AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardian joined AbuseIPDB in February 2022 and has reported 61,514 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 104.196.167.251	20 hours ago	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retrieve configuration file (x3) 104.196.167.251 [13/Sep/2026:09:15:33 +0200] "GET / HTTP/1.1" 104.196.167.251 [13/Sep/2026:09:15:34 +0200] "GET /img../.env HTTP/1.1" 104.196.167.251 [13/Sep/2026:09:15:34 +0200] "GET /images../.env HTTP/1.1" 104.196.167.251 [13/Sep/2026:09:15:34 +0200] "GET /rclone.conf HTTP/1.1" 104.196.167.251 [13/Sep/2026:09:15:34 +0200] "GET /z9x8c7v6b5-debug-trigger-****.* HTTP/1.1" 104.196.167.251 [13/Sep/2026:09:15:34 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 104.196.167.251 [13/Sep/2026:09:15:34 +0200] "GET /uploads../.env HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 128.90.128.10	21 hours ago	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordP ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordPress and vulnerabilities 128.90.128.10 [13/Sep/2026:08:25:58 +0200] "GET / HTTP/1.1" 128.90.128.10 [13/Sep/2026:08:25:59 +0200] "GET /wp-json/ HTTP/1.1" 128.90.128.10 [13/Sep/2026:08:25:59 +0200] "GET / HTTP/1.1" 128.90.128.10 [13/Sep/2026:08:25:59 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 136.70.80.125	13 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x4) 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET / HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET / HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET / HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET / HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 136.70.80.125 [13/Sep/2026:06:05:30 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇹🇼 35.185.173.241	13 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2) 35.185.173.241 [13/Sep/2026:06:00:31 +0200] "GET / HTTP/1.1" 35.185.173.241 [13/Sep/2026:06:00:31 +0200] "GET / HTTP/1.1" 35.185.173.241 [13/Sep/2026:06:00:32 +0200] "GET / HTTP/1.1" 35.185.173.241 [13/Sep/2026:06:00:32 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 35.185.173.241 [13/Sep/2026:06:00:32 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 35.185.173.241 [13/Sep/2026:06:00:32 +0200] "GET / HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 34.11.8.149	13 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file 34.11.8.149 [13/Sep/2026:03:21:41 +0200] "GET / HTTP/1.1" 34.11.8.149 [13/Sep/2026:03:21:41 +0200] "GET / HTTP/1.1" 34.11.8.149 [13/Sep/2026:03:21:41 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.11.8.149 [13/Sep/2026:03:21:41 +0200] "GET / HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 35.185.58.166	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x48), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x48), Unauthorized attempt to retrieve configuration file (x21) 35.185.58.166 [13/Sep/2026:01:32:16 +0200] "GET / HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /id_ed25519 HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /id_dsa HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /z9x8c7v6b5-debug-trigger-****.* HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /rclone.conf HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /account HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /secure HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /login HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /.ssh/known_hosts HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /signin HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /id_rsa HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /sign-in HTTP/1.1" 35.185.58.166 [13/Sep/2026:01:32:17 +0200] "GET /auth HTT show less	Port Scan Web App Attack
🇺🇸 34.181.137.191	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2) 34.181.137.191 [13/Sep/2026:00:03:52 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:52 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:52 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:53 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:53 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:53 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇹🇼 34.81.220.73	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x4) 34.81.220.73 [12/Sep/2026:23:07:50 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:50 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:50 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇧🇪 34.62.51.20	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x23), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x23), Unauthorized attempt to retrieve configuration file (x16) 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%25 show less	Port Scan Web App Attack
🇩🇪 89.117.104.11	12 Sep 2026	Unauthorized connection attempt / Port scanning (x19) 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GE ... show more Unauthorized connection attempt / Port scanning (x19) 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET / HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET / HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19: show less	Port Scan Web App Attack
