This IP address has been reported a total of
10
times from
7 distinct
sources.
138.84.34.142 was first reported on
October 24th 2024 , and the most recent report was
1 day ago United States of America
with 3
reports;
Germany
with 2
reports;
Poland
with 1
report.
The most common categories in these recent reports were:
Port Scan
4
times;
Brute-Force
4
times;
Web App Attack
2
times;
Bad Web Bot
2
times;
SSH
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-14 05:04:11
(1 day ago)
IP & Port Scan.
SSH
Port Scan
Brute-Force
2026-10-14 01:16:27
(1 day ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇵🇱
bart@
2026-10-13 22:34:38
(1 day ago)
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honey ...
show more
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
show less
Port Scan
🇺🇸
cybsecaoccol
2026-10-13 20:43:11
(1 day ago)
unauthorized connection or malicious port scan attempted on tcp port 23 - dr
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-10-10 22:45:47
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 138.84.34.142 (customer.sntochl1.isp.starlink.c ...
show more
(mod_security) mod_security (id:225170) triggered by 138.84.34.142 (customer.sntochl1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:45:40.835469 2026] [security2:error] [pid 11345:tid 11345] [client 138.84.34.142:61553] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||forerunnersjazz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "forerunnersjazz.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asrAFNvmbStc57ElP2qm1wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 06:01:55
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 138.84.34.142 (customer.sntochl1.isp.starlink.c ...
show more
(mod_security) mod_security (id:210350) triggered by 138.84.34.142 (customer.sntochl1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:01:50.342029 2026] [security2:error] [pid 1704:tid 1704] [client 138.84.34.142:14292] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stoneybluff.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stoneybluff.com"] [uri "/"] [unique_id "ar9IzvJAbROpd0UO3N2CRQAAAB4"], referer: https://backlinksforwebsite.online/dir/powerful-link-building-198700
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-25 14:10:02
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-15 23:46:55
(10 months ago)
scanning http requests from known botnet
Web App Attack
🇳🇱
exxos
2025-09-18 15:03:01
(1 year ago)
Attacks with Bad user agents
Hacking
2024-10-24 19:02:05
(1 year ago)
wordpress-trap
Web App Attack
Showing 1 to
10
of 10 reports
