This IP address has been reported a total of
21
times from
18 distinct
sources.
34.140.198.118 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
http-sensitive-files - IP: 34.140.198.118 - time="2026-09-22T17:59:06+02:00" level=info msg="(555f6 ...
show morehttp-sensitive-files - IP: 34.140.198.118 - time="2026-09-22T17:59:06+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.140.198.118 (BE/396982) : 4h ban on Ip 34.140.198.118" module=db
show less
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show moreThis address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.env.production (+12 more) | 2026-09-22 13:58 UTC
show less
{"level":"info","ts":1790085197.3198004,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1790085197.3198004,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.140.198.118","remote_port":"37354","client_ip":"34.140.198.118","proto":"HTTP/1.1","method":"GET","host":"ihgupdate.update.xwvutsrqponmlkjihgfedcjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/crusader-404-probe","headers":{"Accept":["*/*"],"User-Agent":["crusader-worker/1.0"]}},"bytes_read":0,"user_id":"","duration":0.001152601,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://ihgupdate.update.xwvutsrqponmlkjihgfedcjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/crusader-404-probe"],"Content-Type":[]}}
{"level":"info","ts":1790085197.3211036,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.140.198.118","remote_port":"37314","client_ip":"34.140.198.118","proto":"HTTP/1.1","method":"GET","host":"ihgupdate.update.xwvutsrqponmlkjihgfedc
...
show less