🇺🇸 34.181.153.163	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2) 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:55 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:55 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇮🇹 34.154.229.142	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x3) 34.154.229.142 [12/Sep/2026:18:12:54 +0200] "GET / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:54 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.git/config HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.env HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.env.local HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.env.production HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 34.16.153.150	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x4) 34.16.153.150 [12/Sep/2026:17:10:51 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:51 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:53 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 54.242.49.203	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x71), Unauthorized attempt to rem ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x71), Unauthorized attempt to remote code execution (CGI) (x2) 54.242.49.203 [12/Sep/2026:17:02:48 +0200] "GET / HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:02:48 +0200] "GET /user/login HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:05 +0200] "GET /assets/js/index.js?v=1.17.3 HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:06 +0200] "GET /actions/debug/default/index HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /app/config/pimcore/google-api-private-key.json HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/canal/config/1/1 HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/status/config HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /actions/debug/default/view HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /admin_dev.php HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/status/flags HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/targets HTTP/1.1" 54.242.4 show less	Port Scan Web App Attack
🇱🇹 77.90.185.230	12 Sep 2026	Multi abuses [4]: Unauthorized attempt to retrieve configuration file (x35), Unauthorized connection ... show more Multi abuses [4]: Unauthorized attempt to retrieve configuration file (x35), Unauthorized connection attempt / Port scanning (x26), Scanning for installed WordPress and vulnerabilities (x2), PHPUnit testing framework for PHP – Remote Code Execution 77.90.185.230 [28/Jul/2026:07:33:51 +0200] "GET /.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET / HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /sendgrid.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /twilio.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /api/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /phpinfo/ HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /dev/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /admin/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /laravel/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /.config.yaml HTTP/1.1" show less	Port Scan Web App Attack
🇫🇷 85.204.70.92	12 Sep 2026	Unauthorized connection attempt / Port scanning (x19) 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET ... show more Unauthorized connection attempt / Port scanning (x19) 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET / HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.7 show less	Port Scan Web App Attack
🇺🇸 4.148.8.97	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordP ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordPress and vulnerabilities 4.148.8.97 [12/Sep/2026:13:13:53 +0200] "GET / HTTP/1.1" 4.148.8.97 [12/Sep/2026:13:13:56 +0200] "GET /feed/ HTTP/1.1" 4.148.8.97 [12/Sep/2026:13:13:58 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇹🇼 35.201.244.246	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retrieve configuration file (x4) 35.201.244.246 [12/Sep/2026:12:37:51 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:51 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 34.24.223.220	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retrieve configuration file (x9) 34.24.223.220 [12/Sep/2026:12:20:17 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:17 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 34.24.223.220 show less	Port Scan Web App Attack
🇺🇸 155.2.215.15	12 Sep 2026	Scanning for installed WordPress and vulnerabilities 155.2.215.15 [12/Sep/2026:09:25:44 +0200] "GET ... show more Scanning for installed WordPress and vulnerabilities 155.2.215.15 [12/Sep/2026:09:25:44 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇵🇰 154.57.218.86	12 Sep 2026	Unauthorized connection attempt / Port scanning 154.57.218.86 [12/Sep/2026:09:18:37 +0200] "POST /xm ... show more Unauthorized connection attempt / Port scanning 154.57.218.86 [12/Sep/2026:09:18:37 +0200] "POST /xmlrpc.php HTTP/1.1" show less	Port Scan Web App Attack
🇸🇬 35.240.153.252	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retrieve configuration file (x5) 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET / HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET / HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET / HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? H show less	Port Scan Web App Attack
🇳🇱 93.123.109.178	12 Sep 2026	Unauthorized connection attempt / Port scanning (x20) 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "P ... show more Unauthorized connection attempt / Port scanning (x20) 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=/batch%2Fv1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /wp-json/Batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST //wp-json/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /wp-json/batch/v1/ HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /blog/wp-json/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "P show less	Port Scan Web App Attack
🇬🇧 35.203.211.130	12 Sep 2026	Unauthorized connection attempt / Port scanning	Port Scan Web App Attack
🇸🇬 34.142.182.133	11 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2) 34.142.182.133 [11/Sep/2026:22:16:26 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:26 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:26 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:27 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:27 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:27 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack