AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Sandro , the webmaster of abuse.nya.so, joined AbuseIPDB in April 2017 and has reported 189,213 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 74.249.192.232	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 9080 [2] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 9080 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇬 78.128.112.30	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 63192 [1] TCP Reported by: https://github.com ... show more Honeypot [tpot]: Empty payload (likely service probe); 63192 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇭🇰 152.32.128.214	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 8008 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 8008 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 162.243.94.114	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 18789 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ... show more Honeypot [tpot]: HTTP/1.1 request on 18789 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 18789 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇹🇼 198.235.24.48	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 5985 POST /wsman POST Data: <s:Envelope xmlns:s="http://www.w3 ... show more Honeypot [tpot]: HTTP/1.1 request on 5985 POST /wsman POST Data: <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:wsmid="http://schemas.dmtf.org/wbem/wsman/identity/1/wsmanidentity.xsd"><s:Header/><s:Body><wsmid:Identify/></s:Body></s:Envelope>; 5985 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 64.89.163.85	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic on 27017/mongod Reported by: https://github.com/sefinek/T-Pot- ... show more Honeypot [tpot]: Unauthorized traffic on 27017/mongod Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇱🇹 45.227.254.170	14 Jun 2026	2026-06-14T21:41:14.475990+02:00 pve02 sshd-session[46151]: Failed password for root from 45.227.254 ... show more 2026-06-14T21:41:14.475990+02:00 pve02 sshd-session[46151]: Failed password for root from 45.227.254.170 port 52286 ssh2 2026-06-14T21:41:17.383258+02:00 pve02 sshd-session[46151]: Failed password for root from 45.227.254.170 port 52286 ssh2 ... show less	Brute-Force SSH
🇳🇱 46.151.178.13	14 Jun 2026	Honeypot [tpot]: Suspicious payload (possible command injection); 17000 [4] TCP Reported by: https:/ ... show more Honeypot [tpot]: Suspicious payload (possible command injection); 17000 [4] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking
🇺🇸 185.226.196.15	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (159 bytes of payload); 10000 [1] TCP Reported by: https://git ... show more Honeypot [tpot]: Unauthorized traffic (159 bytes of payload); 10000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 205.210.31.223	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 2379 GET / User-Agent: Hello from Palo Alto Networks, find out ... show more Honeypot [tpot]: HTTP/1.1 request on 2379 GET / User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity Accept-Encoding: gzip; 2379 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 205.210.31.254	14 Jun 2026	Honeypot [tpot]: Large payload (1483 bytes); 5557 [2] TCP Reported by: https://github.com/sefinek/T- ... show more Honeypot [tpot]: Large payload (1483 bytes); 5557 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇯🇵 8.216.17.22	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 3050 [4] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 3050 [4] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇸🇬 47.84.132.182	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 12533 [3] TCP Reported by: https://git ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 12533 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 66.132.186.191	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 6816 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 6816 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 185.226.196.12	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 10000 [6] TCP Reported by: https://github.com ... show more Honeypot [tpot]: Empty payload (likely service probe); 10000 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 185.226.196.13	14 Jun 2026	Honeypot [tpot]: SSH handshake/banner (828 bytes of payload); 10000 [1] TCP Reported by: https://git ... show more Honeypot [tpot]: SSH handshake/banner (828 bytes of payload); 10000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇺🇸 185.226.196.14	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (162 bytes of payload); 10000 [3] TCP Reported by: https://git ... show more Honeypot [tpot]: Unauthorized traffic (162 bytes of payload); 10000 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 20.65.194.66	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 1930 [2] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 1930 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 20.98.137.43	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 18245 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Acce ... show more Honeypot [tpot]: HTTP/1.1 request on 18245 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 18245 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 20.168.12.63	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 4786 [2] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 4786 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 66.132.195.58	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 10539 [1] TCP Reported by: https://github.com ... show more Honeypot [tpot]: Empty payload (likely service probe); 10539 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 147.185.132.87	14 Jun 2026	Honeypot [tpot]: Large payload (1483 bytes); 6443 [2] TCP Reported by: https://github.com/sefinek/T- ... show more Honeypot [tpot]: Large payload (1483 bytes); 6443 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 185.247.137.123	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 22006 [1] TCP Reported by: https://github.com ... show more Honeypot [tpot]: Empty payload (likely service probe); 22006 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 45.148.10.157	14 Jun 2026	2026-06-14T21:34:27.163236+02:00 pve02 sshd-session[45057]: Failed password for root from 45.148.10. ... show more 2026-06-14T21:34:27.163236+02:00 pve02 sshd-session[45057]: Failed password for root from 45.148.10.157 port 37052 ssh2 2026-06-14T21:34:30.390150+02:00 pve02 sshd-session[45057]: Failed password for root from 45.148.10.157 port 37052 ssh2 ... show less	Brute-Force SSH
🇮🇷 185.106.228.186	14 Jun 2026	Honeypot [tpot]: SMB traffic on port 445 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB	Hacking