AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User DumaNet , the webmaster of dumanet.hu, joined AbuseIPDB in April 2018 and has reported 84,127 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇮🇩 157.66.54.188	09 Oct 2026	WordPress (CMS) attack attempts. Date: 2026 Oct 09. 00:48:57 Source IP: 157.66.54.188 Portion o ... show more WordPress (CMS) attack attempts. Date: 2026 Oct 09. 00:48:57 Source IP: 157.66.54.188 Portion of the log(s): 157.66.54.188 - [09/Oct/2026:00:48:57 +0200] "GET /wp-content/mu-plugins/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 157.66.54.188 - [09/Oct/2026:00:48:57 +0200] "GET /wp-content/languages/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 157.66.54.188 - [09/Oct/2026:00:48:57 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 157.66.54.188 - [09/Oct/2026:00:48:56 +0200] "GET /wp-content/themes/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 157.66.54.188 - [09/Oct/2026:00:48:56 +0200] "GET /wp-content/plugins/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 157.66.54.188 - [09/Oct/2026:00:48:56 +0200] "GET /wp-content/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 157.66.54.188 - [09/Oct/2026:00:48:56 +0200] "GET /wp-ad show less	Web App Attack Hacking
🇹🇼 34.80.230.128	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 09. 00:09:47 Source IP: 34.80. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 09. 00:09:47 Source IP: 34.80.230.128 Portion of the log(s): 34.80.230.128 - [09/Oct/2026:00:09:47 +0200] "GET /users/login HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.80.230.128 - [09/Oct/2026:00:09:47 +0200] "GET /signin HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.80.230.128 - [09/Oct/2026:00:09:47 +0200] "GET /secure HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.80.230.128 - [09/Oct/2026:00:09:47 +0200] "GET /sign-in HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.80.230.128 - [09/Oct/2026:00:09:47 +0200] "GET /auth HTTP/1.1" 404 show less	Web App Attack
🇹🇼 107.167.183.193	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 23:12:05 Source IP: 107.16 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 23:12:05 Source IP: 107.167.183.193 Portion of the log(s): 107.167.183.193 - [08/Oct/2026:23:12:05 +0200] "GET /@fs/.env?import&?raw?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 107.167.183.193 - [08/Oct/2026:23:12:05 +0200] "GET /@fs/app/.env?import&raw?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 107.167.183.193 - [08/Oct/2026:23:12:05 +0200] "GET /@fs/.env?raw&url?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 107.167.183.193 - [08/Oct/2026:23:12:05 +0200] "GET /@fs/.env?url&raw?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 107.167.183.193 - [08/Oct/2026:23:12:05 +0200] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" show less	Web App Attack
🇩🇪 34.185.220.247	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 23:01:58 Source IP: 34.185 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 23:01:58 Source IP: 34.185.220.247 Portion of the log(s): 34.185.220.247 - [08/Oct/2026:23:01:58 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.185.220.247 - [08/Oct/2026:23:01:58 +0200] "GET /.bashrc HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.185.220.247 - [08/Oct/2026:23:01:58 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.185.220.247 - [08/Oct/2026:23:01:58 +0200] "GET /key.pem HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.185.220.247 - [08/Oct/2026:23:01:58 +0200] "GET /.zshrc HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" show less	Web App Attack
🇧🇪 34.38.151.28	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:56:23 Source IP: 34.38. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:56:23 Source IP: 34.38.151.28 Portion of the log(s): 34.38.151.28 - [08/Oct/2026:22:56:23 +0200] "GET /key.pem HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.38.151.28 - [08/Oct/2026:22:56:23 +0200] "GET /admin/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 34.38.151.28 - [08/Oct/2026:22:56:23 +0200] "GET /img../.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.38.151.28 - [08/Oct/2026:22:56:23 +0200] "GET /.env.backup HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 34.38.151.28 - [08/Oct/2026:22:56:23 +0200] "GET /.git/HEAD HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.38.151.28 - [08/Oct/2026:22:56:23 +0200] "GET /.git-crede show less	Web App Attack
🇭🇰 52.139.150.131	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:41:22 Source IP: 52.139 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:41:22 Source IP: 52.139.150.131 Portion of the log(s): 52.139.150.131 - [08/Oct/2026:22:41:22 +0200] "GET /edit.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:22 +0200] "GET /alfa.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:22 +0200] "GET /1.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:21 +0200] "GET /ioxi-o.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:21 +0200] "GET /term.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:21 +0200] "GET /about.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:21 +0200] "GET /wk/index.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:21 +0200] "GET /404.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:20 +0200] "GET /adminfuns.php HTTP/1.1" 404 153 "-" "-" 52.139.150.131 - [08/Oct/2026:22:41:20 +0200] "GET /file.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇧🇪 34.53.184.30	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:10:51 Source IP: 34.53. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:10:51 Source IP: 34.53.184.30 Portion of the log(s): 34.53.184.30 - [08/Oct/2026:22:10:51 +0200] "GET /.env.sample HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.53.184.30 - [08/Oct/2026:22:10:51 +0200] "GET /.env.openai HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.53.184.30 - [08/Oct/2026:22:10:51 +0200] "GET /.env.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.53.184.30 - [08/Oct/2026:22:10:51 +0200] "GET /.env.prod HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.53.184.30 - [08/Oct/2026:22:10:51 +0200] "GET /.env.old HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.53.184.30 - [08/Oct/2026:22:10:51 +0200] "GET /.env.live HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack
🇺🇸 35.199.46.73	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:05:24 Source IP: 35.199 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 22:05:24 Source IP: 35.199.46.73 Portion of the log(s): 35.199.46.73 - [08/Oct/2026:22:05:24 +0200] "GET /.htpasswd HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 35.199.46.73 - [08/Oct/2026:22:05:24 +0200] "GET /.npmrc HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 35.199.46.73 - [08/Oct/2026:22:05:24 +0200] "POST /icecoder/lib/terminal-xhr.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 35.199.46.73 - [08/Oct/2026:22:05:24 +0200] "POST /graphql HTTP/1.1" 404 555 "https://[removed].eu" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 35.199.46.73 - [08/Oct/2026:22:05:24 +0200] "GET /assets/manifest.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 10 show less	Web App Attack
🇹🇼 35.221.231.111	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:34:25 Source IP: 35.221 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:34:25 Source IP: 35.221.231.111 Portion of the log(s): 35.221.231.111 - [08/Oct/2026:21:34:25 +0200] "GET /account/login HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.221.231.111 - [08/Oct/2026:21:34:25 +0200] "GET /secure HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.221.231.111 - [08/Oct/2026:21:34:25 +0200] "POST /graphql HTTP/1.1" 404 555 "http://[removed].rdn.hu" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.221.231.111 - [08/Oct/2026:21:34:25 +0200] "GET /sign-in HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.221.231.111 - [08/Oct/2026:21:34:24 +0200] "POST /lib/terminal-xhr.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 App show less	Web App Attack
🇹🇼 104.155.236.196	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:08:57 Source IP: 104.15 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:08:57 Source IP: 104.155.236.196 Portion of the log(s): 104.155.236.196 - [08/Oct/2026:21:08:57 +0200] "GET /build../.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 104.155.236.196 - [08/Oct/2026:21:08:57 +0200] "GET /wp-json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 104.155.236.196 - [08/Oct/2026:21:08:57 +0200] "GET /firebase-config.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 104.155.236.196 - [08/Oct/2026:21:08:57 +0200] "GET /settings.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 104.155.236.196 - [08/Oct/2026:21:08:57 +0200] "GET /api/system/fileView?file=/app/.env HTTP/1.1" 404 153 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" .... show less	Web App Attack
🇧🇪 34.52.133.111	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:05:59 Source IP: 34.52. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:05:59 Source IP: 34.52.133.111 Portion of the log(s): 34.52.133.111 - [08/Oct/2026:21:05:59 +0200] "GET /.env.sample HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - [08/Oct/2026:21:05:59 +0200] "GET /.env.prod HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - [08/Oct/2026:21:05:59 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - [08/Oct/2026:21:05:59 +0200] "GET /.env.openai HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - [08/Oct/2026:21:05:59 +0200] "GET /.env.local HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - [08/Oct/2026:21:05:59 +0200] "GET /.env.live HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 show less	Web App Attack
🇨🇦 35.203.83.240	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:02:12 Source IP: 35.203 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 21:02:12 Source IP: 35.203.83.240 Portion of the log(s): 35.203.83.240 - [08/Oct/2026:21:02:12 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 404 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 35.203.83.240 - [08/Oct/2026:21:02:12 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 35.203.83.240 - [08/Oct/2026:21:02:12 +0200] "GET /.env?raw?? HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" 35.203.83.240 - [08/Oct/2026:21:02:12 +0200] "GET /.bashrc HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 35.203.83.240 - [08/Oct/2026:21:02:12 +0200] "GET /.zshrc HTTP/1.1" 404 153 "-" "Mozilla show less	Web App Attack
