AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardian joined AbuseIPDB in February 2022 and has reported 61,958 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 34.181.137.191	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2) 34.181.137.191 [13/Sep/2026:00:03:52 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:52 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:52 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:53 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:53 +0200] "GET / HTTP/1.1" 34.181.137.191 [13/Sep/2026:00:03:53 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇹🇼 34.81.220.73	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x4) 34.81.220.73 [12/Sep/2026:23:07:50 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:50 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:50 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET / HTTP/1.1" 34.81.220.73 [12/Sep/2026:23:07:51 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇧🇪 34.62.51.20	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x23), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x23), Unauthorized attempt to retrieve configuration file (x16) 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET / HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 34.62.51.20 [12/Sep/2026:21:08:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%25 show less	Port Scan Web App Attack
🇩🇪 89.117.104.11	12 Sep 2026	Unauthorized connection attempt / Port scanning (x19) 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GE ... show more Unauthorized connection attempt / Port scanning (x19) 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET / HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET / HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19:57:28 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 89.117.104.11 [12/Sep/2026:19: show less	Port Scan Web App Attack
🇺🇸 34.181.153.163	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2) 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:54 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:55 +0200] "GET / HTTP/1.1" 34.181.153.163 [12/Sep/2026:19:00:55 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇮🇹 34.154.229.142	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x3) 34.154.229.142 [12/Sep/2026:18:12:54 +0200] "GET / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:54 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.git/config HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "POST / HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.env HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.env.local HTTP/1.1" 34.154.229.142 [12/Sep/2026:18:12:55 +0200] "GET /.env.production HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 34.16.153.150	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x4) 34.16.153.150 [12/Sep/2026:17:10:51 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:51 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET / HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:52 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 34.16.153.150 [12/Sep/2026:17:10:53 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 54.242.49.203	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x71), Unauthorized attempt to rem ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x71), Unauthorized attempt to remote code execution (CGI) (x2) 54.242.49.203 [12/Sep/2026:17:02:48 +0200] "GET / HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:02:48 +0200] "GET /user/login HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:05 +0200] "GET /assets/js/index.js?v=1.17.3 HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:06 +0200] "GET /actions/debug/default/index HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /app/config/pimcore/google-api-private-key.json HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/canal/config/1/1 HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/status/config HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /actions/debug/default/view HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /admin_dev.php HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/status/flags HTTP/1.1" 54.242.49.203 [12/Sep/2026:17:03:07 +0200] "GET /api/v1/targets HTTP/1.1" 54.242.4 show less	Port Scan Web App Attack
🇱🇹 77.90.185.230	12 Sep 2026	Multi abuses [4]: Unauthorized attempt to retrieve configuration file (x35), Unauthorized connection ... show more Multi abuses [4]: Unauthorized attempt to retrieve configuration file (x35), Unauthorized connection attempt / Port scanning (x26), Scanning for installed WordPress and vulnerabilities (x2), PHPUnit testing framework for PHP – Remote Code Execution 77.90.185.230 [28/Jul/2026:07:33:51 +0200] "GET /.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET / HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /sendgrid.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /twilio.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /api/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /phpinfo/ HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /dev/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /admin/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /laravel/.env HTTP/1.1" 77.90.185.230 [28/Jul/2026:07:33:52 +0200] "GET /.config.yaml HTTP/1.1" show less	Port Scan Web App Attack
🇫🇷 85.204.70.92	12 Sep 2026	Unauthorized connection attempt / Port scanning (x19) 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET ... show more Unauthorized connection attempt / Port scanning (x19) 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET / HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.70.92 [13/Aug/2026:20:46:16 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 85.204.7 show less	Port Scan Web App Attack
🇺🇸 4.148.8.97	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordP ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Scanning for installed WordPress and vulnerabilities 4.148.8.97 [12/Sep/2026:13:13:53 +0200] "GET / HTTP/1.1" 4.148.8.97 [12/Sep/2026:13:13:56 +0200] "GET /feed/ HTTP/1.1" 4.148.8.97 [12/Sep/2026:13:13:58 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇹🇼 35.201.244.246	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retrieve configuration file (x4) 35.201.244.246 [12/Sep/2026:12:37:51 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:51 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET / HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 35.201.244.246 [12/Sep/2026:12:37:52 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 34.24.223.220	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retrieve configuration file (x9) 34.24.223.220 [12/Sep/2026:12:20:17 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:17 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET / HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 34.24.223.220 [12/Sep/2026:12:20:20 +0200] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 34.24.223.220 show less	Port Scan Web App Attack
🇺🇸 155.2.215.15	12 Sep 2026	Scanning for installed WordPress and vulnerabilities 155.2.215.15 [12/Sep/2026:09:25:44 +0200] "GET ... show more Scanning for installed WordPress and vulnerabilities 155.2.215.15 [12/Sep/2026:09:25:44 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack
🇵🇰 154.57.218.86	12 Sep 2026	Unauthorized connection attempt / Port scanning 154.57.218.86 [12/Sep/2026:09:18:37 +0200] "POST /xm ... show more Unauthorized connection attempt / Port scanning 154.57.218.86 [12/Sep/2026:09:18:37 +0200] "POST /xmlrpc.php HTTP/1.1" show less	Port Scan Web App Attack
🇸🇬 35.240.153.252	12 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x4), Unauthorized attempt to retrieve configuration file (x5) 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET / HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET / HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET / HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:17 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 35.240.153.252 [12/Sep/2026:04:54:18 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? H show less	Port Scan Web App Attack
🇳🇱 93.123.109.178	12 Sep 2026	Unauthorized connection attempt / Port scanning (x20) 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "P ... show more Unauthorized connection attempt / Port scanning (x20) 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=/batch%2Fv1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /wp-json/Batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST //wp-json/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /wp-json/batch/v1/ HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "POST /blog/wp-json/batch/v1 HTTP/1.1" 93.123.109.178 [12/Sep/2026:04:52:34 +0200] "P show less	Port Scan Web App Attack
🇬🇧 35.203.211.130	12 Sep 2026	Unauthorized connection attempt / Port scanning	Port Scan Web App Attack
🇸🇬 34.142.182.133	11 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Unauthorized attempt to retrieve configuration file (x2) 34.142.182.133 [11/Sep/2026:22:16:26 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:26 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:26 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:27 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:27 +0200] "GET / HTTP/1.1" 34.142.182.133 [11/Sep/2026:22:16:27 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 45.148.10.120	11 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x7), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x7), Unauthorized attempt to retrieve configuration file (x3) 45.148.10.120 [06/Aug/2026:21:04:33 +0200] "GET / HTTP/1.1" 45.148.10.120 [16/Aug/2026:19:43:36 +0200] "GET / HTTP/1.1" 45.148.10.120 [25/Aug/2026:04:49:55 +0200] "GET /.git/config HTTP/1.1" 45.148.10.120 [27/Aug/2026:01:46:22 +0200] "GET / HTTP/1.1" 45.148.10.120 [04/Sep/2026:00:17:09 +0200] "GET /.git/config HTTP/1.1" 45.148.10.120 [11/Sep/2026:07:42:40 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 45.148.10.120 [11/Sep/2026:07:42:40 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 45.148.10.120 [11/Sep/2026:21:23:20 +0200] "GET /.env HTTP/1.1" 45.148.10.120 [11/Sep/2026:21:23:20 +0200] "GET /.env.production HTTP/1.1" 45.148.10.120 [11/Sep/2026:21:23:20 +0200] "GET /.aws/credentials HTTP/1.1" 45.148.10.120 [11/Sep/2026:21:23:20 +0200] "GET /aws.env HTTP/1.1" 45.148.10.120 [26/Jul/2026:06:37:52 +0200] "GET /.git/config HTTP/1.1" 45.148.10.120 [07/Sep/2026:09:11:02 +0200] "GET /.git/config show less	Port Scan Web App Attack
🇫🇷 185.177.72.49	11 Sep 2026	Multi abuses [2]: Unauthorized attempt to retrieve configuration file, Unauthorized connection attem ... show more Multi abuses [2]: Unauthorized attempt to retrieve configuration file, Unauthorized connection attempt / Port scanning (x20) 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /app/mailjet.env HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /user/login HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /plugins/%2eenv HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /user/login HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /%2eenv%2eold HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /user/login HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /eRp/%2eEnV HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /user/login HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /smtp/sendgrid%2eyaml HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /user/login HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /config/json/settings%2ebak HTTP/1.1" 185.177.72.49 [11/Sep/2026:20:08:36 +0200] "GET /home/ubuntu/%2essh/cert%2epem HTTP/1.1" 18 show less	Port Scan Web App Attack
🇫🇷 185.177.72.17	11 Sep 2026	Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x308), Unauthorized connectio ... show more Multi abuses [3]: Unauthorized attempt to retrieve configuration file (x308), Unauthorized connection attempt / Port scanning (x439), PHPUnit testing framework for PHP – Remote Code Execution (x5) 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /api/.env.production HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /user/login HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /admin/mail/mail_config%2eenv HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /backup/wp-config%2ebak HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /user/login HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /dashboard/%2evscode/sftp%2ejson HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /k8s/storageclass%2eyaml HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /user/login HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /Sources/API/%2eenv HTTP/1.1" 185.177.72.17 [11/Sep/2026:19:43:50 +0200] "GET /movie-app/server/%2eenv HTTP/1.1" 185.177.72.17 [11/Sep/2026:19: show less	Port Scan Web App Attack
🇳🇱 34.141.192.161	11 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x7), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x7), Unauthorized attempt to retrieve configuration file (x2) 34.141.192.161 [11/Sep/2026:19:16:24 +0200] "GET /__aws_leak_probe_aa37f1d0__ HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /@fs/root/.config/gcloud/application_default_credentials.json?raw?? HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /static../etc/passwd HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /@fs/proc/self/environ HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /.env?raw?? HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /static../.env HTTP/1.1" 34.141.192.161 [11/Sep/2026:19:16:29 +0200] "GET /.azure/credentials HTTP/1.1" show less	Port Scan Web App Attack
🇿🇦 34.35.139.10	11 Sep 2026	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x4) 34.35.139.10 [11/Sep/2026:19:11:57 +0200] "GET / HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:57 +0200] "POST / HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:57 +0200] "POST / HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:57 +0200] "POST / HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:57 +0200] "GET /.git/config HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:58 +0200] "POST / HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:58 +0200] "GET /.env HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:58 +0200] "GET /.env.local HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:58 +0200] "GET /.env.production HTTP/1.1" 34.35.139.10 [11/Sep/2026:19:11:58 +0200] "GET /.env.staging HTTP/1.1" show less	Port Scan Web App Attack
🇻🇳 123.30.233.48	11 Sep 2026	Scanning for installed WordPress and vulnerabilities 123.30.233.48 [11/Sep/2026:18:34:58 +0200] "GET ... show more Scanning for installed WordPress and vulnerabilities 123.30.233.48 [11/Sep/2026:18:34:58 +0200] "GET /wp-login.php HTTP/1.1" show less	Port Scan Web App Attack