🇺🇸
TPI-Abuse
2026-09-29 07:45:09
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 03:44:58.559659 2026] [security2:error] [pid 15312:tid 15312] [client 34.128.87.14:34180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.somaflow.okwellbeing.com"] [uri "/.git/config"] [unique_id "artsenl9zt4buyuUKgqPMQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 05:18:32
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 01:18:25.182810 2026] [security2:error] [pid 27033:tid 27033] [client 34.128.87.14:50750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.solutionsint.com.crestrong.com"] [uri "/.git/config"] [unique_id "artKIcr2w9zBTICBCMj5MAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 06:00:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:59:56.113408 2026] [security2:error] [pid 16717:tid 16717] [client 34.128.87.14:48876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.slovenia-boat-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "aroCXOGZ6RbusCMDuNuLeQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-28 04:41:46
(5 days ago)
Multiple WAF Violations
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-27 04:25:10
(6 days ago)
[Sun Sep 27 14:25:10.286738 2026] [security2:error] [pid 878608] [client 34.128.87.14:60952] [client ...
show more
[Sun Sep 27 14:25:10.286738 2026] [security2:error] [pid 878608] [client 34.128.87.14:60952] [client 34.128.87.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shotbysuzanne.com.au"] [uri "/.git/config"] [unique_id "ariapnBgdbXf-61baDePLAAAAAg"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 14:11:46
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.87.14 (14.87.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:11:42.242068 2026] [security2:error] [pid 23184:tid 23195] [client 34.128.87.14:43518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.adultbaja.com"] [uri "/.git/config"] [unique_id "arfSnsCyLvF1ln7mj9smqQAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-26 11:25:29
(6 days ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.git/config | 2026-09-26 11:25 UTC
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-09-25 09:22:32
(1 week ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.128.87.14 - - \[25/Sep/2026:11:22:27 +0200\] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-09-25 07:13:27
(1 week ago)
Too many 404 requests [BY]
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-25 02:20:57
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇱
Savvii
2026-09-24 16:41:31
(1 week ago)
20 attempts against mh-misbehave-ban on sedna
Brute-Force
Bad Web Bot
Web App Attack
2026-09-24 05:50:03
(1 week ago)
| [Dangerous/Indonesia] Aggressive IP 34.128.87.14 (~30 hits). Type: DoS Defender- Web server 400 er ...
show more
| [Dangerous/Indonesia] Aggressive IP 34.128.87.14 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇩🇪
Philister11
2026-09-24 01:55:46
(1 week ago)
CrowdSec: crowdsecurity/http-probing (ID/AS396982)
Web App Attack
Hacking
🇳🇱
e.fierstra
2026-09-23 13:58:38
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-09-22 15:03:53
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
