AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Sandro , the webmaster of abuse.nya.so, joined AbuseIPDB in April 2017 and has reported 189,213 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇳🇱 176.65.139.36	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 8881 GET http://146.56.180.42:3333/ User-Agent: Mozilla/5.0 (W ... show more Honeypot [tpot]: HTTP/1.1 request on 8881 GET http://146.56.180.42:3333/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Accept: / Accept-Encoding: gzip; 8881 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 45.205.1.240	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 7777 GET / User-Agent: curl/7.68.0; 7777 [1] TCP Reported by: ... show more Honeypot [tpot]: HTTP/1.1 request on 7777 GET / User-Agent: curl/7.68.0; 7777 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 66.132.172.43	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 18789 [1] TCP Reported by: https://github.com ... show more Honeypot [tpot]: Empty payload (likely service probe); 18789 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 74.235.188.96	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (25 bytes of payload); 8091 [1] TCP Reported by: https://githu ... show more Honeypot [tpot]: Unauthorized traffic (25 bytes of payload); 8091 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 147.185.132.135	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 5678 GET / User-Agent: Hello from Palo Alto Networks, find out ... show more Honeypot [tpot]: HTTP/1.1 request on 5678 GET / User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity Accept-Encoding: gzip; 5678 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 204.76.203.206	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 8081 GET /SDK/webLanguage User-Agent: Mozilla/5.0; 8081 [1] TC ... show more Honeypot [tpot]: HTTP/1.1 request on 8081 GET /SDK/webLanguage User-Agent: Mozilla/5.0; 8081 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 205.210.31.47	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (513 bytes of payload); 4911 [1] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (513 bytes of payload); 4911 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇳 112.28.38.58	14 Jun 2026	Honeypot [tpot]: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.c ... show more Honeypot [tpot]: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
🇨🇳 59.32.96.159	14 Jun 2026	Honeypot [tpot]: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.c ... show more Honeypot [tpot]: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
🇷🇺 195.128.96.203	14 Jun 2026	Honeypot [tpot]: SMB traffic on port 445 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB	Hacking
🇺🇸 47.254.32.41	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 8415 [2] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 8415 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇦 68.183.201.87	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 10000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleW ... show more Honeypot [tpot]: HTTP/1.1 request on 10000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 10000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 5.187.35.26	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 8877 GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd User-Agen ... show more Honeypot [tpot]: HTTP/1.1 request on 8877 GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0 Accept: /; 8877 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 45.205.1.5	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (31 bytes of payload); 8728 [7] TCP Reported by: https://githu ... show more Honeypot [tpot]: Unauthorized traffic (31 bytes of payload); 8728 [7] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 66.132.195.44	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 52200 [1] TCP Reported by: https://github.com ... show more Honeypot [tpot]: Empty payload (likely service probe); 52200 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 66.132.195.73	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (59 bytes of payload); 4839 [2] TCP Reported by: https://githu ... show more Honeypot [tpot]: Unauthorized traffic (59 bytes of payload); 4839 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇬 79.124.40.174	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 9001 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show more Honeypot [tpot]: HTTP/1.1 request on 9001 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 Accept-Encoding: gzip; 9001 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 93.174.95.106	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (317 bytes of payload); 51235 [2] TCP Reported by: https://git ... show more Honeypot [tpot]: Unauthorized traffic (317 bytes of payload); 51235 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 20.168.120.101	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 8098 [2] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 8098 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 107.189.17.96	14 Jun 2026	Honeypot [tpot]: Brute-force attack detected on 23/TELNET • Credentials: root:tsgoingon, root:taZz@0 ... show more Honeypot [tpot]: Brute-force attack detected on 23/TELNET • Credentials: root:tsgoingon, root:taZz@01, root:unisheen, root:root, root:root123, root:root621, root:system, root:solokey, root:password, root:zlxx., root:xirtam, root:xc12345, root:xc3511, root:founder88, root:cxlinux, root:apix, root:antslq, root:adminpassword, root:a1sev5y7c39k, root:neworang, root:neworangetech, root:neworange88888888, root:oelinux123, root:ms3456, root:hslwificam, root:hkipc2016, root:icatch99, root:5up, root:070admin, root:1001chin, root:1234, root:12345, root:123456, root:1.oN%cpi, superadmin:Is$uper@dmin, support:support, guest:guest, guest:123456, default:default, bin:bin, admin:GeNeXiS@19, admin:BrAhMoS@15, admin:vertex25ektks123 • Number of login attempts: 43 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force Hacking
🇳🇱 45.198.224.18	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (31 bytes of payload); 8728 [7] TCP Reported by: https://githu ... show more Honeypot [tpot]: Unauthorized traffic (31 bytes of payload); 8728 [7] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 147.185.132.162	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 4343 [2] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 4343 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 151.243.11.35	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 8181 GET / User-Agent: curl/7.68.0; 8181 [1] TCP Reported by: ... show more Honeypot [tpot]: HTTP/1.1 request on 8181 GET / User-Agent: curl/7.68.0; 8181 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 160.119.76.33	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (19 bytes of payload); 1340 [1], 2030 [1], 3445 [1], 5434 [1], ... show more Honeypot [tpot]: Unauthorized traffic (19 bytes of payload); 1340 [1], 2030 [1], 3445 [1], 5434 [1], 7776 [1], 9296 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 167.94.146.61	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 7170 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 7170 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan