AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User aranguren.org , the webmaster of aranguren.org, joined AbuseIPDB in April 2018 and has reported 214,814 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 172.235.151.144	01 Oct 2026	172.235.151.144 - - [01/Oct/2026:23:45:49 +1000] "GET /wp-content/plugins/burst-statistics/readme.tx ... show more 172.235.151.144 - - [01/Oct/2026:23:45:49 +1000] "GET /wp-content/plugins/burst-statistics/readme.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.235.151.144 - - [01/Oct/2026:23:45:50 +1000] "GET /wp-content/plugins/burst-statistics/readme.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.235.151.144 - - [01/Oct/2026:23:45:51 +1000] "GET /wp-content/plugins/burst-statistics/readme.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.235.151.144 - - [01/Oct/2026:23:45:57 +1000] "GET /wp-content/plugins/burst-statistics/readme.txt HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.235.151.144 - - [02/Oct/2026:00:14:58 +1000] ... show less	Bad Web Bot
🇮🇱 51.4.106.147	01 Oct 2026	51.4.106.147 - - [02/Oct/2026:00:09:22 +1000] "GET /wp-links-opml.php HTTP/1.1" 404 16 "-" "Mozilla/ ... show more 51.4.106.147 - - [02/Oct/2026:00:09:22 +1000] "GET /wp-links-opml.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 51.4.106.147 - - [02/Oct/2026:00:09:24 +1000] "GET /wp-json/wp/v2/pages?per_page=30&_fields=id HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 51.4.106.147 - - [02/Oct/2026:00:09:30 +1000] "GET /wp-sitemap-posts-page-1.xml HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 51.4.106.147 - - [02/Oct/2026:00:09:32 +1000] "GET /wp-content/themes/twentytwentyfour/page-templates/ HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 51.4.106.147 - - [02/Oct/2026:00:09:34 +1000] "GET /wp-content/themes/twentytwentythree/page-templates/ HTTP/ ... show less	Bad Web Bot
🇳🇱 104.23.166.109	01 Oct 2026	104.23.166.109 - - [02/Oct/2026:00:00:11 +1000] "GET /.env.local HTTP/1.1" 404 995 "-" "Mozilla/5.0 ... show more 104.23.166.109 - - [02/Oct/2026:00:00:11 +1000] "GET /.env.local HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 104.23.166.109 - - [02/Oct/2026:00:00:35 +1000] "GET /wp-config.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.109 - - [02/Oct/2026:00:00:51 +1000] "GET /secrets.json HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.109 - - [02/Oct/2026:00:01:00 +1000] "GET /config.yaml HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.109 - - [02/Oct/2026:00:01:23 +1000] "GET /.htaccess HTTP/1.1" 403 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.16 ... show less	Bad Web Bot
🇳🇱 104.23.166.13	01 Oct 2026	104.23.166.13 - - [02/Oct/2026:00:00:11 +1000] "GET /.env HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Window ... show more 104.23.166.13 - - [02/Oct/2026:00:00:11 +1000] "GET /.env HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 104.23.166.13 - - [02/Oct/2026:00:00:27 +1000] "GET /.npmrc HTTP/1.1" 404 995 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 104.23.166.13 - - [02/Oct/2026:00:00:43 +1000] "GET /wp-config.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.13 - - [02/Oct/2026:00:00:51 +1000] "GET /config.yml HTTP/1.1" 404 995 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 104.23.166.13 - - [02/Oct/2026:00:01:07 +1000] "GET /index.php.bak HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, lik ... show less	Bad Web Bot
🇳🇱 104.23.166.59	01 Oct 2026	104.23.166.59 - - [02/Oct/2026:00:00:02 +1000] "GET /.env.staging HTTP/1.1" 404 995 "-" "Mozilla/5.0 ... show more 104.23.166.59 - - [02/Oct/2026:00:00:02 +1000] "GET /.env.staging HTTP/1.1" 404 995 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 104.23.166.59 - - [02/Oct/2026:00:00:11 +1000] "GET /.env.staging HTTP/1.1" 404 995 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 104.23.166.59 - - [02/Oct/2026:00:00:11 +1000] "GET /.env.production HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.59 - - [02/Oct/2026:00:00:35 +1000] "GET /config.json HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.59 - - [02/Oct/2026:00:00:51 +1000] "GET /config.yaml HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleW ... show less	Bad Web Bot
