This IP address has been reported a total of
6
times from
4 distinct
sources.
34.95.140.166 was first reported on
October 17th 2026 , and the most recent report was
1 hour ago Czechia
with 2
reports;
United States of America
with 2
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Brute-Force
4
times;
Bad Web Bot
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-18 02:02:04
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.95.140.166 (166.140.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.140.166 (166.140.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:01:58.599907 2026] [security2:error] [pid 29426:tid 29426] [client 34.95.140.166:52580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wcurtislloyd.com"] [uri "/.git/config"] [unique_id "atQolnfFKLILJT9U_2KE_gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:43:36
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.95.140.166 (166.140.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.140.166 (166.140.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:43:29.458057 2026] [security2:error] [pid 23202:tid 23202] [client 34.95.140.166:59794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wcsystems.net"] [uri "/.git/config"] [unique_id "atQkQbyTWXtXqPBAtDb4OAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-17 17:11:38
(10 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-17 16:12:28
(11 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
Hary74656
2026-10-17 15:54:59
(11 hours ago)
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
ing_inbo ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
ing_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "taiga.aschi.at"] [uri "/"] [unique_id "atOaUmRYrKNausrlKTD2kQAAAA0"]
[Sat Oct 17 17:54:58.222012 2026] [vhost taiga.aschi.at] [security2:error] [pid 1086:tid 140644534183616] [client 34.95.140.166:60590] [realclient 34.95.140.166:60590] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "taiga.aschi.at"] [uri "/"] [unique_id "atOaUmRYrKNausrlKTD2kgAAAAQ"]
show less
Web App Attack
🇫🇷
dynamix
2026-10-17 15:52:43
(11 hours ago)
Multiple WAF Violations
Web App Attack
Showing 1 to
6
of 6 reports
