This IP address has been reported a total of
4
times from
4 distinct
sources.
34.97.109.166 was first reported on
October 13th 2026 , and the most recent report was
1 day ago United States of America
with 2
reports;
Switzerland
with 1
report;
United Kingdom of Great Britain and Northern Ireland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Brute-Force
1
time;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
backslash
2026-10-14 11:48:04
(1 day ago)
block ruleset likely probe for CVE-2025-55182 619E65C9C14E5E741C55CC8FD5E5630F031EBB6A
Web App Attack
🇬🇧
consul.to
2026-10-13 20:51:20
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
iwle
2026-10-13 18:33:34
(2 days ago)
[Tue Oct 13 14:33:32.365265 2026] [:error] [pid 1681512:tid 1681551] [client 34.97.109.166:57456] [c ...
show more
[Tue Oct 13 14:33:32.365265 2026] [:error] [pid 1681512:tid 1681551] [client 34.97.109.166:57456] [client 34.97.109.166] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.app.iwle.com"] [uri "/.git/config"] [unique_id "as55fGTX3420dHEOPwwCxQAAAMs"]
[Tue Oct 13 14:33:32.802402 2026] [:error] [pid 1681512:tid 1681546] [client 34.97.109.166:57456] [client 34.97.109.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-A
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 17:53:18
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.97.109.166 (166.109.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.109.166 (166.109.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 13:53:13.169543 2026] [security2:error] [pid 5626:tid 5626] [client 34.97.109.166:42236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.app.handyrehab.com"] [uri "/.git/config"] [unique_id "as5wCeUvt25lPdNcrlBSXwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
