🇺🇸
xxkodedxx
2026-07-21 00:04:42
(17 hours ago)
[Zorvexus edge-defense] Directory scanner (404 enumeration)
Trigger: 6× path-scan, 2× edge-block in ...
show more
[Zorvexus edge-defense] Directory scanner (404 enumeration)
Trigger: 6× path-scan, 2× edge-block in 10m window.
Origin: US / AS396982 Google LLC
Active: 00:03:42 UTC
Volume: 8 HTTP req
Probed: /.git/HEAD, /.DS_Store, /WEB-INF/web.xml, /.bzr/branch/branch.conf, /.hg/dirstate
Status mix: 404×6 444×2
Vhost fishing: cards.zvxlabs.com
UA: "ureq/2.12.1"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-07-20 19:06:09
(22 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇨🇿
Prcek
2026-07-20 10:58:06
(1 day ago)
PortScan:HOST=34.42.96.231,DPORTS=443
Port Scan
🇺🇸
Rip
2026-07-20 10:26:33
(1 day ago)
Automated reconnaissance against web infrastructure.
Web App Attack
🇩🇪
Vegascosmetics
2026-07-19 15:51:03
(2 days ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after attack pattern. Vegas Security
Hacking
Brute-Force
🇨🇭
4server
2026-07-19 06:23:43
(2 days ago)
[SunJul1908:23:38.0550302026][security2:error][pid4100474:tid4100717][client34.42.96.231:0]ModSecuri ...
show more
[SunJul1908:23:38.0550302026][security2:error][pid4100474:tid4100717][client34.42.96.231:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.edomustech.ch.81-17-25-250.cpanel.site\"][uri\"/.env.backup\"][unique_id\"alxtauClbiJILCLuHD0X6gAAAFY\"]
show less
Hacking
Web App Attack
🇩🇪
webanyone
2026-07-19 05:00:52
(2 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
masterguru
2026-07-19 04:41:38
(2 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197)
show less
Hacking
🇬🇧
Apache
2026-07-19 02:14:15
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.42.96.231 (US/United States/231.96.42.34.bc. ...
show more
(mod_security) mod_security (id:210492) triggered by 34.42.96.231 (US/United States/231.96.42.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-07-18 21:10:04
(2 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
Brict IT
2026-07-18 13:45:59
(3 days ago)
Bad Web Bot
Web App Attack
🇦🇺
Block Rockin' Beats
2026-07-18 12:28:06
(3 days ago)
Scanning for exploitable scripts
Hacking
Web App Attack
🇩🇪
et-a_network
2026-07-18 09:45:42
(3 days ago)
34.42.96.231 - - [18/Jul/2026:09:45:41 +0000] "HEAD /.env.production HTTP/1.1" 404 0 "-" "Mozilla/5. ...
show more
34.42.96.231 - - [18/Jul/2026:09:45:41 +0000] "HEAD /.env.production HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" host=e-pruef.et-a.eu
34.42.96.231 - - [18/Jul/2026:09:45:41 +0000] "HEAD /.env.backup HTTP/1.1" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" host=e-pruef.et-a.eu
34.42.96.231 - - [18/Jul/2026:09:45:41 +0000] "HEAD /.git/HEAD HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" host=e-pruef.et-a.eu
34.42.96.231 - - [18/Jul/2026:09:45:41 +0000] "HEAD /.git/config HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36" host=e-pruef.et-a.eu
34.42.96.231 - - [18/Jul/2026:09:45:41 +0000] "HEAD /.env.bak HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" host=e-pruef.et-a.eu
...
show less
Bad Web Bot
Web App Attack
2026-07-18 09:19:38
(3 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
onlyops.app
2026-07-18 07:00:12
(3 days ago)
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-mods ...
show more
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-modsecurity jail) | onlyops.app
show less
Exploited Host