AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardian joined AbuseIPDB in February 2022 and has reported 61,936 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇸🇬 149.118.62.200	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress and vulnerabilities (x3) 149.118.62.200 [18/Sep/2026:22:19:29 +0200] "GET / HTTP/1.1" 149.118.62.200 [18/Sep/2026:22:19:30 +0200] "GET /wp-login.php HTTP/1.1" 149.118.62.200 [18/Sep/2026:22:19:30 +0200] "GET /wp-admin/ HTTP/1.1" 149.118.62.200 [18/Sep/2026:22:19:30 +0200] "GET /wp-login.php?action=register HTTP/1.1" show less	Port Scan Web App Attack
🇯🇵 140.238.38.228	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordP ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordPress and vulnerabilities 140.238.38.228 [18/Sep/2026:22:08:23 +0200] "GET / HTTP/1.1" 140.238.38.228 [18/Sep/2026:22:08:23 +0200] "GET /user/login HTTP/1.1" 140.238.38.228 [18/Sep/2026:22:08:24 +0200] "GET /wp-login.php HTTP/1.1" 140.238.38.228 [18/Sep/2026:22:08:24 +0200] "GET /user/login HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 162.216.149.26	18 Sep 2026	Unauthorized connection attempt / Port scanning	Port Scan Web App Attack
🇺🇸 24.199.89.38	18 Sep 2026	Unauthorized attempt to retrieve configuration file 24.199.89.38 [18/Sep/2026:19:04:49 +0200] "GET / ... show more Unauthorized attempt to retrieve configuration file 24.199.89.38 [18/Sep/2026:19:04:49 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇭🇰 45.115.26.203	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x24), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x24), Unauthorized attempt to retrieve configuration file (x18) 45.115.26.203 [18/Sep/2026:16:37:35 +0200] "GET / HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /.pypirc HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /api/.env HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /.kube/config HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /.env.swp HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /backend/.env HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /app/.env HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /.git-credentials HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /php_info.php HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /_phpinfo.php HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /i.php HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /%2eenv HTTP/1.1" 45.115.26.203 [18/Sep/2026:16:37:48 +0200] "GET /%2f%2eaws%2fcrede show less	Port Scan Web App Attack
🇺🇸 162.216.150.237	18 Sep 2026	Unauthorized connection attempt / Port scanning	Port Scan Web App Attack
🇧🇪 35.240.58.49	18 Sep 2026	Multi abuses [3]: Unauthorized connection attempt / Port scanning (x183), Unauthorized attempt to re ... show more Multi abuses [3]: Unauthorized connection attempt / Port scanning (x183), Unauthorized attempt to retrieve configuration file (x90), Scanning for installed WordPress and vulnerabilities (x6) 35.240.58.49 [18/Sep/2026:16:10:54 +0200] "GET / HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.amplifyrc HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.anthropic/config.json HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.aws/.env HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.aws/config HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.claude/settings.json HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.docker/config.json HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.boto HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.config/anthropic/credentials/default.json HTTP/1.1" 35.240.58.49 [18/Sep/2026:16:10:55 +0200] "GET /.aws show less	Port Scan Web App Attack
🇸🇮 102.220.160.173	18 Sep 2026	Unauthorized connection attempt / Port scanning (x10) 102.220.160.173 [18/Sep/2026:14:18:47 +0200] " ... show more Unauthorized connection attempt / Port scanning (x10) 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET / HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET / HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 102.220.160.173 [18/Sep/2026:14:18:47 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 195.178.110.72	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x18), Scanning for installed Word ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x18), Scanning for installed WordPress and vulnerabilities 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /?rest_route=/batch%2Fv1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST /wp-json/Batch/v1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:00 +0200] "POST //wp-json/batch/v1 HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:01 +0200] "POST /wp-json/batch/v1/ HTTP/1.1" 195.178.110.72 [18/Sep/2026:12:46:01 +0200] "POST /blog/w show less	Port Scan Web App Attack
