This IP address has been reported a total of
4
times from
3 distinct
sources.
138.219.134.161 was first reported on
November 18th 2023 , and the most recent report was
1 hour ago .
In the last 60 days, the only reporter location was:
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
2
times;
Brute-Force
2
times;
Bad Web Bot
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
πΊπΈ
TPI-Abuse
2026-10-27 22:12:14
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 138.219.134.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 138.219.134.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:12:08.145393 2026] [security2:error] [pid 20491:tid 20491] [client 138.219.134.161:59999] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thewanderingwoods.quest|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thewanderingwoods.quest"] [uri "/"] [unique_id "auEhuDqj-A_1EoDz7JyGSQAAAAI"], referer: https://each.co.in/redirect.php?ref_host=covetedhub.xyz
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-26 15:16:13
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 138.219.134.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 138.219.134.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:16:07.099389 2026] [security2:error] [pid 28399:tid 28413] [client 138.219.134.161:60915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||coloradospringsmohs.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "coloradospringsmohs.com"] [uri "/"] [unique_id "at9ut3z3Jp49snKnjONd-AAAAAs"], referer: https://five.co.in/redirect.php?ref_host=blok-haus-cena-za-m2.ru
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
SMARTNET
2026-05-27 06:03:53
(5 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 8969aafa-3f20-493f-8883-3bda65a2b909
DDoS Attack
π©πͺ
Pingger Shikkoken
2023-11-18 23:42:38
(2 years ago)
Participating in DDoS Amplification Attack! Sending 11 requests over 3751s asking for ?0? of cisco.c ...
show more
Participating in DDoS Amplification Attack! Sending 11 requests over 3751s asking for ?0? of cisco.com, apple.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
Showing 1 to
4
of 4 reports