AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardian joined AbuseIPDB in February 2022 and has reported 61,562 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇷🇸 212.200.255.44	04 Sep 2026	Unauthorized connection attempt / Port scanning (x2) 212.200.255.44 [04/Sep/2026:22:15:35 +0200] "GE ... show more Unauthorized connection attempt / Port scanning (x2) 212.200.255.44 [04/Sep/2026:22:15:35 +0200] "GET / HTTP/1.1" 212.200.255.44 [04/Sep/2026:22:15:36 +0200] "POST /xmlrpc.php HTTP/1.1" show less	Port Scan Web App Attack
🇸🇦 145.241.159.130	04 Sep 2026	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities (x3), Unauthorized connection ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities (x3), Unauthorized connection attempt / Port scanning 145.241.159.130 [04/Sep/2026:20:52:26 +0200] "GET /wp-login.php HTTP/1.1" 145.241.159.130 [04/Sep/2026:20:52:26 +0200] "GET /wp-admin/ HTTP/1.1" 145.241.159.130 [04/Sep/2026:20:52:27 +0200] "GET / HTTP/1.1" 145.241.159.130 [04/Sep/2026:20:52:27 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 45.148.10.59	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x64), Scanning for installed Word ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x64), Scanning for installed WordPress and vulnerabilities 45.148.10.59 [01/Aug/2026:11:03:13 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:18 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:19 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:24 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:34 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:34 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:35 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:40 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:40 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:41 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/Aug/2026:11:03:51 +0200] "POST /wp/?rest_route=/batch/v1 HTTP/1.1" 45.148.10.59 [01/ show less	Port Scan Web App Attack
🇳🇱 45.148.10.13	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x30), Scanning for installed Word ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x30), Scanning for installed WordPress and vulnerabilities 45.148.10.13 [10/Aug/2026:18:57:05 +0200] "GET / HTTP/1.1" 45.148.10.13 [10/Aug/2026:18:57:05 +0200] "GET / HTTP/1.1" 45.148.10.13 [11/Aug/2026:09:51:32 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 45.148.10.13 [11/Aug/2026:09:51:32 +0200] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 45.148.10.13 [11/Aug/2026:09:51:33 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1" 45.148.10.13 [11/Aug/2026:21:39:14 +0200] "HEAD / HTTP/1.1" 45.148.10.13 [11/Aug/2026:21:39:14 +0200] "GET /wp-json/ HTTP/1.1" 45.148.10.13 [11/Aug/2026:21:39:14 +0200] "GET / HTTP/1.1" 45.148.10.13 [11/Aug/2026:21:39:14 +0200] "GET /?rest_route=/ HTTP/1.1" 45.148.10.13 [11/Aug/2026:21:39:15 +0200] "GET /wp-login.php HTTP/1.1" 45.148.10.13 [16/Aug/2026:15:54:52 +0200] "GET / HTTP/1.1" 45.148.10.13 [16/Aug/2026:17:37:19 +0200] " show less	Port Scan Web App Attack
🇳🇱 45.148.10.166	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x3) 45.148.10.166 [25/Aug/2026:08:03:41 +0200] "GET / HTTP/1.1" 45.148.10.166 [28/Aug/2026:20:50:26 +0200] "GET / HTTP/1.1" 45.148.10.166 [04/Sep/2026:19:53:27 +0200] "GET /.env HTTP/1.1" 45.148.10.166 [04/Sep/2026:19:53:27 +0200] "GET /.env.production HTTP/1.1" 45.148.10.166 [04/Sep/2026:19:53:27 +0200] "GET /aws.env HTTP/1.1" 45.148.10.166 [04/Sep/2026:19:53:27 +0200] "GET /.aws/credentials HTTP/1.1" 45.148.10.166 [18/Aug/2026:08:16:50 +0200] "GET /.git/config HTTP/1.1" 45.148.10.166 [29/Aug/2026:10:34:29 +0200] "GET / HTTP/1.1" 45.148.10.166 [09/Aug/2026:05:42:02 +0200] "GET / HTTP/1.1" 45.148.10.166 [09/Aug/2026:05:47:35 +0200] "GET / HTTP/1.1" 45.148.10.166 [09/Aug/2026:05:54:12 +0200] "GET / HTTP/1.1" 45.148.10.166 [09/Aug/2026:07:19:13 +0200] "GET / HTTP/1.1" 45.148.10.166 [09/Aug/2026:07:25:34 +0200] "GET / HTTP/1.1" 45.148.10.166 [09/Aug/2026:07:43:11 +0200] "GET / HTTP/1.1" 4 show less	Port Scan Web App Attack
🇳🇱 195.178.110.15	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress and vulnerabilities 195.178.110.15 [25/Aug/2026:20:31:39 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 195.178.110.15 [26/Aug/2026:04:43:34 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 195.178.110.15 [26/Aug/2026:05:11:03 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 195.178.110.15 [31/Aug/2026:11:48:59 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 195.178.110.15 [04/Sep/2026:19:52:37 +0200] "GET /wp-config.php-backup HTTP/1.1" show less	Port Scan Web App Attack
🇯🇵 35.221.82.244	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x7), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x7), Unauthorized attempt to retrieve configuration file (x9) 35.221.82.244 [04/Sep/2026:16:09:39 +0200] "GET / HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:39 +0200] "GET / HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/.env.development?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /.env?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/root/.aws/credentials.backup?raw?? HTTP/1.1" 35.221.82.244 [04/Sep/2026:16:09:48 +0200] "GET /@fs/home/node/.aws/config?raw?? HTTP/1.1" 35.221.82.244 [04/Sep show less	Port Scan Web App Attack
🇺🇸 136.108.82.4	04 Sep 2026	Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection ... show more Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection attempt / Port scanning (x6), Scanning for installed WordPress and vulnerabilities (x3) 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /.env.old HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /.env.bak HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /.env.local HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /actuator/configprops HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /wp-config.php~ HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /wp-config.php.bak HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /actuator/env HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /.env.example HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /crusader-404-probe HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +0200] "GET /.env HTTP/1.1" 136.108.82.4 [04/Sep/2026:15:31:10 +02 show less	Port Scan Web App Attack
