238.50:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|gibitdigital.com\|F\|2"] [data "Matched Data: proc/self/environ found within ARGS:filename: file:/proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "gibitdigital.com"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "arJT6eT-omnOP-Wlf_p_OwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-22 09:24:53 (1 month ago)	GET wp-json \| UA: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/) \| Time: 2026-09-22 09:24:53 U ... show more GET wp-json \| UA: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/) \| Time: 2026-09-22 09:24:53 UTC show less	Web App Attack
🇬🇧 Swiptly	2026-09-22 09:21:09 (1 month ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇺🇸 Mundo Bueno	2026-09-22 09:08:51 (1 month ago)	[ISILIA Protection v2.3] Tentative d'accès: /.env.live [RATE LIMITED - 1800s quarantine] \| Pays: US ... show more [ISILIA Protection v2.3] Tentative d'accès: /.env.live [RATE LIMITED - 1800s quarantine] \| Pays: US \| UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) show less	Hacking Web App Attack
🇫🇮 paissangroup	2026-09-22 08:26:33 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 08:00:45 (1 month ago)	(mod_security) mod_security (id:243320) triggered by 34.73.238.50 (50.238.73.34.bc.googleusercontent ... show more (mod_security) mod_security (id:243320) triggered by 34.73.238.50 (50.238.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:00:38.859632 2026] [security2:error] [pid 14209:tid 14209] [client 34.73.238.50:53244] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)\|\|riverflow.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "riverflow.com"] [uri "/.profile"] [unique_id "arI1prvi3uoCqzLkI3-xZgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 202.62.64.52

🇧🇷 177.92.138.41

🇩🇪 167.99.243.8

🇩🇪 165.154.138.123

🇲🇰 138.124.252.4

🇨🇳 120.48.66.158

🇭🇰 103.149.183.22

🇷🇺 88.205.172.170

🇷🇺 80.234.72.209

🇵🇾 200.61.51.82

🇧🇷 200.19.248.20

🇹🇼 198.235.24.112

🇺🇸 198.23.242.99

🇪🇬 196.130.244.111

🇸🇬 194.233.81.155

🇺🇸 192.6.5.11

🇨🇦 185.15.178.127

🇺🇸 162.216.149.117

🇫🇷 157.173.114.153

🇻🇳 157.10.186.28