AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardian joined AbuseIPDB in February 2022 and has reported 61,081 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇹🇷 94.154.43.164	19 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retrieve configuration file 94.154.43.164 [17/Aug/2026:20:29:17 +0200] "GET /user/login HTTP/1.1" 94.154.43.164 [18/Aug/2026:10:23:56 +0200] "GET / HTTP/1.1" 94.154.43.164 [19/Aug/2026:07:26:57 +0200] "GET / HTTP/1.1" 94.154.43.164 [19/Aug/2026:09:57:09 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇩🇪 185.242.3.167	19 Aug 2026	Unauthorized attempt to retrieve configuration file 185.242.3.167 [19/Aug/2026:09:42:38 +0200] "GET ... show more Unauthorized attempt to retrieve configuration file 185.242.3.167 [19/Aug/2026:09:42:38 +0200] "GET /.env HTTP/1.1" 185.242.3.167 [19/Aug/2026:09:42:38 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 8.229.36.133	19 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Scanning for installed WordP ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Scanning for installed WordPress and vulnerabilities 8.229.36.133 [19/Aug/2026:09:27:46 +0200] "GET /wp-includes/id3/license.txt/feed/ HTTP/1.1" 8.229.36.133 [19/Aug/2026:09:27:46 +0200] "GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 8.229.36.133 [19/Aug/2026:09:27:47 +0200] "GET /wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 8.229.36.133 [19/Aug/2026:09:27:47 +0200] "GET /wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 8.229.36.133 [19/Aug/2026:09:27:47 +0200] "GET /wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 35.231.173.48	19 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retrieve configuration file 35.231.173.48 [19/Aug/2026:07:24:04 +0200] "GET /fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 35.231.173.48 [19/Aug/2026:07:24:04 +0200] "GET /fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 35.231.173.48 [19/Aug/2026:07:24:04 +0200] "POST /v1/graphql HTTP/1.1" 35.231.173.48 [19/Aug/2026:07:24:04 +0200] "GET /static../.env HTTP/1.1" 35.231.173.48 [19/Aug/2026:07:24:04 +0200] "GET / HTTP/1.1" 35.231.173.48 [19/Aug/2026:07:24:04 +0200] "POST /api/graphql HTTP/1.1" 35.231.173.48 [19/Aug/2026:07:24:04 +0200] "POST /graphql/console HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 52.173.121.69	19 Aug 2026	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning 52.173.121.69 [19/Aug/2026:06:32:11 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 52.173.121.69 [19/Aug/2026:06:32:12 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 94.154.43.60	19 Aug 2026	Unauthorized attempt to retrieve configuration file 94.154.43.60 [19/Aug/2026:03:32:18 +0200] "GET / ... show more Unauthorized attempt to retrieve configuration file 94.154.43.60 [19/Aug/2026:03:32:18 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇹🇷 94.154.43.180	19 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file 94.154.43.180 [18/Aug/2026:05:42:19 +0200] "GET / HTTP/1.1" 94.154.43.180 [19/Aug/2026:03:32:17 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇹🇷 94.154.43.84	19 Aug 2026	Unauthorized attempt to retrieve configuration file 94.154.43.84 [19/Aug/2026:03:32:17 +0200] "GET / ... show more Unauthorized attempt to retrieve configuration file 94.154.43.84 [19/Aug/2026:03:32:17 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇨🇦 40.85.222.29	19 Aug 2026	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning 40.85.222.29 [19/Aug/2026:03:11:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 40.85.222.29 [19/Aug/2026:03:11:45 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 34.6.27.20	19 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x19), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x19), Unauthorized attempt to retrieve configuration file (x4) 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /read?url=file:///proc/self/environ HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /.git-credentials HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /.aws/credentials HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /media../.env HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /.env?raw?? HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /static../.env HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /aws/credentials HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 34.6.27.20 [19/Aug/2026:02:31:32 +0200] "GET /graphql HTTP/1.1" 34.6.27.20 [19/Au show less	Port Scan Web App Attack
🇺🇸 34.182.165.28	18 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x19), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x19), Unauthorized attempt to retrieve configuration file (x4) 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /config.js HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /.aws/credentials HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /?file=../../../../etc/passwd HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /.git-credentials HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /.git/HEAD HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /.env HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /read?url=file:///proc/self/environ HTTP/1.1" 34.182.165.28 [19/Aug/2026:00:24:44 +0200] "GET /static../etc/passwd HTTP/1.1" 34.182. show less	Port Scan Web App Attack