🇳🇱 34.13.209.163	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retrieve configuration file 34.13.209.163 [04/Sep/2026:14:23:31 +0200] "GET / HTTP/1.1" 34.13.209.163 [04/Sep/2026:14:23:31 +0200] "GET /__aws_leak_probe_2768769b__ HTTP/1.1" 34.13.209.163 [04/Sep/2026:14:23:32 +0200] "GET /static../.env HTTP/1.1" show less	Port Scan Web App Attack
🇩🇪 216.26.243.221	04 Sep 2026	Scanning for installed WordPress and vulnerabilities 216.26.243.221 [04/Sep/2026:13:18:18 +0200] "GE ... show more Scanning for installed WordPress and vulnerabilities 216.26.243.221 [04/Sep/2026:13:18:18 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇹🇼 104.199.227.47	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x5), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x5), Unauthorized attempt to retrieve configuration file (x6) 104.199.227.47 [04/Sep/2026:12:06:47 +0200] "GET / HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:47 +0200] "GET / HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/home/node/.aws/credentials?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /.env?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/app/rootkey.csv?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/.env.development?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 104.199.227.47 [04/Sep/2026:12:06:57 +0200] "GET /@fs/etc/passw show less	Port Scan Web App Attack
🇯🇵 34.97.210.69	04 Sep 2026	Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection ... show more Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection attempt / Port scanning (x6), Scanning for installed WordPress and vulnerabilities (x3) 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /.env HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /.env.prod HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /actuator/env HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /.env.local HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /.env.old HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /wp-config.php.swp HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /.env.example HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /wp-config.php~ HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /.env.production HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /env HTTP/1.1" 34.97.210.69 [04/Sep/2026:12:06:04 +0200] "GET /.env.back show less	Port Scan Web App Attack
🇹🇼 107.167.181.229	04 Sep 2026	Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection ... show more Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection attempt / Port scanning (x6), Scanning for installed WordPress and vulnerabilities (x3) 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /.env.prod HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /actuator/env HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /wp-config.php.swp HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /.env.save HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /.env.bak HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /wp-config.php.bak HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /crusader-404-probe HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /.env.old HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /.env.local HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /.env.example HTTP/1.1" 107.167.181.229 [04/Sep/2026:10:38:09 +0200] "GET /_ignition/health-check HTTP/1.1" 107.167.18 show less	Port Scan Web App Attack
🇺🇸 34.26.168.230	04 Sep 2026	Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection ... show more Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x10), Unauthorized connection attempt / Port scanning (x6), Scanning for installed WordPress and vulnerabilities (x3) 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env.production HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env.dev HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /actuator/configprops HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env.local HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /actuator/env HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env.example HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env.save HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env.old HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] "GET /.env.prod HTTP/1.1" 34.26.168.230 [04/Sep/2026:10:35:57 +0200] show less	Port Scan Web App Attack
🇮🇳 103.176.190.47	04 Sep 2026	Unauthorized connection attempt / Port scanning 103.176.190.47 [04/Sep/2026:08:08:39 +0200] "POST /x ... show more Unauthorized connection attempt / Port scanning 103.176.190.47 [04/Sep/2026:08:08:39 +0200] "POST /xmlrpc.php HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 34.48.178.32	04 Sep 2026	Multi abuses [3]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retr ... show more Multi abuses [3]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retrieve configuration file (x10), Scanning for installed WordPress and vulnerabilities (x3) 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /_ignition/health-check HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.example HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.backup HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /env HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /crusader-404-probe HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.production HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.old HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.bak HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.local HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.dev HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env HTTP/1.1" 34.48.178.32 [04/Sep/2026:06:20:34 +0200] "GET /.env.prod HTTP/1.1 show less	Port Scan Web App Attack