🇨🇦 34.95.2.12	01 Oct 2026	34.95.2.12 - - [01/Oct/2026:23:55:41 +1000] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 App ... show more 34.95.2.12 - - [01/Oct/2026:23:55:41 +1000] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.95.2.12 - - [01/Oct/2026:23:55:52 +1000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 353 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.95.2.12 - - [01/Oct/2026:23:55:52 +1000] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 345 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" ... show less	Web App Attack
🇧🇪 207.175.96.215	01 Oct 2026	207.175.96.215 - - [01/Oct/2026:23:39:52 +1000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d ... show more 207.175.96.215 - - [01/Oct/2026:23:39:52 +1000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 353 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 207.175.96.215 - - [01/Oct/2026:23:39:52 +1000] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 345 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 207.175.96.215 - - [01/Oct/2026:23:39:53 +1000] "POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/2.0" 301 346 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 136.90.54.126	01 Oct 2026	136.90.54.126 - - [01/Oct/2026:23:36:44 +1000] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 ... show more 136.90.54.126 - - [01/Oct/2026:23:36:44 +1000] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 136.90.54.126 - - [01/Oct/2026:23:37:03 +1000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 353 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 136.90.54.126 - - [01/Oct/2026:23:37:03 +1000] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 345 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... show less	Web App Attack
🇩🇪 46.225.236.72	01 Oct 2026	[Thu Oct 01 23:35:05.868512 2026] [ssl:error] [pid 495829:tid 495885] [client 46.225.236.72:59462] A ... show more [Thu Oct 01 23:35:05.868512 2026] [ssl:error] [pid 495829:tid 495885] [client 46.225.236.72:59462] AH02032: Hostname mail.aranguren.org provided via SNI and hostname mail.luisaranguren.com provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://203.132.94.196:443/ [Thu Oct 01 23:35:08.157935 2026] [ssl:error] [pid 495829:tid 495862] [client 46.225.236.72:59486] AH02032: Hostname mail.aranguren.org provided via SNI and hostname mail.luisaranguren.com provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://203.132.94.196:443/ [Thu Oct 01 23:35:10.049364 2026] [ssl:error] [pid 495829:tid 495870] [client 46.225.236.72:59506] AH02032: Hostname mail.aranguren.org provided via SNI and hostname mail.luisaranguren.com provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://203.132.94.196:443/access/api/v1/system/ping ... show less	Brute-Force Web App Attack
🇺🇸 18.116.101.220	01 Oct 2026	2026-10-01T22:53:32.564272+10:00 luisaranguren postfix/smtpd[487361]: improper command pipelining af ... show more 2026-10-01T22:53:32.564272+10:00 luisaranguren postfix/smtpd[487361]: improper command pipelining after CONNECT from scan.visionheight.com[18.116.101.220]: GET / HTTP/1.1\r\nHost: 203.132.94.196:587\r\nUser-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; 2026-10-01T22:54:46.287238+10:00 luisaranguren postfix/smtpd[487361]: improper command pipelining after CONNECT from scan.visionheight.com[18.116.101.220]: GET / HTTP/1.1\r\nHost: 203.132.94.196:587\r\nUser-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; 2026-10-01T22:57:04.561551+10:00 luisaranguren postfix/smtpd[488974]: improper command pipelining after CONNECT from scan.visionheight.com[18.116.101.220]: \026\003\001\000\356\001\000\000\352\003\003\371\263O\256\322ES'\3102\025\223\203\373\003@\370k\a%\034\224\3435\203\315\v(\022\362\036\237 \022\211\234\246[Q\2605\356\001\341S\0262\371\300\323G\206X\033$\350\000\261\025G\216\036la\302\000&\314\250\314\251\300/\3000\300+\300,\300\023\300\t\300\024\300\n\000\234 ... show less	Spoofing