🇺🇸 104.196.60.92	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to retrieve configuration file 104.196.60.92 [18/Sep/2026:12:41:08 +0200] "GET / HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /signin HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /__/firebase/init.json HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /config.json HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /auth HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /account/login HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /api/settings HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /secure HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /sign-in HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:09 +0200] "GET /login HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:10 +0200] "GET /config.js HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:10 +0200] "GET /api/config HTTP/1.1" 104.196.60.92 [18/Sep/2026:12:41:10 +0200] "GET /.env.save HTTP/1.1" 104.1 show less	Port Scan Web App Attack
🇩🇪 45.8.68.180	18 Sep 2026	Scanning for installed WordPress and vulnerabilities 45.8.68.180 [18/Sep/2026:12:25:31 +0200] "GET / ... show more Scanning for installed WordPress and vulnerabilities 45.8.68.180 [18/Sep/2026:12:25:31 +0200] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p= HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 104.196.169.135	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x91), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x91), Unauthorized attempt to retrieve configuration file (x3) 104.196.169.135 [18/Sep/2026:10:59:51 +0200] "GET / HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /sign-in HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /login HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /manifest.webmanifest HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /auth/login HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /auth HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /runtime-config.js HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /env.js HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /api/env HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:52 +0200] "GET /firebase-config.json HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:53 +0200] "GET /signin HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59:53 +0200] "GET /account/login HTTP/1.1" 104.196.169.135 [18/Sep/2026:10:59 show less	Port Scan Web App Attack
🇧🇪 34.52.133.111	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x60), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x60), Unauthorized attempt to retrieve configuration file (x39) 34.52.133.111 [18/Sep/2026:10:45:16 +0200] "GET / HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:16 +0200] "GET /user/login HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:29 +0200] "GET /assets/js/index.js?v=1.17.3 HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.amplifyrc HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.anthropic/config.json HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.aws/credentials HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.aws/config HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.aws/.env HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.docker/config.json HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "GET /.docker/.env HTTP/1.1" 34.52.133.111 [18/Sep/2026:10:45:30 +0200] "G show less	Port Scan Web App Attack
🇬🇧 188.166.152.127	18 Sep 2026	Scanning for installed WordPress and vulnerabilities 188.166.152.127 [18/Sep/2026:09:35:04 +0200] "G ... show more Scanning for installed WordPress and vulnerabilities 188.166.152.127 [18/Sep/2026:09:35:04 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇦🇺 134.199.158.121	18 Sep 2026	Scanning for installed WordPress and vulnerabilities 134.199.158.121 [18/Sep/2026:06:50:51 +0200] "G ... show more Scanning for installed WordPress and vulnerabilities 134.199.158.121 [18/Sep/2026:06:50:51 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇧🇷 45.224.51.157	18 Sep 2026	Unauthorized connection attempt / Port scanning 45.224.51.157 [18/Sep/2026:06:15:46 +0200] "POST /xm ... show more Unauthorized connection attempt / Port scanning 45.224.51.157 [18/Sep/2026:06:15:46 +0200] "POST /xmlrpc.php HTTP/1.1" show less	Port Scan Web App Attack
🇵🇱 185.238.75.151	18 Sep 2026	Unauthorized connection attempt / Port scanning (x21) 185.238.75.151 [26/Jul/2026:10:05:57 +0200] "G ... show more Unauthorized connection attempt / Port scanning (x21) 185.238.75.151 [26/Jul/2026:10:05:57 +0200] "GET / HTTP/1.1" 185.238.75.151 [26/Jul/2026:10:05:57 +0200] "GET //d53b4576-88c8-11f1-bf15-cf847c7dd485 HTTP/1.1" 185.238.75.151 [26/Jul/2026:10:05:57 +0200] "GET //wp-cron.php HTTP/1.1" 185.238.75.151 [26/Jul/2026:10:05:57 +0200] "GET //wp-includes/js/wp-emoji-release.min.js HTTP/1.1" 185.238.75.151 [26/Jul/2026:10:05:58 +0200] "GET //index.php HTTP/1.1" 185.238.75.151 [30/Jul/2026:15:55:25 +0200] "GET / HTTP/1.1" 185.238.75.151 [30/Jul/2026:15:55:25 +0200] "GET //50d626ce-8c1e-11f1-a038-29d96c4c1dd3 HTTP/1.1" 185.238.75.151 [30/Jul/2026:15:55:25 +0200] "GET //wp-cron.php HTTP/1.1" 185.238.75.151 [30/Jul/2026:15:55:26 +0200] "GET //wp-includes/js/wp-emoji-release.min.js HTTP/1.1" 185.238.75.151 [30/Jul/2026:15:55:26 +0200] "GET //index.php HTTP/1.1" 185.238.75.151 [02/Aug/2026:08:12:20 +0200] "GET /?x877=h5Y7 HTTP/1.1" 185.238.75.151 [09/Aug/2026:19:30:25 +0200] "GET /?x517=OTs7 HTTP/1.1" 185.238.75.151 [10/Au show less	Port Scan Web App Attack
