This IP address has been reported a total of
10
times from
7 distinct
sources.
34.96.238.1 was first reported on
September 21st 2026 , and the most recent report was
6 hours ago Netherlands
with 3
reports;
United States of America
with 3
reports;
Switzerland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
8
times;
Brute-Force
5
times;
Bad Web Bot
4
times;
Hacking
1
time;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇷🇴
clauss
2026-10-05 01:13:27
(6 hours ago)
34.96.238.1 - - [05/Oct/2026:04:13:25 +0300] "GET /.git/config HTTP/1.1" 404 12224 "-" "Mozilla/5.0 ...
show more
34.96.238.1 - - [05/Oct/2026:04:13:25 +0300] "GET /.git/config HTTP/1.1" 404 12224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.238.1 - - [05/Oct/2026:04:13:26 +0300] "GET /.env.local HTTP/1.1" 404 12220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 23:05:46
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.238.1 (1.238.96.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.238.1 (1.238.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 19:05:39.007691 2026] [security2:error] [pid 32537:tid 32537] [client 34.96.238.1:48000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "welchharriscpa.com"] [uri "/.git/config"] [unique_id "asLbw3ULq2QN1uKO9k5cDgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-04 21:36:15
(10 hours ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
FeG Deutschland
2026-10-04 19:53:13
(11 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇨🇭
zynex
2026-10-04 19:44:20
(12 hours ago)
URL Probing: /server/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 18:51:42
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.238.1 (1.238.96.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.238.1 (1.238.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 14:51:37.361195 2026] [security2:error] [pid 32277:tid 32277] [client 34.96.238.1:37040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weismaninfrared.com"] [uri "/.git/config"] [unique_id "asKgOVMeyGwNSuh_iiEkhQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 17:52:56
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.238.1 (1.238.96.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.238.1 (1.238.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 13:52:50.472434 2026] [security2:error] [pid 28390:tid 28390] [client 34.96.238.1:33588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weiqisociety.org.synergenicnetworks.com"] [uri "/.git/config"] [unique_id "asKScknizybGbhOUeFMVrwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-21 11:16:21
(1 week ago)
Excessive 404/403 errors
Brute-Force
2026-09-21 09:20:07
(1 week ago)
| [Dangerous/Hong Kong] Aggressive IP 34.96.238.1 (~30 hits). Type: DoS Defender- Web server 400 err ...
show more
| [Dangerous/Hong Kong] Aggressive IP 34.96.238.1 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇳🇱
Alt255
2026-09-21 08:46:19
(1 week ago)
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.238.1 - - [21/Sep/2026:10:46:06 +0200] "GET /.git/config HTTP/1.1" 404 2177 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
