AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User gandaflux joined AbuseIPDB in September 2026 and has reported 1,550 IP addresses.

Standing (weight) is Unknown.

ACTIVE USER

IP	Date	Comment	Categories
🇩🇪 159.89.12.166	8 hours ago	159.89.12.166 [redacted-domain] - [23/Sep/2026:06:18:23 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" ... show more 159.89.12.166 [redacted-domain] - [23/Sep/2026:06:18:23 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 159.89.12.166 [redacted-domain] - [23/Sep/2026:06:18:24 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 159.89.12.166 [redacted-domain] - [23/Sep/2026:06:18:28 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" show less	Web App Attack
🇮🇳 157.15.158.244	8 hours ago	157.15.158.244 [redacted-domain] - [23/Sep/2026:06:04:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 ... show more 157.15.158.244 [redacted-domain] - [23/Sep/2026:06:04:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/13.0; WordPress/6.2; [redacted-url]" 157.15.158.244 [redacted-domain] - [23/Sep/2026:06:04:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 157.15.158.244 [redacted-domain] - [23/Sep/2026:06:04:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 157.15.158.244 [redacted-domain] - [23/Sep/2026:06:04:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 157.15.158.244 [redacted-domain] - [23/Sep/2026:06:04:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇮🇳 117.199.169.233	8 hours ago	117.199.169.233 [redacted-domain] - [23/Sep/2026:06:03:34 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 ... show more 117.199.169.233 [redacted-domain] - [23/Sep/2026:06:03:34 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 117.199.169.233 [redacted-domain] - [23/Sep/2026:06:03:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" 117.199.169.233 [redacted-domain] - [23/Sep/2026:06:03:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 117.199.169.233 [redacted-domain] - [23/Sep/2026:06:04:06 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 117.199.169.233 [redacted-domain] - [23/Sep/2026:06:04:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.5; WordPress/6.4; [redacted-url]" show less	Brute-Force Web App Attack
🇮🇳 117.199.171.191	8 hours ago	117.199.171.191 [redacted-domain] - [23/Sep/2026:05:49:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 ... show more 117.199.171.191 [redacted-domain] - [23/Sep/2026:05:49:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 117.199.171.191 [redacted-domain] - [23/Sep/2026:05:49:31 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]" 117.199.171.191 [redacted-domain] - [23/Sep/2026:05:49:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" 117.199.171.191 [redacted-domain] - [23/Sep/2026:05:49:52 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.5; WordPress/6.2; [redacted-url]" 117.199.171.191 [redacted-domain] - [23/Sep/2026:05:50:03 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇵🇭 150.228.183.163	8 hours ago	150.228.183.163 [redacted-domain] - [23/Sep/2026:05:22:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 ... show more 150.228.183.163 [redacted-domain] - [23/Sep/2026:05:22:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" 150.228.183.163 [redacted-domain] - [23/Sep/2026:05:23:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 150.228.183.163 [redacted-domain] - [23/Sep/2026:05:23:18 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 150.228.183.163 [redacted-domain] - [23/Sep/2026:05:23:29 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 150.228.183.163 [redacted-domain] - [23/Sep/2026:05:23:39 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇺🇸 134.122.28.88	8 hours ago	134.122.28.88 whm.[redacted-domain] - [23/Sep/2026:05:19:30 +0200] "GET /.DS_Store HTTP/1.1" 403 158 ... show more 134.122.28.88 whm.[redacted-domain] - [23/Sep/2026:05:19:30 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 134.122.28.88 whm.[redacted-domain] - [23/Sep/2026:05:19:31 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 134.122.28.88 whm.[redacted-domain] - [23/Sep/2026:05:19:36 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" show less	Web App Attack