🇧🇷 34.39.246.207	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 20:51:48 Source IP: 34.39. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 20:51:48 Source IP: 34.39.246.207 Portion of the log(s): 34.39.246.207 - [08/Oct/2026:20:51:48 +0200] "GET /js../.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 34.39.246.207 - [08/Oct/2026:20:51:48 +0200] "GET //.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.39.246.207 - [08/Oct/2026:20:51:48 +0200] "GET /css../.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 34.39.246.207 - [08/Oct/2026:20:51:48 +0200] "GET /build../.env HTTP/1.1" 404 153 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.39.246.207 - [08/Oct/2026:20:51:48 +0200] "GET /z9x8c7v6b5-debug-trigger-deathlegion.org HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.39.246.207 - [08/Oct/2026:20:51:47 +0200] "POST /lib/terminal-xhr.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0 show less	Web App Attack
🇩🇪 103.244.227.59	09 Oct 2026	WordPress (CMS) attack attempts. Date: 2026 Oct 08. 20:23:17 Source IP: 103.244.227.59 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Oct 08. 20:23:17 Source IP: 103.244.227.59 Portion of the log(s): 103.244.227.59 - [08/Oct/2026:20:23:17 +0200] "GET /wp-content/themes/silverstorm/page-templates/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.244.227.59 - [08/Oct/2026:20:23:17 +0200] "GET /wp-content/themes/oceanwp/page-templates/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.244.227.59 - [08/Oct/2026:20:23:17 +0200] "GET /wp-content/themes/tutor-starter/page-templates/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.244.227.59 - [08/Oct/2026:20:23:17 +0200] "GET /wp-content/themes/botiga/page-templates/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro show less	Web App Attack Hacking
🇹🇼 35.221.238.172	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 20:15:06 Source IP: 35.221 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 20:15:06 Source IP: 35.221.238.172 Portion of the log(s): 35.221.238.172 - [08/Oct/2026:20:15:06 +0200] "GET /.htpasswd HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 35.221.238.172 - [08/Oct/2026:20:15:06 +0200] "GET /wp-json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 35.221.238.172 - [08/Oct/2026:20:15:06 +0200] "GET /.npmrc HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 35.221.238.172 - [08/Oct/2026:20:15:06 +0200] "POST /graphql HTTP/1.1" 404 555 "https://[removed].hu" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.221.238.172 - [08/Oct/2026:20:15:06 +0200] "GET /dist/manifest.json HT show less	Web App Attack
🇰🇷 20.214.170.255	09 Oct 2026	WordPress (CMS) attack attempts. Date: 2026 Oct 08. 20:02:33 Source IP: 20.214.170.255 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Oct 08. 20:02:33 Source IP: 20.214.170.255 Portion of the log(s): 20.214.170.255 - [08/Oct/2026:20:02:33 +0200] "GET /amdin.php HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:32 +0200] "GET /abcd.php HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:32 +0200] "GET /wp-admin/user/ HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:32 +0200] "GET /gulu.php HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:32 +0200] "GET /wp-active.php HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:31 +0200] "GET /k.php?p= HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:31 +0200] "GET /ba.php HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:31 +0200] "GET /class.php HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:31 +0200] "GET /9.php HTTP/1.1" 404 153 "-" "-" 20.214.170.255 - [08/Oct/2026:20:02:30 +0200] "GET /brand.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇺🇸 34.148.115.114	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 19:36:59 Source IP: 34.148 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 19:36:59 Source IP: 34.148.115.114 Portion of the log(s): 34.148.115.114 - [08/Oct/2026:19:36:59 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.148.115.114 - [08/Oct/2026:19:36:59 +0200] "GET /api/env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.148.115.114 - [08/Oct/2026:19:36:59 +0200] "GET /openapi.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.148.115.114 - [08/Oct/2026:19:36:59 +0200] "GET /__/firebase/init.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.148.115.114 - [08/Oct/2026:19:36:59 +0200] "GET /manifest.webmanifest HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.148.115.114 - [08/Oct/2026:19:36:59 show less	Web App Attack
🇹🇼 34.81.64.115	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 17:44:08 Source IP: 34.81. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 17:44:08 Source IP: 34.81.64.115 Portion of the log(s): 34.81.64.115 - [08/Oct/2026:17:44:08 +0200] "GET /.git-credentials HTTP/1.1" 404 153 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" 34.81.64.115 - [08/Oct/2026:17:44:08 +0200] "GET /.netrc HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 34.81.64.115 - [08/Oct/2026:17:44:07 +0200] "GET /.netrc HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 34.81.64.115 - [08/Oct/2026:17:44:07 +0200] "GET /.pgpass HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 34.81.64.115 - [08/Oct/2026:17:44:07 +0200 show less	Web App Attack
🇹🇼 104.199.143.104	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 17:12:41 Source IP: 104.19 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 17:12:41 Source IP: 104.199.143.104 Portion of the log(s): 104.199.143.104 - [08/Oct/2026:17:12:41 +0200] "GET /cron/.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.199.143.104 - [08/Oct/2026:17:12:41 +0200] "GET /cronlab/.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.199.143.104 - [08/Oct/2026:17:12:40 +0200] "GET /lab/.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.199.143.104 - [08/Oct/2026:17:12:40 +0200] "GET /temp/.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.199.143.104 - [08/Oct/2026:17:12:40 +0200] "GET /tmp/.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) Apple show less	Web App Attack
