AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ne1for23 joined AbuseIPDB in May 2016 and has reported 158,182 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 35.236.218.202	15 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 35.236.218.202 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 35.236.218.202 - - [04/Nov/2026:05:42:39 +0000] "GET /.git/config HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Hacking
🇺🇸 76.36.23.197	15 hours ago	Unauthorized access to SSH at 4/Nov/2026:05:40:13 +0000.	Port Scan SSH
🇫🇮 147.185.133.78	15 hours ago	Attempt to access invalid virtual host name (-). Likely attempt to exploit misconfiguration or acce ... show more Attempt to access invalid virtual host name (-). Likely attempt to exploit misconfiguration or access private resources. 147.185.133.78 - - [04/Nov/2026:05:31:26 +0000] "GET / HTTP/1.0" 403 153 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "-" show less	Hacking
🇷🇺 37.76.134.108	15 hours ago	Unauthorized access to SSH at 4/Nov/2026:05:26:52 +0000.	Port Scan SSH
🇺🇸 172.234.207.202	15 hours ago	Unauthorized access to SSH at 4/Nov/2026:05:24:57 +0000.	Port Scan SSH
🇶🇦 34.18.178.240	15 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 34.18.178.240 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 34.18.178.240 - - [04/Nov/2026:05:13:27 +0000] "GET /.git/config HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Hacking
🇺🇸 66.132.195.165	15 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 66.132.195.165 - - [04/Nov/2026:05:01:07 +0000] "GET / HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-" show less	Hacking
🇺🇸 35.185.103.27	15 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 35.185.103.27 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 35.185.103.27 - - [04/Nov/2026:05:00:44 +0000] "GET /.git/config HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Hacking
🇺🇸 168.235.148.211	15 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 168.235.148.211 - - [04/Nov/2026:04:52:42 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇵🇱 45.138.12.188	15 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 45.138.12.188 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 45.138.12.188 - - [04/Nov/2026:04:48:23 +0000] "GET /.git/config HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" show less	Hacking
🇺🇸 144.172.110.55	16 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 144.172.110.55 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 144.172.110.55 - - [04/Nov/2026:04:40:26 +0000] "GET /.git/config HTTP/1.1" 403 153 "-" "Mozilla/5.0 (X11; Linux x86_64)" show less	Hacking
🇫🇷 217.60.184.57	16 hours ago	217.60.184.57 - - [04/Nov/2026:04:37:31 +0000] "HEAD /blog/wp-login.php HTTP/1.1" 403 0 "-" "Mozilla ... show more 217.60.184.57 - - [04/Nov/2026:04:37:31 +0000] "HEAD /blog/wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 23.94.27.158	16 hours ago	23.94.27.158 - - [04/Nov/2026:04:32:34 +0000] "GET /xmlrpc.php HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X ... show more 23.94.27.158 - - [04/Nov/2026:04:32:34 +0000] "GET /xmlrpc.php HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 157.254.104.188	16 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 157.254.104.188 - - [04/Nov/2026:04:18:59 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇨🇬 102.141.51.78	16 hours ago	Unauthorized access to SSH at 4/Nov/2026:04:13:11 +0000.	Port Scan SSH
🇺🇸 172.169.234.94	16 hours ago	172.169.234.94 - - [04/Nov/2026:04:03:09 +0000] "GET /version HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgr ... show more 172.169.234.94 - - [04/Nov/2026:04:03:09 +0000] "GET /version HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgrab/0.x" show less	Bad Web Bot
🇳🇱 68.183.8.215	16 hours ago	68.183.8.215 - - [04/Nov/2026:03:49:13 +0000] "GET /wp-login.php HTTP/1.1" 403 153 "-" "Mozilla/5.0"	Web App Attack
🇩🇪 64.225.98.180	17 hours ago	64.225.98.180 - - [04/Nov/2026:03:41:40 +0000] "GET /wp-login.php HTTP/1.1" 403 153 "-" "Mozilla/5.0 ... show more 64.225.98.180 - - [04/Nov/2026:03:41:40 +0000] "GET /wp-login.php HTTP/1.1" 403 153 "-" "Mozilla/5.0" show less	Web App Attack
🇺🇸 66.245.172.17	17 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 66.245.172.17 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 66.245.172.17 - - [04/Nov/2026:03:26:02 +0000] "GET /.git/config HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" show less	Hacking
🇧🇪 34.156.35.188	17 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 34.156.35.188 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 34.156.35.188 - - [04/Nov/2026:03:23:03 +0000] "GET /.git/config HTTP/2.0" 403 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Hacking
🇩🇪 138.68.73.85	17 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 138.68.73.85 - - [04/Nov/2026:03:19:34 +0000] "GET / HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:159.0) Gecko/20100101 Firefox/159.0" "-" show less	Hacking
🇺🇸 173.239.227.26	17 hours ago	173.239.227.26 - - [04/Nov/2026:03:15:41 +0000] "GET /wp-login.php HTTP/1.1" 403 153 "-" "Mozilla/5. ... show more 173.239.227.26 - - [04/Nov/2026:03:15:41 +0000] "GET /wp-login.php HTTP/1.1" 403 153 "-" "Mozilla/5.0" show less	Web App Attack
🇬🇧 165.232.97.244	17 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 165.232.97.244 - - [04/Nov/2026:02:55:40 +0000] "GET / HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-" show less	Hacking
🇺🇸 157.254.67.134	18 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 157.254.67.134 - - [04/Nov/2026:02:43:15 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇳🇱 188.166.106.148	18 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 188.166.106.148 - - [04/Nov/2026:02:12:10 +0000] "GET / HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" "-" show less	Hacking