AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Agaman joined AbuseIPDB in November 2019 and has reported 74 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇩🇪 2a14:c380:1300:7a::a	13 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 08:19 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 08:19 UTC. Samples: GET /000.php 444; GET /wp-content/about.php 444; GET /wp-admin/css/admin.php 444. UA: Go-http-client/2.0. Detected by fail2ban. show less	Web App Attack
🇺🇸 8.228.83.218	28 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 08:09 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 08:09 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇫🇷 143.244.57.92	28 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:56 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:56 UTC. Samples: GET //xmlrpc.php 444; POST //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇩🇪 23.132.164.122	28 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:56 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:56 UTC. Samples: GET /wp-content/themes/seotheme/db.php 444; POST /wp-plain.php 444; POST /ALFA_DATA/alfacgiapi/perl.alfa 444. UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (. Detected by fail2ban. show less	Web App Attack
🇺🇸 34.11.180.223	28 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:56 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:56 UTC. Samples: GET /.vite/manifest.json 444; GET /media../.env 444. UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome. Detected by fail2ban. show less	Web App Attack
🇧🇪 34.156.121.46	28 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-19 22:26 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-19 22:26 UTC. Samples: GET /config.json 444; GET /phpinfo.php 444; GET /api/.env 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. Detected by fail2ban. show less	Web App Attack
🇺🇸 34.57.86.52	43 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:45 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 07:45 UTC. Samples: GET //xmlrpc.php 444; GET //blog/wp-includes/wlwmanifest.xml 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇳🇱 185.218.86.14	43 minutes ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 10 requests across 2 of our servers, 2026-1 ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 10 requests across 2 of our servers, 2026-10-19 22:18 to 2026-10-20 00:06 UTC. Samples: GET /.env 444; GET /.env.bak 444; GET /.env.save 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0. Detected by fail2ban. show less	Web App Attack
🇫🇷 84.17.60.251	1 hour ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:41 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:41 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇺🇸 136.70.118.236	1 hour ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:41 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:41 UTC. Samples: GET //xmlrpc.php 444; GET //blog/wp-includes/wlwmanifest.xml 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇺🇸 34.23.83.247	1 hour ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:29 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:29 UTC. Samples: GET /dist/.vite/manifest.json 444; GET /.vite/manifest.json 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇺🇸 8.234.182.202	2 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:26 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:26 UTC. Samples: GET //xmlrpc.php 444; GET //blog/wp-includes/wlwmanifest.xml 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇧🇪 35.195.134.26	2 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 05:43 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 05:43 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇧🇪 34.76.112.187	2 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 05:43 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 05:43 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇳🇱 45.153.34.217	3 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 05:19 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 05:19 UTC. Samples: GET /info.php 444; GET /test.php 444; GET /phpinfo 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇺🇸 45.156.129.123	3 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: GET /cgi-bin/authLogin.cgi 444; GET /wp-content/plugins/wp-fastest-cache/readme.txt 444; GET /wp-content/plugins/wp-video-lightbox/readme.txt 444. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5. Detected by fail2ban. show less	Web App Attack
🇺🇸 45.156.129.121	3 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: GET /wp-content/plugins/iwp-client/readme.txt 444; GET /wp-content/plugins/wp-user-avatar/readme.txt 444; GET /wp-content/plugins/elementor/readme.txt 444. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5. Detected by fail2ban. show less	Web App Attack
🇺🇸 45.156.129.122	3 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: GET /wp-content/plugins/wordpress-database-reset/readme.txt 444; GET /wp-content/plugins/optinmonster/readme.txt 444; GET /wp-content/plugins/groma-canary-not-a-real-plugin/readme.txt 444. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5. Detected by fail2ban. show less	Web App Attack
🇺🇸 45.156.129.120	3 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:37 UTC. Samples: GET /wp-content/plugins/wp-central/readme.txt 444; GET /wp-content/plugins/bbpress/readme.txt 444; GET /wp-content/plugins/wpschoolpress/readme.txt 444. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5. Detected by fail2ban. show less	Web App Attack
🇷🇴 2.57.122.208	3 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:36 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 04:36 UTC. Samples: GET /.env.production 444; GET /.env.local 444; GET /wp-config.php 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like. Detected by fail2ban. show less	Web App Attack
🇮🇳 74.225.168.179	4 hours ago	Webshell/backdoor probing on HTTP(S) port 80/443. 1 request, 2026-10-19 10:15 UTC. Samples: GET /wp- ... show more Webshell/backdoor probing on HTTP(S) port 80/443. 1 request, 2026-10-19 10:15 UTC. Samples: GET /wp-content/plugins/hellopress/wp_filemanager.php 444. Detected by fail2ban. show less	Hacking Web App Attack
🇧🇪 34.52.229.253	4 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 03:33 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 03:33 UTC. Samples: GET /.env.example 444; GET /phpinfo.php 444; GET /.env 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. Detected by fail2ban. show less	Web App Attack
🇦🇺 134.199.172.169	5 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 03:04 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 03:04 UTC. Samples: GET /.git/config 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇧🇪 35.205.254.119	5 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 15 requests across 3 of our servers, 2026-1 ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 15 requests across 3 of our servers, 2026-10-19 11:26-13:42 UTC. Samples: GET /.aws/.env 444; GET /.env 444; GET /.env.aws 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. Detected by fail2ban. show less	Web App Attack
🇵🇱 45.138.12.14	6 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-19 01:45 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-19 01:45 UTC. Samples: GET /geoserver/rest/about/version.json 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Sa. Detected by fail2ban. show less	Web App Attack