This IP address has been reported a total of
15
times from
15 distinct
sources.
34.159.96.89 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:949110) triggered by 34.159.96.89 (DE/Germany/89.96.159.34.bc.google ...
show more(mod_security) mod_security (id:949110) triggered by 34.159.96.89 (DE/Germany/89.96.159.34.bc.googleusercontent.com): N in the last X secs
show less
*Port Scan* detected from 34.159.96.89 (DE/Germany/Hesse/Frankfurt am Main/89.96.159.34.bc.googleuse ...
show more*Port Scan* detected from 34.159.96.89 (DE/Germany/Hesse/Frankfurt am Main/89.96.159.34.bc.googleusercontent.com).
show less
Port Scan
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 34.159.96.89 (89.96.159.34.bc.googleuse ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.159.96.89 (89.96.159.34.bc.googleusercontent.com): (CF_ENABLE)
show less
[rede-188] 2026-06-14 12:58:53, Client: 34.159.96.89, Protocol: 6, Unauthorized activity to HTTP: GE ...
show more[rede-188] 2026-06-14 12:58:53, Client: 34.159.96.89, Protocol: 6, Unauthorized activity to HTTP: GET /api/.env.dev
show less
{"level":"info","ts":1781415054.6134136,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1781415054.6134136,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.96.89","remote_port":"40776","client_ip":"34.159.96.89","proto":"HTTP/1.1","method":"GET","host":"status.boobooloo.com","uri":"/.env.test","headers":{"Connection":["close"],"User-Agent":["nook browser/1.0"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.boobooloo.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000104259,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1781415054.6162245,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.96.89","remote_port":"40874","client_ip":"34.159.96.89","proto":"HTTP/1.1","method":"GET","host":"status.boobooloo.com","uri":"/.env.sample","headers":{"User-Agent":["iTunes/9.0.2 (Windows; N)"],"A
...
show less
[SunJun1405:56:12.4857912026][security2:error][pid2116871:tid2116988][client34.159.96.89:0]ModSecuri ...
show more[SunJun1405:56:12.4857912026][security2:error][pid2116871:tid2116988][client34.159.96.89:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.sanierung-pilzen-schimmel.ch.risanamento-funghi-muffa.ch\"][uri\"/api/.env.production\"][unique_id\"ai4mXCovUShlNO6HEXWmfQAAANU\"]
show less
(mod_security) mod_security (id:210492) triggered by 34.159.96.89 (89.96.159.34.bc.googleusercontent ...
show more(mod_security) mod_security (id:210492) triggered by 34.159.96.89 (89.96.159.34.bc.googleusercontent.com): 10 in the last 3600 secs
show less
Brute-Force
Anonymous
Aggressive web scan
Web App Attack
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