AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User arcy joined AbuseIPDB in August 2026 and has reported 1,022 IP addresses.

Standing (weight) is Unknown.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇳🇱 91.148.245.81	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-09-08T15:50:52Z (UTC). Sample requests: GET /dump.sql -> 303; GET /backup.sql -> 303; GET /zzcanary-67c0958c76911eb3.sql -> 303; GET /database.sql -> 303; GET /database_backup.sql -> 303 show less	Hacking Web App Attack
🇺🇸 138.68.55.19	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-09-08T12:54:24Z (UTC). Sample requests: GET /wp-json/batch/v1/ -> 404 show less	Hacking Web App Attack
🇺🇸 45.131.193.138	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: CVE-2023-49103, http-admin-interface-probing, http-probing, http-technology-probing. 16 matching log events between 2026-09-08T10:18:14Z and 10:18:23Z (UTC). Sample requests: HEAD /phpinfo.php -> 404; HEAD /info.php -> 404; HEAD /owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php -> 404; GET /?phpinfo=1 -> 404; GET /tool/view/phpinfo.view.php -> 404; GET /phpinfo -> 404; GET /symfony/public/_profiler/phpinfo -> 404; GET /html/phpinfo.php -> 404; GET /?phpinfo=-1 -> 404; GET /__info.php -> 404; GET /_info-backoffice.php -> 404 show less	Port Scan Hacking Web App Attack
🇺🇸 45.131.193.117	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-09-08T10:16:13Z (UTC). Sample requests: GET /docker/.env -> 404; GET /fedex/.env -> 404; GET /__tests__/test-become/.env -> 404; GET /local/.env -> 404; GET /rest/.env -> 404 show less	Hacking Web App Attack
🇺🇸 45.131.193.123	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-09-08T10:15:25Z (UTC). Sample requests: POST /wp-json/batch/v1 -> 404 show less	Hacking Web App Attack
🇺🇸 87.58.197.196	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files, http-technology-probing. 17 matching log events between 2026-09-08T09:32:55Z and 09:32:56Z (UTC). Sample requests: GET /info.php -> 404; GET /kmonbaseqt30d2cd26 -> 404; GET /kmonbasezd9a52f297 -> 404; GET /dump.sql -> 404; GET /.ssh/id_rsa -> 404; GET /secrets.json -> 404; GET /.env.development -> 404; GET /.env.local -> 404; GET /secrets.py -> 404; GET /Jenkinsfile -> 404; GET /.env -> 404; GET /docker-compose.yml -> 404 show less	Port Scan Hacking Web App Attack
🇵🇱 34.116.148.180	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 16 matching log events at 2026-09-08T07:34:22Z (UTC). Sample requests: GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.staging -> 404; GET /.env.development -> 404; GET /.env.test -> 404; GET /.env.remote -> 404; GET /.env.bak -> 404; GET /.env.backup -> 404; GET /.env.save -> 404; GET /.env.old -> 404; GET /.env.sample -> 404; GET /.git/config -> 301; GET /.env -> 301 show less	Port Scan Hacking Web App Attack
🇬🇧 64.227.32.66	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: jira_cve-2021-26086. 1 matching log event at 2026-09-08T06:41:49Z (UTC). Sample requests: GET /s/138313e2934323e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -> 200 show less	Hacking Web App Attack
🇱🇺 64.89.160.73	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 16 matching log events between 2026-09-08T04:50:29Z and 04:50:30Z (UTC). Sample requests: GET /.env -> 404; GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.prod -> 404; GET /.env.staging -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env.old -> 404; GET /.env.save -> 404; GET /.env.example -> 404; GET /.env.dist -> 404 show less	Port Scan Hacking Web App Attack
🇺🇸 138.2.225.106	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-09-08T03:49:17Z (UTC). Sample requests: CONNECT ip.ifconfig.dpdns.org:443 -> 400 show less	Open Proxy Web App Attack
🇯🇵 34.97.205.213	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 16 matching log events between 2026-09-08T10:01:32Z and 10:01:34Z (UTC). Sample requests: GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.staging -> 404; GET /.env.development -> 404; GET /.env.test -> 404; GET /.env.remote -> 404; GET /.env.bak -> 404; GET /.env.backup -> 404; GET /.env.save -> 404; GET /.env.old -> 404; GET /.env.sample -> 404; GET /.git/config -> 301; GET /.env -> 301 show less	Port Scan Hacking Web App Attack
🇳🇱 64.227.70.2	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: jira_cve-2021-26086. 1 matching log event at 2026-09-08T07:41:50Z (UTC). Sample requests: GET /s/138313e2934323e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -> 401 show less	Hacking Web App Attack
🇬🇧 206.189.19.19	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: jira_cve-2021-26086. 1 matching log event at 2026-09-08T06:41:49Z (UTC). Sample requests: GET /s/138313e2934323e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -> 301 show less	Hacking Web App Attack
🇩🇪 157.230.19.140	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: jira_cve-2021-26086. 1 matching log event at 2026-09-08T05:41:46Z (UTC). Sample requests: GET /s/138313e2934323e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -> 404 show less	Hacking Web App Attack
🇺🇸 136.66.234.219	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 11 matching log events at 2026-09-08T04:11:05Z (UTC). Sample requests: GET //wp-includes/wlwmanifest.xml -> 404; GET //xmlrpc.php?rsd -> 404; GET //blog/wp-includes/wlwmanifest.xml -> 404; GET //web/wp-includes/wlwmanifest.xml -> 404; GET //wordpress/wp-includes/wlwmanifest.xml -> 404; GET //website/wp-includes/wlwmanifest.xml -> 404; GET //wp/wp-includes/wlwmanifest.xml -> 404; GET //news/wp-includes/wlwmanifest.xml -> 404; GET //2020/wp-includes/wlwmanifest.xml -> 404; GET //2019/wp-includes/wlwmanifest.xml -> 404; GET //shop/wp-includes/wlwmanifest.xml -> 404 show less	Port Scan Web App Attack
🇺🇸 216.180.246.80	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-admin-interface-probing, http-probing, http-technology-probing. 19 matching log events between 2026-09-08T05:11:03Z and 05:11:05Z (UTC). Sample requests: GET /admin/index.html -> 404; GET /index.html -> 404; GET /+CSCOE+/logon.html -> 404; GET /cgi-bin/login.cgi -> 404; GET /login.htm -> 404; GET /login.html -> 404; GET /login.jsp -> 404; GET /login -> 404; GET /doc/index.html -> 404; GET /remote/login -> 404; GET /admin/login.asp -> 404 show less	Port Scan Hacking Web App Attack
🇺🇸 8.231.155.203	09 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 11 matching log events at 2026-09-08T04:06:36Z (UTC). Sample requests: GET //wp-includes/wlwmanifest.xml -> 404; GET //xmlrpc.php?rsd -> 404; GET //blog/wp-includes/wlwmanifest.xml -> 404; GET //web/wp-includes/wlwmanifest.xml -> 404; GET //wordpress/wp-includes/wlwmanifest.xml -> 404; GET //website/wp-includes/wlwmanifest.xml -> 404; GET //wp/wp-includes/wlwmanifest.xml -> 404; GET //news/wp-includes/wlwmanifest.xml -> 404; GET //2020/wp-includes/wlwmanifest.xml -> 404; GET //2019/wp-includes/wlwmanifest.xml -> 404; GET //shop/wp-includes/wlwmanifest.xml -> 404 show less	Port Scan Web App Attack
🇺🇸 4.148.1.172	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-technology-probing. 1 matching log event at 2026-09-07T19:08:11Z (UTC). Sample requests: GET /actuator/health -> 404 show less	Port Scan Web App Attack
🇺🇸 4.150.186.72	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-technology-probing. 1 matching log event at 2026-09-07T22:39:20Z (UTC). Sample requests: GET /druid/index.html -> 404 show less	Port Scan Web App Attack