🇺🇸 34.125.139.41	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to retrieve configuration file (x11) 34.125.139.41 [04/Sep/2026:05:56:34 +0200] "GET / HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:34 +0200] "GET / HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:39 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:39 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:40 +0200] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:40 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:40 +0200] "GET / HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:40 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:40 +0200] "GET /@fs/app/rootkey.csv?raw?? HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:40 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 34.125.139.41 [04/Sep/2026:05:56:40 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.12 show less	Port Scan Web App Attack
🇺🇸 34.229.101.216	04 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x5) 34.229.101.216 [04/Sep/2026:05:21:10 +0200] "GET / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.git/config HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.local HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.production HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.staging HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.development HTTP/1.1" show less	Port Scan Web App Attack
🇫🇷 146.70.194.254	03 Sep 2026	Unauthorized connection attempt / Port scanning (x19) 146.70.194.254 [26/Jul/2026:15:15:19 +0200] "G ... show more Unauthorized connection attempt / Port scanning (x19) 146.70.194.254 [26/Jul/2026:15:15:19 +0200] "GET / HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:19 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET / HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/Jul/2026:15:15:20 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 146.70.194.254 [26/ show less	Port Scan Web App Attack
🇺🇸 34.16.127.79	03 Sep 2026	Unauthorized attempt to retrieve configuration file 34.16.127.79 [04/Sep/2026:00:47:42 +0200] "GET / ... show more Unauthorized attempt to retrieve configuration file 34.16.127.79 [04/Sep/2026:00:47:42 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 34.74.232.207	03 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x21), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x21), Unauthorized attempt to retrieve configuration file (x11) 34.74.232.207 [03/Sep/2026:22:56:25 +0200] "GET / HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:25 +0200] "GET / HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET / HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /.env?raw?? HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /@fs/root/.aws/config?raw?? HTTP/1.1" 34.74.232.207 [03/Sep/2026:22:56:30 +0200] "GET /@fs/root/.aws/credentials.backup?raw?? HTTP/1.1" 34.74.232.207 [03/Se show less	Port Scan Web App Attack
🇺🇸 34.53.110.38	03 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x21), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x21), Unauthorized attempt to retrieve configuration file (x11) 34.53.110.38 [03/Sep/2026:22:39:19 +0200] "GET / HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:19 +0200] "GET / HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:24 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:24 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:24 +0200] "GET / HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:24 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:24 +0200] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:24 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:24 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:25 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1" 34.53.110.38 [03/Sep/2026:22:39:25 +0200] "GET /@fs/.env.local?raw?? HTTP/1 show less	Port Scan Web App Attack
🇳🇱 185.226.197.65	03 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x5), Unauthorized attempt to remo ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x5), Unauthorized attempt to remote code execution (CGI) 185.226.197.65 [03/Sep/2026:21:44:16 +0200] "GET /wp-json HTTP/1.1" 185.226.197.65 [03/Sep/2026:21:44:22 +0200] "GET /api/session/properties HTTP/1.1" 185.226.197.65 [03/Sep/2026:21:44:24 +0200] "GET /index.jsp HTTP/1.1" 185.226.197.65 [03/Sep/2026:21:44:29 +0200] "GET / HTTP/1.1" 185.226.197.65 [03/Sep/2026:21:44:29 +0200] "GET /zabbix/favicon.ico HTTP/1.1" 185.226.197.65 [03/Sep/2026:21:44:33 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 185.226.197.63	03 Sep 2026	Unauthorized connection attempt / Port scanning (x2) 185.226.197.63 [03/Sep/2026:21:44:11 +0200] "GE ... show more Unauthorized connection attempt / Port scanning (x2) 185.226.197.63 [03/Sep/2026:21:44:11 +0200] "GET /sugar_version.json HTTP/1.1" 185.226.197.63 [03/Sep/2026:21:44:25 +0200] "GET /solr/ HTTP/1.1" show less	Port Scan Web App Attack
🇯🇵 136.110.65.58	03 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x27), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x27), Unauthorized attempt to retrieve configuration file (x6) 136.110.65.58 [03/Sep/2026:19:50:45 +0200] "GET /__aws_leak_probe_b02806d3__ HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:50 +0200] "GET /api/config HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:50 +0200] "GET /read?url=file:///proc/self/environ HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /@fs/proc/self/environ HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /aws/credentials HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /.git/HEAD HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /?file=../../../../etc/passwd HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /@vite/env HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /.azure/credentials HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /static../.azure/credentials HTTP/1.1" 136.110.65.58 [03/Sep/2026:19:50:51 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 136.110. show less	Port Scan Web App Attack