🇺🇸 34.10.43.131	01 Oct 2026	34.10.43.131 - - [01/Oct/2026:22:09:04 +1000] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 ( ... show more 34.10.43.131 - - [01/Oct/2026:22:09:04 +1000] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.10.43.131 - - [01/Oct/2026:22:09:13 +1000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 353 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 34.10.43.131 - - [01/Oct/2026:22:09:14 +1000] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 301 345 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" ... show less	Web App Attack
🇮🇳 80.225.203.231	01 Oct 2026	80.225.203.231 - - [01/Oct/2026:21:36:43 +1000] "GET /pathscan-344e5c027ca4-nope.env HTTP/1.1" 404 9 ... show more 80.225.203.231 - - [01/Oct/2026:21:36:43 +1000] "GET /pathscan-344e5c027ca4-nope.env HTTP/1.1" 404 991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 80.225.203.231 - - [01/Oct/2026:21:36:43 +1000] "GET /.env.txt HTTP/1.1" 404 991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 80.225.203.231 - - [01/Oct/2026:21:36:44 +1000] "GET /.env.dev HTTP/1.1" 404 991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 80.225.203.231 - - [01/Oct/2026:21:36:44 +1000] "GET /.env.bak HTTP/1.1" 404 991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 80.225.203.231 - - [01/Oct/2026:21:36:44 +1000] "GET /.env.production HTTP/1.1" 404 991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1 ... show less	Bad Web Bot
🇳🇱 141.101.76.111	01 Oct 2026	141.101.76.111 - - [01/Oct/2026:21:10:04 +1000] "GET /.env.production HTTP/1.1" 404 995 "-" "Mozilla ... show more 141.101.76.111 - - [01/Oct/2026:21:10:04 +1000] "GET /.env.production HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.111 - - [01/Oct/2026:21:10:12 +1000] "GET /.env.production HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.111 - - [01/Oct/2026:21:10:20 +1000] "GET /.aws/credentials HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.111 - - [01/Oct/2026:21:10:29 +1000] "GET /.aws/credentials HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.111 - - [01/Oct/2026:21:11:17 +1000] "GET /index.php~ HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0. ... show less	Bad Web Bot
🇳🇱 141.101.76.159	01 Oct 2026	141.101.76.159 - - [01/Oct/2026:21:10:12 +1000] "GET /.env.backup HTTP/1.1" 404 995 "-" "Mozilla/5.0 ... show more 141.101.76.159 - - [01/Oct/2026:21:10:12 +1000] "GET /.env.backup HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.159 - - [01/Oct/2026:21:10:21 +1000] "GET /.svn/entries HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 141.101.76.159 - - [01/Oct/2026:21:10:37 +1000] "GET /wp-config.php.bak HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.159 - - [01/Oct/2026:21:10:37 +1000] "GET /.ssh/id_rsa HTTP/1.1" 404 995 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 141.101.76.159 - - [01/Oct/2026:21:10:45 +1000] "GET /wp-config.php.bak HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Bad Web Bot
🇳🇱 141.101.76.158	01 Oct 2026	141.101.76.158 - - [01/Oct/2026:21:10:04 +1000] "GET /.env.backup HTTP/1.1" 404 995 "-" "Mozilla/5.0 ... show more 141.101.76.158 - - [01/Oct/2026:21:10:04 +1000] "GET /.env.backup HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.158 - - [01/Oct/2026:21:10:12 +1000] "GET /.env HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 141.101.76.158 - - [01/Oct/2026:21:10:12 +1000] "GET /.env.staging HTTP/1.1" 404 995 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 141.101.76.158 - - [01/Oct/2026:21:10:29 +1000] "GET /.svn/entries HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 141.101.76.158 - - [01/Oct/2026:21:10:29 +1000] "GET /.npmrc HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro ... show less	Bad Web Bot
🇫🇷 146.70.194.222	01 Oct 2026	146.70.194.222 - - [01/Oct/2026:21:05:18 +1000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 995 ... show more 146.70.194.222 - - [01/Oct/2026:21:05:18 +1000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.194.222 - - [01/Oct/2026:21:05:19 +1000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.194.222 - - [01/Oct/2026:21:05:19 +1000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Web App Attack
🇧🇪 34.76.13.11	01 Oct 2026	34.76.13.11 - - [01/Oct/2026:18:41:47 +1000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 989 "-" ... show more 34.76.13.11 - - [01/Oct/2026:18:41:47 +1000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.76.13.11 - - [01/Oct/2026:18:41:47 +1000] "GET /feed/ HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.76.13.11 - - [01/Oct/2026:18:41:48 +1000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.76.13.11 - - [01/Oct/2026:18:41:48 +1000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.76.13.11 - - [01/Oct/2026:18:41:49 +1000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ... show less	Bad Web Bot
🇺🇸 35.196.207.81	01 Oct 2026	35.196.207.81 - - [01/Oct/2026:17:17:48 +1000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 985 " ... show more 35.196.207.81 - - [01/Oct/2026:17:17:48 +1000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.196.207.81 - - [01/Oct/2026:17:17:48 +1000] "GET /feed/ HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.196.207.81 - - [01/Oct/2026:17:17:48 +1000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.196.207.81 - - [01/Oct/2026:17:17:48 +1000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.196.207.81 - - [01/Oct/2026:17:17:49 +1000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A ... show less	Bad Web Bot
🇦🇺 172.105.168.152	01 Oct 2026	172.105.168.152 - - [01/Oct/2026:16:29:29 +1000] "GET /wp-admin/admin-ajax.php?action=heartbeat&kc_u ... show more 172.105.168.152 - - [01/Oct/2026:16:29:29 +1000] "GET /wp-admin/admin-ajax.php?action=heartbeat&kc_us_dismiss_admin_notice=1&option_name=bfcm_2025_offer&redirect_to=https://interact.sh HTTP/1.1" 301 411 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 172.105.168.152 - - [01/Oct/2026:16:29:29 +1000] "GET /xwiki/bin/view/XWiki/Main?xpage=distribution&extensionSection=progress&extensionId=org.xwiki.platform%3Axwiki-platform-distribution-flavor-mainwikia7jdh%3Cimg%20src%3Da%20onerror%3Dalert(document.domain)%3Eh5kturc1hk&extensionVersion=17.6.0&extensionNamespace=wiki%3Axwiki&extensionAction=install HTTP/1.1" 404 1744 "https://203.132.94.196/xwiki/bin/view/XWiki/Main?xpage=distribution&extensionSection=progress&extensionId=org.xwiki.platform%3Axwiki-platform-distribution-flavor-mainwikia7jdh%3Cimg%20src%3Da%20onerror%3Dalert(document.domain)%3Eh5kturc1hk&extensionVersion=17.6.0&extensionNamespace=wiki%3Axwiki&exten ... show less	Bad Web Bot
🇺🇸 135.222.41.16	01 Oct 2026	135.222.41.16 - - [01/Oct/2026:15:39:47 +1000] "GET /.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Linux; ... show more 135.222.41.16 - - [01/Oct/2026:15:39:47 +1000] "GET /.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 135.222.41.16 - - [01/Oct/2026:15:39:48 +1000] "GET /.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 135.222.41.16 - - [01/Oct/2026:15:39:49 +1000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 985 "-" "python-requests/2.34.2" 135.222.41.16 - - [01/Oct/2026:15:46:41 +1000] "GET /.env HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 135.222.41.16 - - [01/Oct/2026:15:46:43 +1000] "GET /vendor/phpunit/phpunit/src/Util/PH ... show less	Bad Web Bot
🇳🇱 104.23.166.117	01 Oct 2026	104.23.166.117 - - [01/Oct/2026:15:31:26 +1000] "GET /.env HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windo ... show more 104.23.166.117 - - [01/Oct/2026:15:31:26 +1000] "GET /.env HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 104.23.166.117 - - [01/Oct/2026:15:31:26 +1000] "GET /.env.local HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 104.23.166.117 - - [01/Oct/2026:15:31:41 +1000] "GET /wp-config.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.117 - - [01/Oct/2026:15:31:49 +1000] "GET /config.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.117 - - [01/Oct/2026:15:31:57 +1000] "GET /config.yaml HTTP/2.0" 404 994 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko ... show less	Bad Web Bot