🇸🇮 102.220.161.102	18 Sep 2026	Unauthorized attempt to retrieve configuration file 102.220.161.102 [18/Sep/2026:04:47:01 +0200] "GE ... show more Unauthorized attempt to retrieve configuration file 102.220.161.102 [18/Sep/2026:04:47:01 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇬🇧 206.189.115.102	18 Sep 2026	Scanning for installed WordPress and vulnerabilities 206.189.115.102 [18/Sep/2026:04:44:37 +0200] "G ... show more Scanning for installed WordPress and vulnerabilities 206.189.115.102 [18/Sep/2026:04:44:37 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇮🇹 34.154.138.104	18 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x2) 34.154.138.104 [18/Sep/2026:03:00:32 +0200] "GET / HTTP/1.1" 34.154.138.104 [18/Sep/2026:03:00:32 +0200] "POST / HTTP/1.1" 34.154.138.104 [18/Sep/2026:03:00:32 +0200] "POST / HTTP/1.1" 34.154.138.104 [18/Sep/2026:03:00:32 +0200] "POST / HTTP/1.1" 34.154.138.104 [18/Sep/2026:03:00:32 +0200] "GET /.git/config HTTP/1.1" 34.154.138.104 [18/Sep/2026:03:00:33 +0200] "POST / HTTP/1.1" 34.154.138.104 [18/Sep/2026:03:00:33 +0200] "GET /.env HTTP/1.1" 34.154.138.104 [18/Sep/2026:03:00:33 +0200] "GET /.env.local HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 192.253.248.158	17 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x9), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x9), Unauthorized attempt to retrieve configuration file 192.253.248.158 [17/Sep/2026:21:56:45 +0200] "GET /.aws/credentials HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:45 +0200] "GET /aws-exports.js HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:46 +0200] "GET /api/v1/public-chatflows HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:54 +0200] "GET /api/v1/flows/ HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:55 +0200] "GET /telescope/api/environment HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:55 +0200] "GET /model/info HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:55 +0200] "GET /.env HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:55 +0200] "GET /.dev.vars HTTP/1.1" 192.253.248.158 [17/Sep/2026:21:56:55 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 192.253.248.158 [10/Sep/2026:09:08:33 +0200] "GET / HTTP/1.1" 192.253.248.158 [12/Sep/2026:21:04:38 +0200] "GET / HTTP/1.1" show less	Port Scan Web App Attack
🇧🇪 34.62.116.145	17 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x73), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x73), Unauthorized attempt to retrieve configuration file (x76) 34.62.116.145 [17/Sep/2026:20:36:43 +0200] "GET / HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:43 +0200] "GET /user/login HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:43 +0200] "GET /assets/js/index.js?v=1.17.3 HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.local HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.staging HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.development HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.production HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.dev HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.prod HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.test HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] "GET /.env.bak HTTP/1.1" 34.62.116.145 [17/Sep/2026:20:36:44 +0200] " show less	Port Scan Web App Attack
🇫🇷 143.244.57.120	17 Sep 2026	Unauthorized connection attempt / Port scanning (x19) 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "G ... show more Unauthorized connection attempt / Port scanning (x19) 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET / HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET / HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/Aug/2026:20:55:32 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 143.244.57.120 [14/ show less	Port Scan Web App Attack
🇧🇪 34.156.121.46	17 Sep 2026	Multi abuses [3]: Unauthorized connection attempt / Port scanning (x183), Unauthorized attempt to re ... show more Multi abuses [3]: Unauthorized connection attempt / Port scanning (x183), Unauthorized attempt to retrieve configuration file (x88), Scanning for installed WordPress and vulnerabilities (x8) 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET / HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.local HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.staging HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.dev HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.testing HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.old HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.production HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.backup HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.bak HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.test HTTP/1.1" 34.156.121.46 [17/Sep/2026:18:27:38 +0200] "GET /.env.prod HTTP/1.1" 34.156 show less	Port Scan Web App Attack
🇫🇷 82.102.18.118	17 Sep 2026	Unauthorized connection attempt / Port scanning (x19) 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GE ... show more Unauthorized connection attempt / Port scanning (x19) 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET / HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 82.102.18.118 [27/Jul/2026:21:15:10 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1. show less	Port Scan Web App Attack