🇨🇦 20.151.10.161	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 22 matching log events between 2026-09-07T15:08:30Z and 15:28:38Z (UTC). Sample requests: GET /cae2.2.php -> 404; GET /b8.php -> 404; GET /wp-content/uploads/ -> 404; GET /wp_blog_footer.php -> 404; GET /billzgs.php -> 404; GET /CAE-2.5.php -> 404; GET /0.php -> 404; GET /v4on3fxtoo5z5cq0yCdefault.php -> 404; GET /fms.php -> 404; GET /0day.php -> 404; GET /cycfruf.php -> 404; GET /wp-content/plugins/hellopress/wp_filemanager.php -> 404; GET /this_is_a_new_hello_world.php -> 404; GET /wp-filemannger.php -> 404; GET /nexus.php -> 404; GET /felnggg.php -> 404; GET /cae.php -> 404; GET /xxmsnzra.php -> 404; GET /01yellw.php -> 404; GET /baru.php?p= -> 404; GET /dronishness.php?p= -> 404; GET /ba.php?p= -> 404 show less	Port Scan Web App Attack
🇺🇸 34.21.37.17	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-path-traversal-probing, http-probing. 15 matching log events at 2026-09-07T12:22:15Z (UTC). Sample requests: GET /@fs/.env.local?raw?? -> 404; GET /@fs/app/rootkey.csv?raw?? -> 404; GET /@fs/.env.production?raw?? -> 404; GET /@fs/.env.development?raw?? -> 404; GET /@fs/.env/?raw& -> 404; GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env/?raw& -> 404; GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env/?raw& -> 404; GET /@fs/app/.env/?raw& -> 404; GET /@fs/root/rootkey.csv?raw?? -> 404; GET /@fs/proc/self/environ/?raw& -> 404; GET /@fs/root/.env/?raw& -> 404; GET /@fs/proc/self/environ?raw?? -> 301; GET /@fs/etc/passwd?raw?? -> 301; GET /@fs/../.env?raw?? -> 301 show less	Port Scan Hacking Web App Attack
🇺🇸 34.71.184.201	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-path-traversal-probing, http-probing. 15 matching log events at 2026-09-07T03:50:54Z (UTC). Sample requests: GET /@fs/.env.production?raw?? -> 404; GET /@fs/root/rootkey.csv?raw?? -> 404; GET /@fs/app/rootkey.csv?raw?? -> 404; GET /@fs/.env.development?raw?? -> 404; GET /@fs/.env.local?raw?? -> 404; GET /@fs/root/.env/?raw& -> 404; GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env/?raw& -> 404; GET /@fs/etc/passwd/?raw& -> 404; GET /@fs/.env/?raw& -> 404; GET /@fs/proc/self/environ/?raw& -> 404; GET - -> 400; GET /@fs/etc/passwd?raw?? -> 301; GET /@fs/proc/self/environ?raw?? -> 301; GET /@fs/../.env?raw?? -> 301 show less	Port Scan Hacking Web App Attack
🇺🇸 34.94.23.213	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 16 matching log events at 2026-09-07T12:40:27Z (UTC). Sample requests: GET /.env.backup -> 404; GET /env -> 404; GET /.env.save -> 404; GET /.env.production -> 404; GET /wp-config.php.swp -> 404; GET /storage/logs/laravel.log -> 404; GET /.env.bak -> 404; GET /wp-config.php~ -> 404; GET /.env.local -> 404; GET /wp-config.php.bak -> 404; GET /.env -> 404 show less	Port Scan Hacking Web App Attack
🇯🇵 34.146.174.75	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-path-traversal-probing. 6 matching log events at 2026-09-08T00:34:17Z (UTC). Sample requests: GET /@fs/../.env?raw?? -> 200; GET /@fs/proc/self/cmdline?raw?? -> 200; GET /@fs/proc/self/cwd/.env?raw?? -> 200; GET /@fs/proc/self/cwd/.aws/credentials?raw?? -> 200 show less	Hacking Web App Attack
🇺🇸 35.202.157.120	08 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-path-traversal-probing. 7 matching log events at 2026-09-07T09:04:30Z (UTC). Sample requests: GET /@fs/proc/self/cmdline?raw?? -> 401; GET /@fs/proc/self/cwd/.env?raw?? -> 401; GET /@fs/proc/self/environ?import&raw?? -> 401; GET /@fs/proc/self/cwd/.aws/credentials?raw?? -> 401 show less	Hacking Web App Attack