Guardian - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardian joined AbuseIPDB in February 2022 and has reported 58,504 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 64.62.197.122	14 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇬🇧 185.198.243.177	14 hours ago	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress and vulnerabilities (x3) 185.198.243.177 [11/Jul/2026:01:54:06] "GET /000.php HTTP/1.1" 185.198.243.177 [11/Jul/2026:01:54:07] "GET /wp-admin/css/index.php HTTP/1.1" 185.198.243.177 [11/Jul/2026:01:54:07] "GET /wp-content/plugins/index.php HTTP/1.1" 185.198.243.177 [11/Jul/2026:01:54:07] "GET /wp-content/index.php HTTP/1.1" show less	Port Scan Web App Attack
🇩🇪 161.35.74.182	15 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇺🇸 20.55.97.129	15 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇺🇸 18.218.118.203	15 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇵🇱 54.38.50.21	16 hours ago	Unauthorized connection attempt / Port scanning (x5) 54.38.50.21 [11/Jul/2026:00:08:22] "GET / HTTP/ ... show more Unauthorized connection attempt / Port scanning (x5) 54.38.50.21 [11/Jul/2026:00:08:22] "GET / HTTP/1.1" 54.38.50.21 [11/Jul/2026:00:08:23] "GET //99ff32f8-7cbc-11f1-aa62-b51041f83b11 HTTP/1.1" 54.38.50.21 [11/Jul/2026:00:08:23] "GET //wp-cron.php HTTP/1.1" 54.38.50.21 [11/Jul/2026:00:08:23] "GET //wp-includes/js/wp-emoji-release.min.js HTTP/1.1" 54.38.50.21 [11/Jul/2026:00:08:23] "GET //index.php HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 165.227.62.247	16 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇻🇳 180.93.255.222	16 hours ago	Unauthorized attempt to retrieve configuration file 180.93.255.222 [10/Jul/2026:23:38:27] "GET /.env ... show more Unauthorized attempt to retrieve configuration file 180.93.255.222 [10/Jul/2026:23:38:27] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇩🇪 104.248.29.44	16 hours ago	Unauthorized connection attempt / Port scanning (x2) 104.248.29.44 [10/Jul/2026:23:30:59] "GET /solr ... show more Unauthorized connection attempt / Port scanning (x2) 104.248.29.44 [10/Jul/2026:23:30:59] "GET /solr/admin/info/system HTTP/1.1" 104.248.29.44 [10/Jul/2026:23:30:59] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 52.179.93.129	18 hours ago	Unauthorized connection attempt / Port scanning (x2) 52.179.93.129 [10/Jul/2026:21:48:21] "GET /wp/w ... show more Unauthorized connection attempt / Port scanning (x2) 52.179.93.129 [10/Jul/2026:21:48:21] "GET /wp/wp-login.php HTTP/1.1" 52.179.93.129 [10/Jul/2026:21:48:21] "POST /wp/wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇩🇪 207.154.201.114	18 hours ago	Unauthorized connection attempt / Port scanning (x2) 207.154.201.114 [10/Jul/2026:21:48:16] "GET /so ... show more Unauthorized connection attempt / Port scanning (x2) 207.154.201.114 [10/Jul/2026:21:48:16] "GET /solr/admin/info/system HTTP/1.1" 207.154.201.114 [10/Jul/2026:21:48:16] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 66.132.172.211	19 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇰🇷 211.216.58.204	19 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇺🇸 20.62.207.241	20 hours ago	Unauthorized connection attempt / Port scanning (x2) 20.62.207.241 [10/Jul/2026:19:56:44] "GET /wp/w ... show more Unauthorized connection attempt / Port scanning (x2) 20.62.207.241 [10/Jul/2026:19:56:44] "GET /wp/wp-login.php HTTP/1.1" 20.62.207.241 [10/Jul/2026:19:56:45] "POST /wp/wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 195.170.172.128	20 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇳🇱 158.94.210.18	21 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇭🇰 199.45.155.65	21 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇺🇸 147.185.132.17	22 hours ago	Unauthorized connection attempt to SSH (x5) Scanned ports: 55326, 61432, 61440, 64200, 59472	Port Scan Brute-Force SSH
🇩🇪 167.172.189.161	22 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇩🇪 207.154.192.162	22 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇫🇷 185.177.72.12	22 hours ago	Multi abuses [3]: Unauthorized connection attempt / Port scanning (x13), Unauthorized attempt to ret ... show more Multi abuses [3]: Unauthorized connection attempt / Port scanning (x13), Unauthorized attempt to retrieve configuration file, Attempt to get system configuration (sftp-config.json) 185.177.72.12 [10/Jul/2026:18:05:19] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET / HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.aws/config HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.aws/credentials HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.docker/config.json HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.env HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.local HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.production HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.profile HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.remote HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.ssh/sftp-config.json HTTP/1.1" 185.177.72.12 [10/Jul/2026:18:05:19] "GET /.vscode/settings.json HTTP/1.1" 185.17 show less	Port Scan Web App Attack
🇺🇸 45.45.237.8	22 hours ago	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x6) 45.45.237.8 [10/Jul/2026:17:54:37] "GET /.git/config HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:38] "GET /.git/HEAD HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:38] "GET / HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:39] "GET /.env.production HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:39] "GET /.env HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:39] "GET /.env.local HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:40] "GET /.env.backup HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:40] "GET /.env.bak HTTP/1.1" 45.45.237.8 [10/Jul/2026:17:54:40] "GET /.env.development HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 185.242.226.19	22 hours ago	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇫🇷 104.28.211.186	23 hours ago	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retrieve configuration file 104.28.211.186 [10/Jul/2026:16:49:18] "GET / HTTP/1.1" 104.28.211.186 [10/Jul/2026:16:49:23] "GET /.gitlab-ci.yml HTTP/1.1" 104.28.211.186 [10/Jul/2026:16:49:26] "GET /z9x8c7v6b5-debug-trigger-****.* HTTP/1.1" 104.28.211.186 [10/Jul/2026:16:49:27] "GET /.git/HEAD HTTP/1.1" 104.28.211.186 [10/Jul/2026:16:49:29] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇮🇳 110.44.9.35	10 Jul 2026	Unauthorized connection attempt / Port scanning 110.44.9.35 [10/Jul/2026:14:46:53] "POST /xmlrpc.php ... show more Unauthorized connection attempt / Port scanning 110.44.9.35 [10/Jul/2026:14:46:53] "POST /xmlrpc.php HTTP/1.1" show less	Port Scan Web App Attack