Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-11-06T09:52:02.539000+00:00 to 2026-11-06T09:52:04.515000+00:00: 10 distinct paths in 1.976s, denied HTTP 404. Trusted client-IP processing; forw ...
show moreObserved automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-11-06T09:52:02.539000+00:00 to 2026-11-06T09:52:04.515000+00:00: 10 distinct paths in 1.976s, denied HTTP 404. Trusted client-IP processing; forwarding headers accepted only from official configured Cloudflare networks. No successful compromise established. Examples: /dist/manifest.json, /.vite/manifest.json, /dist/.vite/manifest.json, /build/manifest.json, /wp-admin/.env, /graphql, /static/.env, /.env, /api/.env/public/.env, /static/app/.env.
show less
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted])
ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2
ET INFO ChatGPT-User Traffic Detected Inbound M1
ET INFO ChatGPT-User Traffic Detected Inbound M2
ET INFO Request to Hidden Environment File - Inbound
ET SCAN B ...
show moreET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2
ET INFO ChatGPT-User Traffic Detected Inbound M1
ET INFO ChatGPT-User Traffic Detected Inbound M2
ET INFO Request to Hidden Environment File - Inbound
ET SCAN Bing Webcrawler User-Agent (BingBot)
ET WEB_SERVER Likely Malicious Request for /proc/self/environ
ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927)
GPL WEB_SERVER .htpasswd access
GPL WEB_SERVER 403 Forbidden
show less
Port Scan
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown