AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User arcy joined AbuseIPDB in August 2026 and has reported 2,810 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇩🇪 34.32.99.11	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 10 matching log events between 2026-10-20T07:42:45Z and 13:23:01Z (UTC). Sample requests: GET /.git/config -> 200; GET /.env -> 200; GET /.env.local -> 200; GET /.env.staging -> 200; GET /.env.development -> 200 show less	Hacking Web App Attack
🇿🇦 34.35.24.164	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events between 2026-10-20T16:16:52Z and 16:16:53Z (UTC). Sample requests: GET /.git/config -> 200; GET /.env -> 200; GET /.env.local -> 200; GET /.env.staging -> 200; GET /.env.development -> 200 show less	Hacking Web App Attack
🇿🇦 34.35.133.208	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events between 2026-10-21T02:28:33Z and 02:28:34Z (UTC). Sample requests: GET /.git/config -> 401; GET /.env -> 401; GET /.env.local -> 401; GET /.env.staging -> 401; GET /.env.development -> 401 show less	Hacking Web App Attack
🇦🇺 34.40.238.16	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events between 2026-10-21T03:16:29Z and 03:16:32Z (UTC). Sample requests: GET /.git/config -> 200; GET /.env -> 200; GET /.env.local -> 200; GET /.env.staging -> 200; GET /.env.development -> 200 show less	Hacking Web App Attack
🇺🇸 34.55.157.21	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 11 matching log events between 2026-10-20T14:05:47Z and 14:05:48Z (UTC). Sample requests: GET //wp-includes/ID3/license.txt -> 404; GET //feed/ -> 404; GET //xmlrpc.php?rsd -> 404; GET //blog/wp-includes/wlwmanifest.xml -> 404; GET //web/wp-includes/wlwmanifest.xml -> 404; GET //wordpress/wp-includes/wlwmanifest.xml -> 404; GET //wp/wp-includes/wlwmanifest.xml -> 404; GET //2020/wp-includes/wlwmanifest.xml -> 404; GET //2019/wp-includes/wlwmanifest.xml -> 404; GET //2021/wp-includes/wlwmanifest.xml -> 404; GET //shop/wp-includes/wlwmanifest.xml -> 404 show less	Port Scan Web App Attack
🇰🇷 34.158.219.240	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 10 matching log events between 2026-10-20T11:50:56Z and 18:31:11Z (UTC). Sample requests: GET /.git/config -> 200; GET /.env -> 200; GET /.env.local -> 200; GET /.env.staging -> 200; GET /.env.development -> 200 show less	Hacking Web App Attack
🇧🇪 35.205.116.134	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files, http-technology-probing. 16 matching log events at 2026-10-20T13:09:24Z (UTC). Sample requests: GET /.env.example -> 404; GET /phpinfo.php -> 404; GET /sendgrid.env -> 404; GET /info.php -> 404; GET /.env.local -> 404; GET /.env.save -> 404; GET /.env.production -> 404; GET /env.txt -> 404; GET /docker-compose.yml -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.git/config -> 301; GET /.env -> 301; GET /core/.env -> 301; GET /app/.env -> 301; GET /.aws/credentials -> 301 show less	Port Scan Hacking Web App Attack
🇺🇸 40.124.171.204	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-10-20T12:30:39Z (UTC). Sample requests: GET /developmentserver/metadatauploader -> 404 show less	Hacking Web App Attack
🇵🇱 45.138.12.68	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-10-20T12:30:09Z (UTC). Sample requests: GET /.env.aws -> 200; GET /.aws/config -> 200; GET /.aws/credentials -> 200; GET /azure/secrets.env -> 200; GET /aws/credentials.env -> 200 show less	Hacking Web App Attack
🇨🇦 45.198.224.238	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-10-20T08:49:15Z (UTC). Sample requests: CONNECT 1.1.1.1:443 -> 400 show less	Port Scan
🇩🇪 64.89.160.73	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 11 matching log events between 2026-10-20T16:22:27Z and 16:22:30Z (UTC). Sample requests: GET /.env -> 404; GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.prod -> 404; GET /.env.staging -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env.old -> 404; GET /.env.save -> 404; GET /.env.example -> 404; GET /.env.dist -> 404 show less	Port Scan Hacking Web App Attack
🇺🇸 135.119.93.249	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-wordpress-scan. 13 matching log events between 2026-10-20T07:50:47Z and 07:50:53Z (UTC). Sample requests: GET /wp-content/plugins/hellopress/wp_filemanager.php -> 404; GET /wp-logis.php -> 404; GET /wp-ainefgskk.php -> 404; GET /wp-filemanager1.php -> 404; GET /this_is_a_new_hello_world.php -> 404; GET /3PJcpMFsD8B.php -> 404; GET /radio.php -> 404; GET /BDKR28WP.php -> 404; GET /ebkid.php -> 404; GET /133.php -> 404; GET /txets.php -> 404; GET /gulu.php -> 404; GET /ano.php -> 404 show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 136.112.6.216	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 11 matching log events between 2026-10-20T06:10:48Z and 06:10:50Z (UTC). Sample requests: GET //wp-includes/wlwmanifest.xml -> 404; GET //xmlrpc.php?rsd -> 404; GET //blog/wp-includes/wlwmanifest.xml -> 404; GET //web/wp-includes/wlwmanifest.xml -> 404; GET //wordpress/wp-includes/wlwmanifest.xml -> 404; GET //website/wp-includes/wlwmanifest.xml -> 404; GET //wp/wp-includes/wlwmanifest.xml -> 404; GET //news/wp-includes/wlwmanifest.xml -> 404; GET //2020/wp-includes/wlwmanifest.xml -> 404; GET //2019/wp-includes/wlwmanifest.xml -> 404; GET //shop/wp-includes/wlwmanifest.xml -> 404 show less	Port Scan Web App Attack
🇮🇳 137.23.38.53	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files, http-technology-probing. 12 matching log events between 2026-10-20T18:03:36Z and 18:04:18Z (UTC). Sample requests: GET /info.php -> 404; GET /.env -> 404; GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.production.local -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env.old -> 404; GET /.env.save -> 404; GET /.env.dev -> 404; GET /.env.staging -> 404; GET /.env.test -> 404 show less	Port Scan Hacking Web App Attack
🇺🇸 137.184.74.122	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-10-20T09:51:08Z (UTC). Sample requests: GET /wp-json/batch/v1 -> 404 show less	Hacking Web App Attack
🇸🇬 168.144.45.132	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-10-20T14:14:12Z (UTC). Sample requests: POST /wp-json/batch/v1 -> 404 show less	Hacking Web App Attack
🇸🇪 185.213.154.247	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-10-20T22:14:21Z (UTC). Sample requests: CONNECT example.com:443 -> 400 show less	Port Scan
🇺🇸 216.180.246.194	21 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 12 matching log events between 2026-10-20T13:51:40Z and 13:51:54Z (UTC). Sample requests: GET /manage/account/login -> 400; GET /admin/index.html -> 400; GET /index.html -> 400; GET /+CSCOE+/logon.html -> 400; GET /cgi-bin/login.cgi -> 400; GET /login.htm -> 400; GET /login.html -> 400; GET /login.jsp -> 400; GET /login -> 400; GET /doc/index.html -> 400; GET /remote/login -> 400 show less	Port Scan Web App Attack
🇮🇳 20.193.228.145	20 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-admin-interface-probing, http-probing. 11 matching log events between 2026-10-20T01:00:08Z and 01:00:09Z (UTC). Sample requests: GET /phpMyAdmin/index.php?lang=en -> 404; GET /administrator/db/index.php?lang=en -> 404; GET /administrator/web/index.php?lang=en -> 404; GET /phpMyAdmin-4.9.7/index.php?lang=en -> 404; GET /db/websql/index.php?lang=en -> 404; GET /phpMyAdmin-4/index.php?lang=en -> 404; GET /sql/myadmin/index.php?lang=en -> 404; GET /index.php?lang=en -> 404; GET /dbadmin/index.php?lang=en -> 404; GET /phpmyadmin2021/index.php?lang=en -> 404; GET /db/myadmin/index.php?lang=en -> 404 show less	Port Scan Hacking Web App Attack
🇦🇺 20.211.97.120	20 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-wordpress-scan. 13 matching log events between 2026-10-19T23:20:09Z and 23:20:16Z (UTC). Sample requests: GET /wp-content/plugins/hellopress/wp_filemanager.php -> 404; GET /wp-admin/css/colors/midnight/filemanager_nopw.php -> 404; GET /wp-security.php -> 404; GET /wp-login.php -> 404; GET /this_is_a_new_hello_world.php -> 404; GET /0.php -> 404; GET /init-notica.php -> 404; GET /mp4.php -> 404; GET /myglu.php -> 404; GET /3PJcpMFsD8B.php -> 404; GET /sm.php -> 404; GET /1ac.php -> 404; GET /dpack.php -> 404 show less	Port Scan Bad Web Bot Web App Attack
🇧🇪 34.38.113.44	20 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files, http-technology-probing. 17 matching log events at 2026-10-19T09:36:32Z (UTC). Sample requests: GET /info.php -> 404; GET /.env.aws -> 404; GET /.env.anthropic -> 404; GET /.aws/credentials.bak -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env.dev -> 404; GET /.env.development -> 404; GET /.env.dist -> 404; GET /.env.docker -> 404; GET /.env.example -> 404; GET /.env.live -> 404; GET /.aws/config -> 301; GET /.aws/.env -> 301; GET /.aws/credentials -> 301; GET /.docker/laravel/app/.env -> 301; GET /.docker/.env -> 301 show less	Port Scan Hacking Web App Attack
🇦🇺 34.40.186.113	20 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events between 2026-10-19T07:00:02Z and 07:00:04Z (UTC). Sample requests: GET /.git/config -> 401; GET /.env -> 401; GET /.env.local -> 401; GET /.env.staging -> 401; GET /.env.development -> 401 show less	Hacking Web App Attack
🇧🇪 34.52.229.253	20 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files, http-technology-probing. 13 matching log events at 2026-10-19T20:03:38Z (UTC). Sample requests: GET /info.php -> 404; GET /.env -> 404; GET /.env.example -> 404; GET /.git/config -> 404; GET /.git/logs/HEAD -> 404; GET /config.json -> 404; GET /sendgrid.env -> 404; GET /.aws/credentials -> 404; GET /auth.json -> 404; GET /.claude/settings.local.json -> 404; GET /phpinfo.php -> 404; GET /backend/.env -> 200; GET /app/.env -> 200 show less	Port Scan Hacking Web App Attack
🇧🇪 34.53.212.113	20 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-10-19T15:18:05Z (UTC). Sample requests: GET /.env -> 200; GET /.env.aws -> 200; GET /.docker/.env -> 200; GET /.aws/credentials -> 200; GET /.aws/credentials.bak -> 200 show less	Hacking Web App Attack
🇧🇪 35.240.58.49	20 Oct 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files, http-technology-probing. 16 matching log events at 2026-10-19T22:39:44Z (UTC). Sample requests: GET /.env.example -> 404; GET /sendgrid.env -> 404; GET /phpinfo.php -> 404; GET /info.php -> 404; GET /.env.local -> 404; GET /.env.save -> 404; GET /.env.production -> 404; GET /env.txt -> 404; GET /docker-compose.yml -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env -> 301; GET /.git/config -> 301; GET /.aws/credentials -> 301; GET /api/.env -> 301; GET /app/.env -> 301 show less	Port Scan Hacking Web App Attack