Subject: Abuse report - automated scanning / resource abuse from 178.134.113.133
Address : 17 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 178.134.113.133
Address : 178.134.113.133
Allocation : unknown
First seen : 2026-10-29 16:47:19 UTC
Last seen : 2026-10-30 02:43:19 UTC
Total requests: 1194 across 2 day(s)
Requests per day (UTC):
2026-10-29 866
2026-10-30 328
Routes targeted:
/api/admin/fleet 1194
Classification: admin_panel
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 195.178.110.135
Address : 19 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 195.178.110.135
Address : 195.178.110.135
Allocation : unknown
First seen : 2026-10-28 19:42:26 UTC
Last seen : 2026-10-29 01:10:06 UTC
Total requests: 18 across 2 day(s)
Requests per day (UTC):
2026-10-28 13
2026-10-29 5
Routes targeted:
/wp-login.php 8
/admin/login 2
/blog/wp-login.php 2
/register/livewire/update 1
/admin/login/livewire/update 1
/login/livewire/update 1
/livewire/update 1
/readme.html 1
/feed/ 1
Classification: admin_panel, php_probe, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are repor
show less
Subject: Abuse report - automated scanning / resource abuse from 172.86.119.91
Address : 172. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 172.86.119.91
Address : 172.86.119.91
Allocation : unknown
First seen : 2026-10-27 18:42:44 UTC
Last seen : 2026-10-28 01:33:51 UTC
Total requests: 3 across 2 day(s)
Requests per day (UTC):
2026-10-27 2
2026-10-28 1
Routes targeted:
/.git/config 3
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 45.148.10.16
Address : 45.14 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.148.10.16
Address : 45.148.10.16
Allocation : unknown
First seen : 2026-10-25 17:13:57 UTC
Last seen : 2026-10-26 01:46:32 UTC
Total requests: 8 across 2 day(s)
Requests per day (UTC):
2026-10-25 2
2026-10-26 6
Routes targeted:
/api/v1/chatflows 2
/.env 2
/.env.local 2
/.env.production 1
/.aws/credentials 1
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contac
show less
Subject: Abuse report - automated scanning / resource abuse from 45.148.10.122
Address : 45.1 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.148.10.122
Address : 45.148.10.122
Allocation : unknown
First seen : 2026-10-25 17:04:10 UTC
Last seen : 2026-10-26 01:36:10 UTC
Total requests: 12 across 2 day(s)
Requests per day (UTC):
2026-10-25 4
2026-10-26 8
Routes targeted:
/api/v1/chatflows 4
/.env 2
/.env.local 2
/.env.production 1
/apps/richdocumentscode/proxy.php 1
/.git/config 1
/.aws/credentials 1
Classification: env_secrets, php_probe
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on req
show less
Subject: Abuse report - automated scanning / resource abuse from 182.103.244.38
Address : 182 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 182.103.244.38
Address : 182.103.244.38
Allocation : unknown
First seen : 2026-10-25 15:58:14 UTC
Last seen : 2026-10-26 02:35:16 UTC
Total requests: 10 across 2 day(s)
Requests per day (UTC):
2026-10-25 5
2026-10-26 5
Routes targeted:
/api/machines 2
/api/bots 2
/api/agents 2
/api/peers 1
/api/devices 1
/api/victims 1
/api/clients 1
Classification: automated scanning
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on reque
show less
Subject: Abuse report - automated scanning / resource abuse from 195.178.110.247
Address : 19 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 195.178.110.247
Address : 195.178.110.247
Allocation : unknown
First seen : 2026-10-22 15:32:24 UTC
Last seen : 2026-10-23 03:18:32 UTC
Total requests: 2 across 2 day(s)
Requests per day (UTC):
2026-10-22 1
2026-10-23 1
Routes targeted:
/.git/config 2
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 130.12.180.164
Address : 130 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 130.12.180.164
Address : 130.12.180.164
Allocation : unknown
First seen : 2026-10-17 15:57:33 UTC
Last seen : 2026-10-20 21:12:17 UTC
Total requests: 6 across 3 day(s)
Requests per day (UTC):
2026-10-17 2
2026-10-19 2
2026-10-20 2
Routes targeted:
/.env 6
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 169.40.142.202
Address : 169 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 169.40.142.202
Address : 169.40.142.202
Allocation : unknown
First seen : 2026-10-17 08:56:17 UTC
Last seen : 2026-10-21 00:41:59 UTC
Total requests: 6 across 2 day(s)
Requests per day (UTC):
2026-10-17 4
2026-10-21 2
Routes targeted:
/api/session/properties 6
Classification: automated scanning
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 193.32.162.175
Address : 193 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 193.32.162.175
Address : 193.32.162.175
Allocation : unknown
First seen : 2026-10-18 23:02:27 UTC
Last seen : 2026-10-20 17:03:26 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-10-18 2
2026-10-20 2
Routes targeted:
/.svn/wc.db 2
/.git/config 2
Classification: backup_file, env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 130.12.180.164
Address : 130 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 130.12.180.164
Address : 130.12.180.164
Allocation : unknown
First seen : 2026-10-17 15:57:33 UTC
Last seen : 2026-10-19 13:31:30 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-10-17 2
2026-10-19 2
Routes targeted:
/.env 4
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 130.12.180.166
Address : 130 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 130.12.180.166
Address : 130.12.180.166
Allocation : unknown
First seen : 2026-10-17 15:56:36 UTC
Last seen : 2026-10-19 13:31:06 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-10-17 2
2026-10-19 2
Routes targeted:
/.env 4
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 104.22.43.34
Address : 104.2 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 104.22.43.34
Address : 104.22.43.34
Allocation : unknown
First seen : 2026-10-19 21:48:27 UTC
Last seen : 2026-10-20 03:39:46 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-10-19 2
2026-10-20 2
Routes targeted:
/wp-admin/install.php?step=1 4
Classification: php_probe, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 45.153.34.39
Address : 45.15 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.153.34.39
Address : 45.153.34.39
Allocation : unknown
First seen : 2026-10-17 21:06:44 UTC
Last seen : 2026-10-18 03:38:06 UTC
Total requests: 16 across 2 day(s)
Requests per day (UTC):
2026-10-17 12
2026-10-18 4
Routes targeted:
/.env 16
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less