This IP address has been reported a total of
3,311
times from
842 distinct
sources.
34.14.99.143 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 876
reports;
United States of America
with 523
reports;
Netherlands
with 351
reports.
The most common categories in these recent reports were:
Web App Attack
2568
times;
Brute-Force
948
times;
Bad Web Bot
880
times;
Hacking
664
times;
Port Scan
285
times;
Other
431
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show moreFail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Web App Attack
Bad Web Bot
Anonymous
FortiWeb WAF: 4 attacks detected. Threat Score: 5400. Types: Client Management(2), Block IP List(2). ...
show moreFortiWeb WAF: 4 attacks detected. Threat Score: 5400. Types: Client Management(2), Block IP List(2). Origin: Belgium.
show less
Attacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControl ...
show moreAttacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControlPro VPS)
show less
Automated web vulnerability scanning: 202 HTTP 4xx probes for sensitive paths (/.amplifyrc, /.aws/.e ...
show moreAutomated web vulnerability scanning: 202 HTTP 4xx probes for sensitive paths (/.amplifyrc, /.aws/.env, /.aws/config, /.aws/credentials). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
show less
HTTP application-layer DoS / botnet traffic from 34.14.99.143: repeated high-cost dynamic page and f ...
show moreHTTP application-layer DoS / botnet traffic from 34.14.99.143: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
