This IP address has been reported a total of
11
times from
10 distinct
sources.
34.48.112.98 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
Netherlands
with 3
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
10
times;
Brute-Force
6
times;
Bad Web Bot
3
times;
Hacking
2
times;
Port Scan
2
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
[TueSep2202:56:55.2158402026][security2:error][pid33859:tid33969][client34.48.112.98:0]ModSecurity:A ...
show more[TueSep2202:56:55.2158402026][security2:error][pid33859:tid33969][client34.48.112.98:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[a-z0-9]~\$\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1158\"][id\"390581\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-DataLeakage-attempttoaccessbackupfile\(disablethisruleifyourequireaccesstofilesthatendwithatilde\)\"][severity\"CRITICAL\"][hostname\"test.pytag.ch\"][uri\"/.codex/auth.json~\"][unique_id\"arHSV4YS4urjkeyCS71lTAAAANM\"]
show less
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ...
show moreVulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-09-22 and 2026-09-22 (UTC). Sample request: GET /tmp/.codex/auth.json HTTP/1.1
show less
Enumerating paths that do not exist (scanning) | method: GET | path: /html/.codex/auth.json (+13 mor ...
show moreEnumerating paths that do not exist (scanning) | method: GET | path: /html/.codex/auth.json (+13 more) | ua: crusader-worker/1.0 | 2026-09-21 06:50 UTC
show less
