Subject: Abuse report - automated scanning / resource abuse from 93.123.109.101
Address : 93. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 93.123.109.101
Address : 93.123.109.101
Allocation : unknown
First seen : 2026-09-30 21:54:33 UTC
Last seen : 2026-10-01 04:38:35 UTC
Total requests: 16 across 2 day(s)
Requests per day (UTC):
2026-09-30 10
2026-10-01 6
Routes targeted:
/.env.ai 3
/.env.anthropic 3
/.env.aws.local 3
/.env.aws 3
/.git/HEAD 3
/.aws/config.json 1
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host
show less
Subject: Abuse report - automated scanning / resource abuse from 94.154.43.74
Address : 94.15 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 94.154.43.74
Address : 94.154.43.74
Allocation : unknown
First seen : 2026-09-28 10:09:16 UTC
Last seen : 2026-09-30 12:14:40 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-09-28 2
2026-09-30 2
Routes targeted:
/.env 4
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 31.56.58.165
Address : 31.56 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 31.56.58.165
Address : 31.56.58.165
Allocation : unknown
First seen : 2026-09-26 09:07:31 UTC
Last seen : 2026-09-29 19:18:26 UTC
Total requests: 6 across 2 day(s)
Requests per day (UTC):
2026-09-26 4
2026-09-29 2
Routes targeted:
/api/session/properties 6
Classification: automated scanning
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 31.56.58.172
Address : 31.56 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 31.56.58.172
Address : 31.56.58.172
Allocation : unknown
First seen : 2026-09-25 13:48:30 UTC
Last seen : 2026-09-29 18:08:39 UTC
Total requests: 6 across 2 day(s)
Requests per day (UTC):
2026-09-25 4
2026-09-29 2
Routes targeted:
/api/session/properties 6
Classification: automated scanning
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 94.154.43.74
Address : 94.15 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 94.154.43.74
Address : 94.154.43.74
Allocation : unknown
First seen : 2026-09-26 00:44:45 UTC
Last seen : 2026-09-28 10:09:16 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-09-26 2
2026-09-28 2
Routes targeted:
/.env 4
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 159.65.129.209
Address : 159 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 159.65.129.209
Address : 159.65.129.209
Allocation : unknown
First seen : 2026-09-25 20:20:02 UTC
Last seen : 2026-09-26 19:46:52 UTC
Total requests: 20 across 2 day(s)
Requests per day (UTC):
2026-09-25 10
2026-09-26 10
Routes targeted:
//wp/ 4
//wordpress/ 4
//blog/ 4
//blog/robots.txt 4
//xmlrpc.php 4
Classification: php_probe, template, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergo
show less
Subject: Abuse report - automated scanning / resource abuse from 195.178.110.247
Address : 19 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 195.178.110.247
Address : 195.178.110.247
Allocation : unknown
First seen : 2026-09-26 07:29:13 UTC
Last seen : 2026-09-29 23:16:36 UTC
Total requests: 42 across 2 day(s)
Requests per day (UTC):
2026-09-26 24
2026-09-29 18
Routes targeted:
/wp-sitemap-posts-page-1.xml 14
/wp-json/wp/v2/pages 10
/index.php 10
/wp-json/wp/v2/pages?per_page=100&_fields=id 4
/index.php?rest_route=/wp/v2/pages&per_page= 4
Classification: php_probe, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC
show less
Subject: Abuse report - automated scanning / resource abuse from 104.23.221.45
Address : 104. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 104.23.221.45
Address : 104.23.221.45
Allocation : unknown
First seen : 2026-09-26 23:28:08 UTC
Last seen : 2026-09-27 01:21:55 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-09-26 2
2026-09-27 2
Routes targeted:
/wp-admin/install.php?step=1 4
Classification: php_probe, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 45.138.12.16
Address : 45.13 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.138.12.16
Address : 45.138.12.16
Allocation : unknown
First seen : 2026-09-25 03:12:52 UTC
Last seen : 2026-09-26 20:21:46 UTC
Total requests: 10 across 2 day(s)
Requests per day (UTC):
2026-09-25 8
2026-09-26 2
Routes targeted:
/.svn/wc.db 5
/.git/config 5
Classification: backup_file, env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 104.23.223.98
Address : 104. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 104.23.223.98
Address : 104.23.223.98
Allocation : unknown
First seen : 2026-09-26 21:32:36 UTC
Last seen : 2026-09-27 05:14:17 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-09-26 2
2026-09-27 2
Routes targeted:
/wp-admin/install.php?step=1 4
Classification: php_probe, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 144.172.99.14
Address : 144. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 144.172.99.14
Address : 144.172.99.14
Allocation : unknown
First seen : 2026-09-24 19:50:47 UTC
Last seen : 2026-09-25 07:20:59 UTC
Total requests: 6 across 2 day(s)
Requests per day (UTC):
2026-09-24 4
2026-09-25 2
Routes targeted:
/.git/config 6
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 159.65.129.209
Address : 159 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 159.65.129.209
Address : 159.65.129.209
Allocation : unknown
First seen : 2026-09-25 20:20:02 UTC
Last seen : 2026-09-26 19:46:52 UTC
Total requests: 20 across 2 day(s)
Requests per day (UTC):
2026-09-25 10
2026-09-26 10
Routes targeted:
//wp/ 4
//wordpress/ 4
//blog/ 4
//blog/robots.txt 4
//xmlrpc.php 4
Classification: php_probe, template, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergo
show less
Subject: Abuse report - automated scanning / resource abuse from 144.172.99.14
Address : 144. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 144.172.99.14
Address : 144.172.99.14
Allocation : unknown
First seen : 2026-09-24 19:50:47 UTC
Last seen : 2026-09-25 07:20:59 UTC
Total requests: 6 across 2 day(s)
Requests per day (UTC):
2026-09-24 4
2026-09-25 2
Routes targeted:
/.git/config 6
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 31.56.58.172
Address : 31.56 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 31.56.58.172
Address : 31.56.58.172
Allocation : unknown
First seen : 2026-09-25 13:48:30 UTC
Last seen : 2026-09-26 02:24:43 UTC
Total requests: 8 across 2 day(s)
Requests per day (UTC):
2026-09-25 4
2026-09-26 4
Routes targeted:
/api/session/properties 8
Classification: automated scanning
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less