🇳🇱 94.154.43.158	18 Aug 2026	Unauthorized attempt to retrieve configuration file 94.154.43.158 [19/Aug/2026:00:21:52 +0200] "GET ... show more Unauthorized attempt to retrieve configuration file 94.154.43.158 [19/Aug/2026:00:21:52 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇫🇮 147.185.133.78	18 Aug 2026	Unauthorized connection attempt / Port scanning	Port Scan Web App Attack
🇬🇧 141.98.252.206	18 Aug 2026	Unauthorized connection attempt / Port scanning (x5) 141.98.252.206 [19/Aug/2026:00:10:49 +0200] "GE ... show more Unauthorized connection attempt / Port scanning (x5) 141.98.252.206 [19/Aug/2026:00:10:49 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 141.98.252.206 [19/Aug/2026:00:10:49 +0200] "GET //blog/robots.txt HTTP/1.1" 141.98.252.206 [19/Aug/2026:00:10:49 +0200] "GET //blog/ HTTP/1.1" 141.98.252.206 [19/Aug/2026:00:10:49 +0200] "GET //wordpress/ HTTP/1.1" 141.98.252.206 [19/Aug/2026:00:10:49 +0200] "GET //wp/ HTTP/1.1" show less	Port Scan Web App Attack
🇸🇬 103.252.200.225	18 Aug 2026	Unauthorized connection attempt / Port scanning 103.252.200.225 [18/Aug/2026:23:55:43 +0200] "GET /x ... show more Unauthorized connection attempt / Port scanning 103.252.200.225 [18/Aug/2026:23:55:43 +0200] "GET /xmlrpc.php HTTP/1.1" show less	Port Scan Web App Attack
🇫🇷 85.204.70.100	18 Aug 2026	Unauthorized connection attempt / Port scanning (x15) 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GE ... show more Unauthorized connection attempt / Port scanning (x15) 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET / HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.100 [18/Aug/2026:23:52:53 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1. show less	Port Scan Web App Attack
🇫🇷 185.177.72.56	18 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x25) 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.local HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.example HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.sample HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.bak HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.old HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.backup HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.prod HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.dev HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.stage HTTP/1.1" 185.177.72.56 [18/Aug/2026:23:03:12 +0200] "GET /.env.staging HTTP/1.1" 185.177.72. show less	Port Scan Web App Attack
🇳🇱 94.154.43.129	18 Aug 2026	Multi abuses [2]: Unauthorized attempt to retrieve configuration file, Unauthorized connection attem ... show more Multi abuses [2]: Unauthorized attempt to retrieve configuration file, Unauthorized connection attempt / Port scanning 94.154.43.129 [18/Aug/2026:21:40:47 +0200] "GET /.env HTTP/1.1" 94.154.43.129 [17/Aug/2026:20:32:04 +0200] "GET / HTTP/1.1" show less	Port Scan Web App Attack
🇲🇽 68.155.154.236	18 Aug 2026	Scanning for installed WordPress and vulnerabilities 68.155.154.236 [18/Aug/2026:21:15:25 +0200] "GE ... show more Scanning for installed WordPress and vulnerabilities 68.155.154.236 [18/Aug/2026:21:15:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" show less	Port Scan Web App Attack
🇫🇷 46.232.235.5	18 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordP ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordPress and vulnerabilities 46.232.235.5 [18/Aug/2026:20:58:39 +0200] "GET / HTTP/1.1" 46.232.235.5 [18/Aug/2026:20:58:45 +0200] "GET /wp-json/ HTTP/1.1" 46.232.235.5 [18/Aug/2026:20:58:47 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇫🇷 46.232.235.137	18 Aug 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordP ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordPress and vulnerabilities 46.232.235.137 [18/Aug/2026:20:20:28 +0200] "GET / HTTP/1.1" 46.232.235.137 [18/Aug/2026:20:20:29 +0200] "GET /wp-json/ HTTP/1.1" 46.232.235.137 [18/Aug/2026:20:20:29 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 162.216.149.40	18 Aug 2026	Unauthorized connection attempt / Port scanning	Port Scan Web App Attack
🇧🇷 20.226.36.136	18 Aug 2026	Scanning for installed WordPress and vulnerabilities 20.226.36.136 [18/Aug/2026:20:09:04 +0200] "GET ... show more Scanning for installed WordPress and vulnerabilities 20.226.36.136 [18/Aug/2026:20:09:04 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 168.62.48.100	18 Aug 2026	Scanning for installed WordPress and vulnerabilities 168.62.48.100 [18/Aug/2026:19:54:35 +0200] "GET ... show more Scanning for installed WordPress and vulnerabilities 168.62.48.100 [18/Aug/2026:19:54:35 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" show less	Port Scan Web App Attack
🇨🇦 20.151.225.230	18 Aug 2026	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning 20.151.225.230 [18/Aug/2026:19:14:27 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 20.151.225.230 [18/Aug/2026:19:14:27 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" show less	Port Scan Web App Attack