🇳🇱 104.23.166.162	01 Oct 2026	104.23.166.162 - - [01/Oct/2026:15:31:25 +1000] "GET /.env.production HTTP/2.0" 404 994 "-" "Mozilla ... show more 104.23.166.162 - - [01/Oct/2026:15:31:25 +1000] "GET /.env.production HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 104.23.166.162 - - [01/Oct/2026:15:31:33 +1000] "GET /.git/config HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.162 - - [01/Oct/2026:15:31:41 +1000] "GET /.ssh/id_rsa HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 104.23.166.162 - - [01/Oct/2026:15:31:49 +1000] "GET /.ssh/id_rsa HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 104.23.166.162 - - [01/Oct/2026:15:31:57 +1000] "GET /credentials.json HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ... show less	Bad Web Bot
🇳🇱 104.23.166.163	01 Oct 2026	104.23.166.163 - - [01/Oct/2026:15:31:26 +1000] "GET /.env.staging HTTP/2.0" 404 994 "-" "Mozilla/5. ... show more 104.23.166.163 - - [01/Oct/2026:15:31:26 +1000] "GET /.env.staging HTTP/2.0" 404 994 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.166.163 - - [01/Oct/2026:15:31:33 +1000] "GET /.svn/entries HTTP/2.0" 404 994 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 104.23.166.163 - - [01/Oct/2026:15:31:33 +1000] "GET /.npmrc HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 104.23.166.163 - - [01/Oct/2026:15:31:41 +1000] "GET /wp-config.php.bak HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 104.23.166.163 - - [01/Oct/2026:15:31:41 +1000] "GET /config.json HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 104.23.166.163 - - [01/Oct/ ... show less	Bad Web Bot
🇯🇵 138.3.223.188	01 Oct 2026	138.3.223.188 - - [01/Oct/2026:15:11:01 +1000] "GET /wp-links-opml.php HTTP/1.1" 404 16 "-" "Mozilla ... show more 138.3.223.188 - - [01/Oct/2026:15:11:01 +1000] "GET /wp-links-opml.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.3.223.188 - - [01/Oct/2026:15:11:02 +1000] "GET /readme.html HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.3.223.188 - - [01/Oct/2026:15:11:02 +1000] "GET /wp-json/wp/v2/pages?per_page=30&_fields=id HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.3.223.188 - - [01/Oct/2026:15:11:02 +1000] "GET /wp-sitemap-posts-page-1.xml HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.3.223.188 - - [01/Oct/2026:15:11:02 +1000] "GET /wp-content/themes/twentytwentyfive/page-templates/ HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Wind ... show less	Bad Web Bot
🇳🇱 2a00:d00:ff:162:62:204:66:10	01 Oct 2026	2a00:d00:ff:162:62:204:66:10 - - [01/Oct/2026:14:01:42 +1000] "GET /.well-known/security.txt HTTP/1. ... show more 2a00:d00:ff:162:62:204:66:10 - - [01/Oct/2026:14:01:42 +1000] "GET /.well-known/security.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; internetnl/1.11.4; +https://internet.nl/about/)" 2a00:d00:ff:162:62:204:66:10 - - [01/Oct/2026:14:01:44 +1000] "GET /security.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; internetnl/1.11.4; +https://internet.nl/about/)" 2a00:d00:ff:162:62:204:66:10 - - [01/Oct/2026:14:01:47 +1000] "GET /.well-known/security.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; internetnl/1.11.4; +https://internet.nl/about/)" 2a00:d00:ff:162:62:204:66:10 - - [01/Oct/2026:14:01:48 +1000] "GET /security.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; internetnl/1.11.4; +https://internet.nl/about/)" 2a00:d00:ff:162:62:204:66:10 - - [01/Oct/2026:14:25:12 +1000] "GET /.well-known/security.txt HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; internetnl/1.11.4; +https://internet.nl/about/)" 2a00:d00:ff:162:62:204:66:10 - - [01/Oct/2026:14:25:14 +1000] "GET /securi ... show less	Bad Web Bot