Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
7
times from
5 distinct
sources.
34.96.62.114 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 2
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) G ...
show moreObvious bot patterns with spoofed User-agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0
...
show less
Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (iPhone; CPU iPhone OS 19_0 like Mac OS X ...
show moreObvious bot patterns with spoofed User-agent : Mozilla/5.0 (iPhone; CPU iPhone OS 19_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.0 Mobile/15E148 Safari/604.1
...
show less
http-bad-user-agent - IP: 34.96.62.114 - time="2026-08-25T14:24:35+02:00" level=info msg="(555f66b4 ...
show morehttp-bad-user-agent - IP: 34.96.62.114 - time="2026-08-25T14:24:35+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 34.96.62.114 (BE/396982) : 4h ban on Ip 34.96.62.114" module=db
show less
[WedAug0500:16:05.8992232026][security2:error][pid2524145:tid2524477][client34.96.62.114:0]ModSecuri ...
show more[WedAug0500:16:05.8992232026][security2:error][pid2524145:tid2524477][client34.96.62.114:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|172\\\\\\\\.\(1[6-9]\|2[0-9]\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"sesael.ch\"][uri\"/\"][unique_id\"anJkpesZY2Bc3yTzvSwRrwAAAQ0\"]
show less
[SunJun1400:19:13.6485222026][security2:error][pid3198260:tid3199289][client34.96.62.114:0]ModSecuri ...
show more[SunJun1400:19:13.6485222026][security2:error][pid3198260:tid3199289][client34.96.62.114:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|172\\\\\\\\.\(1[6-9]\|2[0-9]\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"sesael.ch\"][uri\"/\"][unique_id\"ai3XYUCMUCK0KA7slaLIiAAAAMk\"]
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.96.62.114 (BE/Belgium/114.62.96.34.bc.googl ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.96.62.114 (BE/Belgium/114.62.96.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