🇩🇪 45.139.104.176	9 hours ago	45.139.104.176 [redacted-domain] - [23/Sep/2026:05:10:57 +0200] "GET /aws.env HTTP/1.1" 404 158 "-" ... show more 45.139.104.176 [redacted-domain] - [23/Sep/2026:05:10:57 +0200] "GET /aws.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 [redacted-domain] - [23/Sep/2026:05:10:57 +0200] "GET /aws.yml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 [redacted-domain] - [23/Sep/2026:05:10:57 +0200] "GET /aws-secret.yaml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 [redacted-domain] - [23/Sep/2026:05:10:57 +0200] "GET /aws/credentials HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 [redacted-domain] - [23/Sep/2026:05:10:57 +0200] "GET /secrets/aws_ses.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 [redacted-domain] - [23/Sep/2026:05:10:57 +0200] "GET /sendgrid.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; UnifiedPat show less	Bad Web Bot Web App Attack
🇫🇮 35.228.71.49	9 hours ago	35.228.71.49 [redacted-domain] - [23/Sep/2026:05:05:56 +0200] "GET /.git/config HTTP/1.1" 403 158 "- ... show more 35.228.71.49 [redacted-domain] - [23/Sep/2026:05:05:56 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.71.49 [redacted-domain] - [23/Sep/2026:05:05:56 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.71.49 [redacted-domain] - [23/Sep/2026:05:05:56 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇵🇱 144.31.1.124	9 hours ago	144.31.1.124 [redacted-domain] - [23/Sep/2026:05:01:23 +0200] "GET /index.php/kategoria-produktu/kar ... show more 144.31.1.124 [redacted-domain] - [23/Sep/2026:05:01:23 +0200] "GET /index.php/kategoria-produktu/karty/?add-to-cart=875%25%22%20AND%20EXTRACTVALUE%286189%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%286189%3D6189%2C1%29%29%29%29%2C0x7e%29%29--%20- HTTP/2.0" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 144.31.1.124 [redacted-domain] - [23/Sep/2026:05:01:23 +0200] "GET /index.php/kategoria-produktu/karty/?add-to-cart=875%27%20UNION%20ALL%20SELECT%20%27dibsdpawebvarnirajbeyzjzfavjhlfi%27--%20yerz90 HTTP/2.0" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" show less	SQL Injection Web App Attack
🇵🇱 144.31.3.201	9 hours ago	144.31.3.201 [redacted-domain] - [23/Sep/2026:05:00:55 +0200] "GET /index.php/kategoria-produktu/kar ... show more 144.31.3.201 [redacted-domain] - [23/Sep/2026:05:00:55 +0200] "GET /index.php/kategoria-produktu/karty/?add-to-cart=1%27%20AND%201=1%20UNION%20SELECT%20NULL--%20- HTTP/2.0" 200 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 144.31.3.201 [redacted-domain] - [23/Sep/2026:05:01:00 +0200] "GET /index.php/kategoria-produktu/karty/?add-to-cart=875%27%20AND%20EXTRACTVALUE%288183%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%288183%3D8183%2C1%29%29%29%29%2C0x7e%29%29--%20- HTTP/2.0" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" show less	SQL Injection Web App Attack
🇩🇪 164.92.244.132	9 hours ago	164.92.244.132 [redacted-domain] - [23/Sep/2026:04:49:04 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "- ... show more 164.92.244.132 [redacted-domain] - [23/Sep/2026:04:49:04 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 164.92.244.132 [redacted-domain] - [23/Sep/2026:04:49:05 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 164.92.244.132 [redacted-domain] - [23/Sep/2026:04:49:09 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" show less	Web App Attack
🇭🇰 20.24.74.198	9 hours ago	20.24.74.198 [redacted-domain] - [23/Sep/2026:04:24:44 +0200] "GET /autoload_classmap.php HTTP/1.1" ... show more 20.24.74.198 [redacted-domain] - [23/Sep/2026:04:24:44 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.74.198 [redacted-domain] - [23/Sep/2026:04:24:48 +0200] "GET /post.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.74.198 [redacted-domain] - [23/Sep/2026:04:24:49 +0200] "GET /1.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.74.198 [redacted-domain] - [23/Sep/2026:04:24:49 +0200] "GET /flower.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.74.198 [redacted-domain] - [23/Sep/2026:04:24:49 +0200] "GET /admin.ph show less	Bad Web Bot Web App Attack
