Subject: Abuse report - automated scanning / resource abuse from 162.243.173.22
Address : 162 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 162.243.173.22
Address : 162.243.173.22
Allocation : unknown
First seen : 2026-09-22 18:24:43 UTC
Last seen : 2026-09-24 02:31:17 UTC
Total requests: 18 across 3 day(s)
Requests per day (UTC):
2026-09-22 8
2026-09-23 8
2026-09-24 2
Routes targeted:
/.env 18
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 93.152.209.7
Address : 93.15 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 93.152.209.7
Address : 93.152.209.7
Allocation : unknown
First seen : 2026-09-22 23:07:02 UTC
Last seen : 2026-09-23 04:12:37 UTC
Total requests: 12 across 2 day(s)
Requests per day (UTC):
2026-09-22 8
2026-09-23 4
Routes targeted:
/.env 12
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 45.138.12.6
Address : 45.138 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.138.12.6
Address : 45.138.12.6
Allocation : unknown
First seen : 2026-09-21 21:18:15 UTC
Last seen : 2026-09-22 01:12:45 UTC
Total requests: 8 across 2 day(s)
Requests per day (UTC):
2026-09-21 4
2026-09-22 4
Routes targeted:
/.git/config 8
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 91.92.47.186
Address : 91.92 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 91.92.47.186
Address : 91.92.47.186
Allocation : unknown
First seen : 2026-09-17 10:23:14 UTC
Last seen : 2026-09-18 02:35:40 UTC
Total requests: 26 across 2 day(s)
Requests per day (UTC):
2026-09-17 8
2026-09-18 18
Routes targeted:
/wp-content/plugins/give/readme.txt 10
/wp-content/plugins/translatepress-multiling 8
/wp-content/plugins/forminator/readme.txt 2
/wp-content/plugins/the-events-calendar/read 2
/wp-content/plugins/blocksy-companion-pro/re 2
/wp-content/plugins/jetformbuilder/readme.tx 2
Classification: wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in re
show less
Subject: Abuse report - automated scanning / resource abuse from 172.19.0.8
Address : 172.19. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 172.19.0.8
Address : 172.19.0.8
Allocation : unknown
First seen : 2026-09-21 19:58:45 UTC
Last seen : 2026-09-22 04:38:18 UTC
Total requests: 9 across 2 day(s)
Requests per day (UTC):
2026-09-21 3
2026-09-22 6
Routes targeted:
/api/.env 6
/api/config 3
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 45.148.10.120
Address : 45.1 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.148.10.120
Address : 45.148.10.120
Allocation : unknown
First seen : 2026-09-19 06:20:37 UTC
Last seen : 2026-09-22 04:40:14 UTC
Total requests: 24 across 3 day(s)
Requests per day (UTC):
2026-09-19 2
2026-09-20 2
2026-09-22 20
Routes targeted:
/.git/config 14
/.aws/credentials 2
/aws.env 2
/.env 2
/.env.production 2
/wp-json/batch/v1 2
Classification: env_secrets, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, prob
show less
Subject: Abuse report - automated scanning / resource abuse from 193.32.162.135
Address : 193 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 193.32.162.135
Address : 193.32.162.135
Allocation : unknown
First seen : 2026-09-17 12:07:51 UTC
Last seen : 2026-09-20 11:33:54 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-09-17 2
2026-09-20 2
Routes targeted:
/wp-login.php 4
Classification: php_probe, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 45.148.10.8
Address : 45.148 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.148.10.8
Address : 45.148.10.8
Allocation : unknown
First seen : 2026-09-19 07:18:49 UTC
Last seen : 2026-09-20 23:56:35 UTC
Total requests: 8 across 2 day(s)
Requests per day (UTC):
2026-09-19 4
2026-09-20 4
Routes targeted:
/_ignition/execute-solution 4
/.git/config 4
Classification: debug_panel, env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 45.148.10.120
Address : 45.1 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 45.148.10.120
Address : 45.148.10.120
Allocation : unknown
First seen : 2026-09-19 06:20:37 UTC
Last seen : 2026-09-21 03:45:09 UTC
Total requests: 6 across 3 day(s)
Requests per day (UTC):
2026-09-19 2
2026-09-20 2
2026-09-21 2
Routes targeted:
/.git/config 4
/wp-json/batch/v1 2
Classification: env_secrets, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 157.245.237.113
Address : 15 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 157.245.237.113
Address : 157.245.237.113
Allocation : unknown
First seen : 2026-09-15 20:18:16 UTC
Last seen : 2026-09-16 22:20:18 UTC
Total requests: 41 across 2 day(s)
Requests per day (UTC):
2026-09-15 5
2026-09-16 36
Routes targeted:
/wp-json/batch/v1 41
Classification: wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 172.19.0.8
Address : 172.19. ...
show moreSubject: Abuse report - automated scanning / resource abuse from 172.19.0.8
Address : 172.19.0.8
Allocation : unknown
First seen : 2026-09-20 19:58:51 UTC
Last seen : 2026-09-21 02:06:07 UTC
Total requests: 20 across 2 day(s)
Requests per day (UTC):
2026-09-20 12
2026-09-21 8
Routes targeted:
/api/.env 6
/api/graphql 2
/api/gql 2
/api/v3/.env 2
/api/v2/.env 2
/api/v1/.env 2
/api/staging/.env 2
/api/dev/.env 2
Classification: api_docs, env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request l
show less
Subject: Abuse report - automated scanning / resource abuse from 91.92.47.186
Address : 91.92 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 91.92.47.186
Address : 91.92.47.186
Allocation : unknown
First seen : 2026-09-16 14:29:09 UTC
Last seen : 2026-09-18 02:35:40 UTC
Total requests: 34 across 3 day(s)
Requests per day (UTC):
2026-09-16 8
2026-09-17 8
2026-09-18 18
Routes targeted:
/wp-content/plugins/jetformbuilder/readme.tx 10
/wp-content/plugins/give/readme.txt 10
/wp-content/plugins/translatepress-multiling 8
/wp-content/plugins/forminator/readme.txt 2
/wp-content/plugins/the-events-calendar/read 2
/wp-content/plugins/blocksy-companion-pro/re 2
Classification: wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacte
show less
Subject: Abuse report - automated scanning / resource abuse from 94.154.43.129
Address : 94.1 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 94.154.43.129
Address : 94.154.43.129
Allocation : unknown
First seen : 2026-09-15 04:55:38 UTC
Last seen : 2026-09-19 18:03:46 UTC
Total requests: 4 across 2 day(s)
Requests per day (UTC):
2026-09-15 2
2026-09-19 2
Routes targeted:
/.env 4
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 94.154.43.129
Address : 94.1 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 94.154.43.129
Address : 94.154.43.129
Allocation : unknown
First seen : 2026-09-15 04:55:38 UTC
Last seen : 2026-09-19 18:56:16 UTC
Total requests: 5 across 2 day(s)
Requests per day (UTC):
2026-09-15 2
2026-09-19 3
Routes targeted:
/.env 5
Classification: env_secrets
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 104.23.217.155
Address : 104 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 104.23.217.155
Address : 104.23.217.155
Allocation : unknown
First seen : 2026-09-19 19:31:31 UTC
Last seen : 2026-09-20 03:06:33 UTC
Total requests: 5 across 2 day(s)
Requests per day (UTC):
2026-09-19 3
2026-09-20 2
Routes targeted:
/wp-admin/install.php?step=1 5
Classification: php_probe, wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 157.245.237.113
Address : 15 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 157.245.237.113
Address : 157.245.237.113
Allocation : unknown
First seen : 2026-09-15 12:06:44 UTC
Last seen : 2026-09-16 22:20:18 UTC
Total requests: 56 across 2 day(s)
Requests per day (UTC):
2026-09-15 20
2026-09-16 36
Routes targeted:
/wp-json/batch/v1 56
Classification: wordpress
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less
Subject: Abuse report - automated scanning / resource abuse from 202.61.233.150
Address : 202 ...
show moreSubject: Abuse report - automated scanning / resource abuse from 202.61.233.150
Address : 202.61.233.150
Allocation : unknown
First seen : 2026-09-13 14:20:47 UTC
Last seen : 2026-09-14 15:30:58 UTC
Total requests: 24 across 2 day(s)
Requests per day (UTC):
2026-09-13 16
2026-09-14 8
Routes targeted:
/api/session/properties 24
Classification: automated scanning
MITRE ATT&CK : T1595.003 (Active Scanning: Wordlist Scanning), T1595.001 (Scanning IP Blocks)
The traffic above was refused by our systems and caused no compromise. We are reporting
it so you can act under your acceptable-use policy. Full request lines with status codes
are available on request. We have not scanned, probed or contacted this host in return.
Operator: Cybergod LLC / S4Biz Group
Contact : [email protected]show less