🇭🇰 104.208.66.100	09 Oct 2026	WordPress (CMS) attack attempts. Date: 2026 Oct 08. 14:37:10 Source IP: 104.208.66.100 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Oct 08. 14:37:10 Source IP: 104.208.66.100 Portion of the log(s): 104.208.66.100 - [08/Oct/2026:14:37:10 +0200] "GET /wp-includes/js/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.208.66.100 - [08/Oct/2026:14:37:09 +0200] "GET /f35.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.208.66.100 - [08/Oct/2026:14:37:09 +0200] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.208.66.100 - [08/Oct/2026:14:37:08 +0200] "GET /about.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.208.66.100 - [08/Oct/2026:14:37:08 +0200] "GET /admin/controller/extension/ show less	Web App Attack Hacking
🇺🇸 34.23.24.178	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 20:02:16 Source IP: 34.23. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 20:02:16 Source IP: 34.23.24.178 Portion of the log(s): 34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /settings/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /api/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /admin/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /dashboard/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" 34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET show less	Web App Attack
🇮🇳 64.227.129.110	09 Oct 2026	WordPress (CMS) attack attempts. Date: 2026 Oct 08. 19:53:33 Source IP: 64.227.129.110 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Oct 08. 19:53:33 Source IP: 64.227.129.110 Portion of the log(s): 64.227.129.110 - [08/Oct/2026:19:53:33 +0200] "GET /wp-content/plugins/where-i-was-where-i-will-be/wiwwiwb.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 64.227.129.110 - [08/Oct/2026:19:53:33 +0200] "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 64.227.129.110 - [08/Oct/2026:19:53:33 +0200] "GET /wp-content/plugins/brandfolder/callback.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 64.227.129.110 - [08/Oct/2026:19:53:33 +0200] "GET /wp-content/plugins/mypixs/mypixs/downloadpage.php?url=mypixs.js HTTP/1.1" 404 555 "-" show less	Web App Attack Hacking
🇭🇰 20.255.72.163	09 Oct 2026	WordPress (CMS) attack attempts. Date: 2026 Oct 08. 19:40:00 Source IP: 20.255.72.163 Portion o ... show more WordPress (CMS) attack attempts. Date: 2026 Oct 08. 19:40:00 Source IP: 20.255.72.163 Portion of the log(s): 20.255.72.163 - [08/Oct/2026:19:40:00 +0200] "GET /dairg.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:40:00 +0200] "GET /mac.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:40:00 +0200] "GET /wmore1.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:40:00 +0200] "GET /CAE-2.5.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:39:59 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:39:59 +0200] "GET /wp_blog_footer.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:39:59 +0200] "GET /765.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:39:59 +0200] "GET /b8.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:39:59 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 153 "-" "-" 20.255.72.163 - [08/Oct/2026:19:39:58 +0200] "GET /z60.php?p= HTTP/1.1" 404 153 "-" "-" show less	Web App Attack Hacking
🇦🇺 4.196.166.155	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 19:11:39 Source IP: 4.196. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 19:11:39 Source IP: 4.196.166.155 Portion of the log(s): 4.196.166.155 - [08/Oct/2026:19:11:39 +0200] "GET /gali.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:39 +0200] "GET /x2.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:38 +0200] "GET /sd.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:38 +0200] "GET /zv.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:38 +0200] "GET /Components.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:37 +0200] "GET /wordfence-waf.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:37 +0200] "GET /dh9u7.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:37 +0200] "GET /gulu.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:36 +0200] "GET /zoo2.php HTTP/1.1" 404 153 "-" "-" 4.196.166.155 - [08/Oct/2026:19:11:36 +0200] "GET /bro.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇺🇸 34.148.115.114	09 Oct 2026	Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 18:58:26 Source IP: 34.148 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Oct 08. 18:58:26 Source IP: 34.148.115.114 Portion of the log(s): 34.148.115.114 - [08/Oct/2026:18:58:26 +0200] "GET /portal HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.148.115.114 - [08/Oct/2026:18:58:26 +0200] "GET /admin/login HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.148.115.114 - [08/Oct/2026:18:58:26 +0200] "GET /admin HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.148.115.114 - [08/Oct/2026:18:58:26 +0200] "GET /register HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.148.115.114 - [08/Oct/2026:18:58:26 +0200] "GET /forgot-password HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/53 show less	Web App Attack