AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User gandaflux joined AbuseIPDB in September 2026 and has reported 162 IP addresses.

Standing (weight) is Unknown.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 138.197.17.142	8 hours ago	138.197.17.142 [redacted-domain] - [11/Sep/2026:22:09:50 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mo ... show more 138.197.17.142 [redacted-domain] - [11/Sep/2026:22:09:50 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 138.197.17.142 [redacted-domain] - [11/Sep/2026:22:09:50 +0200] "GET /.env HTTP/1.1" 403 2552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 138.197.17.142 [redacted-domain] - [11/Sep/2026:22:48:52 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Web App Attack
🇯🇵 34.97.0.100	8 hours ago	34.97.0.100 [redacted-domain] - [11/Sep/2026:22:26:20 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" ... show more 34.97.0.100 [redacted-domain] - [11/Sep/2026:22:26:20 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.0.100 [redacted-domain] - [11/Sep/2026:22:26:21 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.0.100 [redacted-domain] - [11/Sep/2026:22:26:22 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 192.227.170.202	9 hours ago	192.227.170.202 [redacted-domain] - [11/Sep/2026:22:20:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 ... show more 192.227.170.202 [redacted-domain] - [11/Sep/2026:22:20:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 192.227.170.202 [redacted-domain] - [11/Sep/2026:22:20:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 192.227.170.202 [redacted-domain] - [11/Sep/2026:22:20:47 +0200] "POST /blog/xmlrpc.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 192.227.170.202 [redacted-domain] - [11/Sep/2026:22:20:47 +0200] "GET /blog/xmlrpc.php HTTP/1.1" 404 158 "[redacted-url]/blog/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 192.227.170.202 [redacted-domain] - [11/Sep/2026:22:20:47 +0200] "POST /wp/x show less	Brute-Force Web App Attack
🇺🇸 35.235.174.108	9 hours ago	35.235.174.108 [redacted-domain] - [11/Sep/2026:22:19:26 +0200] "GET /.git/config HTTP/1.1" 403 158 ... show more 35.235.174.108 [redacted-domain] - [11/Sep/2026:22:19:26 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.235.174.108 [redacted-domain] - [11/Sep/2026:22:19:26 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.235.174.108 [redacted-domain] - [11/Sep/2026:22:19:26 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇳 106.219.146.56	9 hours ago	106.219.146.56 [redacted-domain] - [11/Sep/2026:21:34:10 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 ... show more 106.219.146.56 [redacted-domain] - [11/Sep/2026:21:34:10 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.0; WordPress/6.3; [redacted-url]" 106.219.146.56 [redacted-domain] - [11/Sep/2026:21:34:20 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 106.219.146.56 [redacted-domain] - [11/Sep/2026:21:34:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.0; WordPress/6.4; [redacted-url]" 106.219.146.56 [redacted-domain] - [11/Sep/2026:21:34:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 106.219.146.56 [redacted-domain] - [11/Sep/2026:21:34:51 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" show less	Brute-Force Web App Attack
🇳🇱 81.171.72.135	9 hours ago	81.171.72.135 [redacted-domain] - [11/Sep/2026:21:33:16 +0200] "GET /.ssh/id_rsa HTTP/1.1" 403 158 " ... show more 81.171.72.135 [redacted-domain] - [11/Sep/2026:21:33:16 +0200] "GET /.ssh/id_rsa HTTP/1.1" 403 158 "-" "Go-http-client/1.1" 81.171.72.135 [redacted-domain] - [11/Sep/2026:21:33:16 +0200] "GET /.env.production HTTP/1.1" 403 158 "-" "Go-http-client/1.1" 81.171.72.135 [redacted-domain] - [11/Sep/2026:21:33:16 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Go-http-client/1.1" show less	Web App Attack
🇳🇱 91.92.241.196	9 hours ago	91.92.241.196 [redacted-domain] - [11/Sep/2026:21:30:44 +0200] "GET /.git/HEAD HTTP/1.1" 403 158 "-" ... show more 91.92.241.196 [redacted-domain] - [11/Sep/2026:21:30:44 +0200] "GET /.git/HEAD HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.92.241.196 [redacted-domain] - [11/Sep/2026:21:30:44 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack
🇧🇷 34.39.137.65	10 hours ago	34.39.137.65 [redacted-domain] - [11/Sep/2026:21:15:27 +0200] "GET /.git/config HTTP/1.1" 403 158 "- ... show more 34.39.137.65 [redacted-domain] - [11/Sep/2026:21:15:27 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.39.137.65 [redacted-domain] - [11/Sep/2026:21:15:28 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.39.137.65 [redacted-domain] - [11/Sep/2026:21:15:28 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇦🇪 176.204.4.74	10 hours ago	176.204.4.74 [redacted-domain] - [11/Sep/2026:21:05:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "- ... show more 176.204.4.74 [redacted-domain] - [11/Sep/2026:21:05:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.5; WordPress/6.3; [redacted-url]" 176.204.4.74 [redacted-domain] - [11/Sep/2026:21:05:36 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 176.204.4.74 [redacted-domain] - [11/Sep/2026:21:05:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 176.204.4.74 [redacted-domain] - [11/Sep/2026:21:05:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.5; WordPress/6.3; [redacted-url]" 176.204.4.74 [redacted-domain] - [11/Sep/2026:21:06:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" show less	Brute-Force Web App Attack
🇧🇩 103.7.248.94	10 hours ago	103.7.248.94 [redacted-domain] - [11/Sep/2026:20:55:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "- ... show more 103.7.248.94 [redacted-domain] - [11/Sep/2026:20:55:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/13.0; WordPress/6.2; [redacted-url]" 103.7.248.94 [redacted-domain] - [11/Sep/2026:20:55:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 103.7.248.94 [redacted-domain] - [11/Sep/2026:20:55:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 103.7.248.94 [redacted-domain] - [11/Sep/2026:20:55:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/13.0; WordPress/6.2; [redacted-url]" 103.7.248.94 [redacted-domain] - [11/Sep/2026:20:55:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇮🇩 34.50.82.166	11 hours ago	34.50.82.166 [redacted-domain] - [11/Sep/2026:20:20:51 +0200] "GET /.git/config HTTP/1.1" 403 158 "- ... show more 34.50.82.166 [redacted-domain] - [11/Sep/2026:20:20:51 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.50.82.166 [redacted-domain] - [11/Sep/2026:20:20:52 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.50.82.166 [redacted-domain] - [11/Sep/2026:20:20:52 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 35.236.70.159	11 hours ago	35.236.70.159 [redacted-domain] - [11/Sep/2026:20:18:43 +0200] "GET /.git/config HTTP/1.1" 403 158 " ... show more 35.236.70.159 [redacted-domain] - [11/Sep/2026:20:18:43 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.236.70.159 [redacted-domain] - [11/Sep/2026:20:18:44 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.236.70.159 [redacted-domain] - [11/Sep/2026:20:18:44 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇪 34.140.64.67	11 hours ago	34.140.64.67 [redacted-domain] - [11/Sep/2026:19:57:23 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 403 158 ... show more 34.140.64.67 [redacted-domain] - [11/Sep/2026:19:57:23 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.140.64.67 [redacted-domain] - [11/Sep/2026:19:57:23 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +[redacted-url]/robots)" 34.140.64.67 [redacted-domain] - [11/Sep/2026:19:57:23 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +[redacted-url]/perplexity-user)" show less	Web App Attack
🇦🇲 87.241.159.219	11 hours ago	87.241.159.219 [redacted-domain] - [11/Sep/2026:19:51:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 ... show more 87.241.159.219 [redacted-domain] - [11/Sep/2026:19:51:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 87.241.159.219 [redacted-domain] - [11/Sep/2026:19:52:06 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.5; WordPress/6.1; [redacted-url]" 87.241.159.219 [redacted-domain] - [11/Sep/2026:19:52:15 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 87.241.159.219 [redacted-domain] - [11/Sep/2026:19:52:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 87.241.159.219 [redacted-domain] - [11/Sep/2026:19:52:36 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇵🇱 34.116.188.80	11 hours ago	34.116.188.80 [redacted-domain] - [11/Sep/2026:19:48:35 +0200] "GET /.git/config HTTP/1.1" 403 158 " ... show more 34.116.188.80 [redacted-domain] - [11/Sep/2026:19:48:35 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.116.188.80 [redacted-domain] - [11/Sep/2026:19:48:35 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.116.188.80 [redacted-domain] - [11/Sep/2026:19:48:35 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇹🇼 34.80.1.114	11 hours ago	34.80.1.114 [redacted-domain] - [11/Sep/2026:19:43:58 +0200] "GET /@fs/.env?raw&url?? HTTP/2.0" 403 ... show more 34.80.1.114 [redacted-domain] - [11/Sep/2026:19:43:58 +0200] "GET /@fs/.env?raw&url?? HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +[redacted-url]/gptbot)" 34.80.1.114 [redacted-domain] - [11/Sep/2026:19:43:59 +0200] "GET /@fs/.env?import&?raw?? HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +[redacted-url]/)" 34.80.1.114 [redacted-domain] - [11/Sep/2026:19:43:59 +0200] "GET /@fs/.env?url&raw?? HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [redacted-email])" show less	Web App Attack
🇧🇷 177.69.18.9	12 hours ago	177.69.18.9 [redacted-domain] - [11/Sep/2026:18:56:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6794 "- ... show more 177.69.18.9 [redacted-domain] - [11/Sep/2026:18:56:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6794 "-" "Jetpack by WordPress.com" 177.69.18.9 [redacted-domain] - [11/Sep/2026:18:56:33 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6794 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" 177.69.18.9 [redacted-domain] - [11/Sep/2026:18:56:45 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6794 "-" "Jetpack by WordPress.com" 177.69.18.9 [redacted-domain] - [11/Sep/2026:18:56:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6794 "-" "WordPress.com; [redacted-url]" 177.69.18.9 [redacted-domain] - [11/Sep/2026:18:57:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6794 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇫🇮 193.187.110.213	12 hours ago	2026-09-11T18:48:15.027589+02:00 [redacted-host] sshd-session[1510155]: Invalid user user from 193.1 ... show more 2026-09-11T18:48:15.027589+02:00 [redacted-host] sshd-session[1510155]: Invalid user user from 193.187.110.213 port 49749 2026-09-11T18:48:15.032032+02:00 [redacted-host] sshd-session[1510155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.187.110.213 2026-09-11T18:48:16.763461+02:00 [redacted-host] sshd-session[1510155]: Failed password for invalid user user from 193.187.110.213 port 49749 ssh2 show less	Brute-Force SSH
🇧🇪 34.79.49.24	12 hours ago	34.79.49.24 [redacted-domain] - [11/Sep/2026:18:26:05 +0200] "GET /static../.env HTTP/2.0" 403 158 " ... show more 34.79.49.24 [redacted-domain] - [11/Sep/2026:18:26:05 +0200] "GET /static../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +[redacted-url]/search/spider.html)" 34.79.49.24 [redacted-domain] - [11/Sep/2026:18:26:05 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +[redacted-url]/)" 34.79.49.24 [redacted-domain] - [11/Sep/2026:18:26:05 +0200] "GET /_nuxt/../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +[redacted-url]/)" show less	Web App Attack
🇮🇩 103.105.55.67	13 hours ago	103.105.55.67 [redacted-domain] - [11/Sep/2026:18:21:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 " ... show more 103.105.55.67 [redacted-domain] - [11/Sep/2026:18:21:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 103.105.55.67 [redacted-domain] - [11/Sep/2026:18:21:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 103.105.55.67 [redacted-domain] - [11/Sep/2026:18:22:09 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 103.105.55.67 [redacted-domain] - [11/Sep/2026:18:22:20 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" 103.105.55.67 [redacted-domain] - [11/Sep/2026:18:22:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.1; WordPress/6.2; [redacted-url]" show less	Brute-Force Web App Attack
🇧🇪 34.79.213.19	13 hours ago	34.79.213.19 [redacted-domain] - [11/Sep/2026:18:12:10 +0200] "GET /%2e%2e/.env HTTP/2.0" 403 158 "- ... show more 34.79.213.19 [redacted-domain] - [11/Sep/2026:18:12:10 +0200] "GET /%2e%2e/.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +[redacted-url]/)" 34.79.213.19 [redacted-domain] - [11/Sep/2026:18:12:10 +0200] "GET /assets../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +[redacted-url]/)" 34.79.213.19 [redacted-domain] - [11/Sep/2026:18:12:10 +0200] "GET /images../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +[redacted-url]/docs/sharing/webmasters/crawler)" show less	Web App Attack
🇳🇱 45.148.10.120	13 hours ago	45.148.10.120 [redacted-domain] - [11/Sep/2026:18:10:32 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Moz ... show more 45.148.10.120 [redacted-domain] - [11/Sep/2026:18:10:32 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 45.148.10.120 [redacted-domain] - [11/Sep/2026:18:10:32 +0200] "GET /.env.production HTTP/1.1" 403 158 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 45.148.10.120 [redacted-domain] - [11/Sep/2026:18:10:32 +0200] "GET /.aws/credentials HTTP/1.1" 403 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇯🇵 35.200.66.179	13 hours ago	35.200.66.179 [redacted-domain] - [11/Sep/2026:18:00:53 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 40 ... show more 35.200.66.179 [redacted-domain] - [11/Sep/2026:18:00:53 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 403 158 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +[redacted-url]" 35.200.66.179 [redacted-domain] - [11/Sep/2026:18:00:53 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 403 158 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +[redacted-url]" 35.200.66.179 [redacted-domain] - [11/Sep/2026:18:00:53 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 403 158 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +[redacted-url]/perplexity-user)" show less	Web App Attack
🇭🇰 20.24.86.237	14 hours ago	20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:10 +0200] "GET /wp-content/plugins/hellopress/wp ... show more 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:10 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:11 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:11 +0200] "GET /v.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:12 +0200] "GET /11.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:12 +0200] "GET /20.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:13 +0200] "GET /c.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:13 +0200] "GET /build.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:14 +0200] "GET /bless.php HTTP/1.1" 404 158 "-" "-" 20.24.86.237 [redacted-domain] - [11/Sep/2026:17:10:14 +020 show less	Bad Web Bot Web App Attack
🇯🇵 161.33.191.116	14 hours ago	161.33.191.116 [redacted-domain] - [11/Sep/2026:16:57:51 +0200] "GET /wp-login.php HTTP/1.1" 404 255 ... show more 161.33.191.116 [redacted-domain] - [11/Sep/2026:16:57:51 +0200] "GET /wp-login.php HTTP/1.1" 404 2552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" 161.33.191.116 [redacted-domain] - [11/Sep/2026:16:57:51 +0200] "GET /wp-admin/ HTTP/1.1" 404 2552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 161.33.191.116 [redacted-domain] - [11/Sep/2026:16:57:52 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 2552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" 161.33.191.116 [redacted-domain] - [11/Sep/2026:16:57:52 +0200] "GET /wp-admin/load-scripts.php HTTP/1.1" 404 2552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 161.33.191 show less	Bad Web Bot Web App Attack