🇳🇱 45.148.10.28	9 hours ago	45.148.10.28 ts.[redacted-domain] - [23/Sep/2026:04:21:27 +0200] "GET /wp/v2/posts/999999 HTTP/1.1" ... show more 45.148.10.28 ts.[redacted-domain] - [23/Sep/2026:04:21:27 +0200] "GET /wp/v2/posts/999999 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.28 ts.[redacted-domain] - [23/Sep/2026:04:21:27 +0200] "GET /wp/v2/pages HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.28 ts.[redacted-domain] - [23/Sep/2026:04:21:28 +0200] "GET /wp/v2/media HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.28 ts.[redacted-domain] - [23/Sep/2026:04:21:28 +0200] "GET /wp/v2/categories HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.28 ts.[redacted-domain] - [ show less	Bad Web Bot Web App Attack
🇳🇱 45.148.10.15	10 hours ago	45.148.10.15 [redacted-domain] - [23/Sep/2026:03:34:02 +0200] "GET /wp/v2/posts/999999 HTTP/1.1" 404 ... show more 45.148.10.15 [redacted-domain] - [23/Sep/2026:03:34:02 +0200] "GET /wp/v2/posts/999999 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.15 [redacted-domain] - [23/Sep/2026:03:34:03 +0200] "GET /wp/v2/pages HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.15 [redacted-domain] - [23/Sep/2026:03:34:03 +0200] "GET /wp/v2/pages HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.15 [redacted-domain] - [23/Sep/2026:03:34:03 +0200] "GET /wp/v2/media HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.15 [redacted-domain] - [23/Sep/2026:03:34:03 +020 show less	Bad Web Bot Web App Attack
🇮🇳 142.93.217.142	11 hours ago	142.93.217.142 [redacted-domain] - [23/Sep/2026:03:09:04 +0200] "GET /wp-includes/wlwmanifest.xml HT ... show more 142.93.217.142 [redacted-domain] - [23/Sep/2026:03:09:04 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 142.93.217.142 [redacted-domain] - [23/Sep/2026:03:09:04 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 142.93.217.142 [redacted-domain] - [23/Sep/2026:03:09:05 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 142.93.217.142 [redacted-domain] - [23/Sep/2026:03:09:04 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78. show less	Bad Web Bot Web App Attack
🇸🇬 206.189.95.232	11 hours ago	206.189.95.232 [redacted-domain] - [23/Sep/2026:03:00:24 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "- ... show more 206.189.95.232 [redacted-domain] - [23/Sep/2026:03:00:24 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 206.189.95.232 [redacted-domain] - [23/Sep/2026:03:00:25 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 206.189.95.232 [redacted-domain] - [23/Sep/2026:03:00:29 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" show less	Web App Attack
🇺🇸 159.223.132.86	11 hours ago	159.223.132.86 [redacted-domain] - [23/Sep/2026:02:57:53 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "- ... show more 159.223.132.86 [redacted-domain] - [23/Sep/2026:02:57:53 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 159.223.132.86 [redacted-domain] - [23/Sep/2026:02:57:54 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 159.223.132.86 [redacted-domain] - [23/Sep/2026:02:57:58 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" show less	Web App Attack
🇳🇱 45.148.10.9	12 hours ago	45.148.10.9 [redacted-domain] - [23/Sep/2026:02:01:03 +0200] "GET /wp/v2/posts/999999 HTTP/1.1" 404 ... show more 45.148.10.9 [redacted-domain] - [23/Sep/2026:02:01:03 +0200] "GET /wp/v2/posts/999999 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.9 [redacted-domain] - [23/Sep/2026:02:01:03 +0200] "GET /wp/v2/pages HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.9 [redacted-domain] - [23/Sep/2026:02:01:04 +0200] "GET /wp/v2/media HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.9 [redacted-domain] - [23/Sep/2026:02:01:04 +0200] "GET /wp/v2/categories HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.9 [redacted-domain] - [23/Sep/2026:02:01:04 +0200] "G show less	Bad Web Bot Web App Attack
