Automated report: Unauthorized vulnerability scanning detected on 2026-09-22. 828 requests from this ...
show moreAutomated report: Unauthorized vulnerability scanning detected on 2026-09-22. 828 requests from this IP.
show less
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show moreThis address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.env.prod (+15 more) | 2026-09-22 16:48 UTC
show less
[TueSep2216:19:00.0351992026][security2:error][pid860915:tid860949][client34.139.89.46:0]ModSecurity ...
show more[TueSep2216:19:00.0351992026][security2:error][pid860915:tid860949][client34.139.89.46:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"kiteinvest.ch.136-243-54-122.cpanel.site\"][uri\"/wp-config.php.bak\"][unique_id\"arKOVORNbUGO4rjeYpdO-gAAAAQ\"]
show less
Attempted access to sensitive endpoint (/.vscode/mcp.json) detected. Automated scan or unauthorized ...
show moreAttempted access to sensitive endpoint (/.vscode/mcp.json) detected. Automated scan or unauthorized probing.
show less
Attempted access to sensitive endpoint (/.env.prod) detected. Automated scan or unauthorized probing ...
show moreAttempted access to sensitive endpoint (/.env.prod) detected. Automated scan or unauthorized probing.
show less
Web App Attack
Showing 1 to
15
of 82 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