๐บ๐ธ
TPI-Abuse
2026-09-24 18:59:27
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:59:24.924216 2026] [security2:error] [pid 335341:tid 335341] [client 34.14.198.71:57448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.scswat.org"] [uri "/.git/config"] [unique_id "arVzDM3K1jdi2d4Ms78wYgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 18:40:18
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:40:14.165746 2026] [security2:error] [pid 28375:tid 28375] [client 34.14.198.71:49144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.scoutmountaindistrict.org"] [uri "/.git/config"] [unique_id "arVujqs_ufvR7kJSG4-0xwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:48:37
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:48:32.785245 2026] [security2:error] [pid 23030:tid 23030] [client 34.14.198.71:51670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.schoolrx.org"] [uri "/.git/config"] [unique_id "arVicLBstIreAq0-CcV7dQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:19:21
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:19:13.466033 2026] [security2:error] [pid 20903:tid 20903] [client 34.14.198.71:40126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.scarletveil.org"] [uri "/.git/config"] [unique_id "arVbkYnVLS_7Q80T9Y3S0wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
seal
2026-09-24 15:09:41
(15 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
SSH
Brute-Force
๐บ๐ธ
MatCat
2026-09-24 05:05:07
(1 day ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
Anonymous
2026-09-24 03:50:04
(1 day ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
๐ต๐ฑ
Budyn
2026-09-24 03:11:49
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.sweetpuddingtrap.top | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ง๐ท
vfAcceloReporter
2026-09-22 00:35:25
(3 days ago)
34.14.198.71 - - [21/Sep/2026:21:35:25 -0300] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows ...
show more
34.14.198.71 - - [21/Sep/2026:21:35:25 -0300] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
Exploited Host
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-22 00:03:08
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฉ๐ช
4server
2026-09-21 16:17:04
(3 days ago)
[MonSep2118:16:59.7617202026][security2:error][pid3708745:tid3708868][client34.14.198.71:0]ModSecuri ...
show more
[MonSep2118:16:59.7617202026][security2:error][pid3708745:tid3708868][client34.14.198.71:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.schneider-tools.ch\"][uri\"/.env.bak\"][unique_id\"arFYe6QhSfJmmjYo54t6kwAAARA\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 13:42:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 09:41:59.127598 2026] [security2:error] [pid 25232:tid 25232] [client 34.14.198.71:41526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acquivest.net"] [uri "/.git/config"] [unique_id "arE0J_bWO6Htv8OtmPPIfgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-21 06:00:06
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 14:06:49
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.198.71 (71.198.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:06:42.280413 2026] [security2:error] [pid 8048:tid 8048] [client 34.14.198.71:58712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coinbracelet.com"] [uri "/.git/config"] [unique_id "aq_ocnc6OeLTsphE_4IxTgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack