This IP address has been reported a total of
42
times from
36 distinct
sources.
34.138.79.193 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
XORP (haproxy): 6x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ...
show moreXORP (haproxy): 6x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
Anonymous
34.138.79.193 - - [28/Aug/2026:16:43:50 +0000] "GET /.env.local HTTP/1.1" 404 30651 "-" "crusader-wo ...
show more34.138.79.193 - - [28/Aug/2026:16:43:50 +0000] "GET /.env.local HTTP/1.1" 404 30651 "-" "crusader-worker/1.0"
...
show less
{"reqId":"ugf8lBXOdiPFX5CB1npQ","level":1,"time":"2026-08-27T23:15:01+02:00","remoteAddr":"34.138.79 ...
show more{"reqId":"ugf8lBXOdiPFX5CB1npQ","level":1,"time":"2026-08-27T23:15:01+02:00","remoteAddr":"34.138.79.193","user":"--","app":"core","method":"GET","url":"/_ignition/health-check","scriptName":"/index.php","message":"Trusted domain error. \"34.138.79.193\" tried to access using \"home.khomri.com\" as host.","userAgent":"crusader-worker/1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"wQexS3vQ6t69i7vFkYFo","level":1,"time":"2026-08-27T23:15:01+02:00","remoteAddr":"34.138.79.193","user":"--","app":"core","method":"GET","url":"/actuator/env","scriptName":"/index.php","message":"Trusted domain error. \"34.138.79.193\" tried to access using \"home.khomri.com\" as host.","userAgent":"crusader-worker/1.0","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"jcCgK6BfIanMnVVTUjYz","level":1,"time":"2026-08-27T23:15:01+02:00","remoteAddr":"34.138.79.193","user":"--","app":"core","method":"GET","url":"/env","scriptName":"/index.php","message":"Trusted domain error. \"34.138.79.193\" trie
...
show less
[ThuAug2720:09:23.2312032026][security2:error][pid1526800:tid1526856][client34.138.79.193:0]ModSecur ...
show more[ThuAug2720:09:23.2312032026][security2:error][pid1526800:tid1526856][client34.138.79.193:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.lacer.ch.136-243-54-122.cpanel.site\"][uri\"/wp-config.php~\"][unique_id\"apB9U7ysrsarvSVzhLfR6QAAAFQ\"]
show less