🇧🇪 35.205.88.64	12 hours ago	35.205.88.64 [redacted-domain] - [23/Sep/2026:01:56:24 +0200] "GET /.aws/.env HTTP/2.0" 403 158 "-" ... show more 35.205.88.64 [redacted-domain] - [23/Sep/2026:01:56:24 +0200] "GET /.aws/.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.205.88.64 [redacted-domain] - [23/Sep/2026:01:56:24 +0200] "GET /.aws/config HTTP/2.0" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.205.88.64 [redacted-domain] - [23/Sep/2026:01:56:24 +0200] "GET /.aws/credentials HTTP/2.0" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack
🇺🇸 66.42.111.224	13 hours ago	66.42.111.224 [redacted-domain] - [23/Sep/2026:01:18:26 +0200] "GET /.env HTTP/1.1" 403 - "-" "Mozil ... show more 66.42.111.224 [redacted-domain] - [23/Sep/2026:01:18:26 +0200] "GET /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126" 66.42.111.224 [redacted-domain] - [23/Sep/2026:01:18:29 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126" 66.42.111.224 [redacted-domain] - [23/Sep/2026:01:18:30 +0200] "GET /.env.production HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126" show less	Web App Attack
🇺🇸 146.190.63.48	14 hours ago	146.190.63.48 whm.[redacted-domain] - [23/Sep/2026:00:13:40 +0200] "GET /.DS_Store HTTP/1.1" 403 158 ... show more 146.190.63.48 whm.[redacted-domain] - [23/Sep/2026:00:13:40 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 146.190.63.48 whm.[redacted-domain] - [23/Sep/2026:00:13:41 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 146.190.63.48 whm.[redacted-domain] - [23/Sep/2026:00:13:45 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" show less	Web App Attack
🇳🇱 93.123.109.178	14 hours ago	93.123.109.178 [redacted-domain] - [22/Sep/2026:23:54:03 +0200] "GET /wp/v2/pages HTTP/1.1" 404 158 ... show more 93.123.109.178 [redacted-domain] - [22/Sep/2026:23:54:03 +0200] "GET /wp/v2/pages HTTP/1.1" 404 158 "[redacted-url]/wp/v2/pages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93.123.109.178 [redacted-domain] - [22/Sep/2026:23:54:03 +0200] "GET /wp/v2/media HTTP/1.1" 404 158 "[redacted-url]/wp/v2/media" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93.123.109.178 [redacted-domain] - [22/Sep/2026:23:54:04 +0200] "GET /wp/v2/categories HTTP/1.1" 404 158 "[redacted-url]/wp/v2/categories" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93.123.109.178 [redacted-domain] - [22/Sep/2026:23:54:04 +0200] "GET /wp/v2/tags HTTP/1.1" 404 158 "[redacted-url]/wp/v2/tags" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT show less	Bad Web Bot Web App Attack
🇺🇸 165.227.84.14	14 hours ago	165.227.84.14 [redacted-domain] - [22/Sep/2026:23:47:10 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" ... show more 165.227.84.14 [redacted-domain] - [22/Sep/2026:23:47:10 +0200] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.030313e2630323e28333e24353; +[redacted-url]" 165.227.84.14 [redacted-domain] - [22/Sep/2026:23:47:11 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.030313e2630323e28333e24353; +[redacted-url]" 165.227.84.14 [redacted-domain] - [22/Sep/2026:23:47:15 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.030313e2630323e28333e24353; +[redacted-url]" show less	Web App Attack
🇨🇦 96.22.184.55	14 hours ago	96.22.184.55 [redacted-domain] - [22/Sep/2026:23:35:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "- ... show more 96.22.184.55 [redacted-domain] - [22/Sep/2026:23:35:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/13.0; WordPress/6.1; [redacted-url]" 96.22.184.55 [redacted-domain] - [22/Sep/2026:23:35:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 96.22.184.55 [redacted-domain] - [22/Sep/2026:23:35:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 96.22.184.55 [redacted-domain] - [22/Sep/2026:23:35:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 96.22.184.55 [redacted-domain] - [22/Sep/2026:23:35:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇺🇸 35.236.43.38	15 hours ago	35.236.43.38 [redacted-domain] - [22/Sep/2026:23:17:28 +0200] "GET /.git/config HTTP/1.1" 403 158 "- ... show more 35.236.43.38 [redacted-domain] - [22/Sep/2026:23:17:28 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.236.43.38 [redacted-domain] - [22/Sep/2026:23:17:29 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.236.43.38 [redacted-domain] - [22/Sep/2026:23:17:29 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack