AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Sandro , the webmaster of abuse.nya.so, joined AbuseIPDB in April 2017 and has reported 189,213 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇨🇳 60.166.82.54	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 11122 [1] TCP Reported by: https://github.com ... show more Honeypot [tpot]: Empty payload (likely service probe); 11122 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇳 118.212.122.135	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 11122 GET / Accept: /; 11122 [1] TCP Reported by: https://gi ... show more Honeypot [tpot]: HTTP/1.1 request on 11122 GET / Accept: /; 11122 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇨🇳 101.71.209.116	14 Jun 2026	Honeypot [tpot]: Large payload (1457 bytes); 11122 [1] TCP Reported by: https://github.com/sefinek/T ... show more Honeypot [tpot]: Large payload (1457 bytes); 11122 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇨🇳 222.176.201.21	14 Jun 2026	Honeypot [tpot]: Large payload (1457 bytes); 11122 [1] TCP Reported by: https://github.com/sefinek/T ... show more Honeypot [tpot]: Large payload (1457 bytes); 11122 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 185.211.94.76	14 Jun 2026	Honeypot [tpot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP Reported by: https://githu ... show more Honeypot [tpot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇺🇸 52.165.81.251	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (128 bytes of payload); 9080 [2] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (128 bytes of payload); 9080 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 85.217.140.4	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 2484 [1], 11532 [1], 7685 [1], 2082 [1 ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 2484 [1], 11532 [1], 7685 [1], 2082 [1], 50830 [1], 7575 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 205.210.31.108	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 60243 [2] TCP Reported by: https://git ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 60243 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 205.210.31.76	14 Jun 2026	Honeypot [tpot]: HTTP header with cookie; 3388 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot [tpot]: HTTP header with cookie; 3388 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇨🇳 120.48.14.39	14 Jun 2026	2026-06-14T23:18:25.840542+02:00 pve02 sshd-session[62062]: pam_unix(sshd:auth): authentication fail ... show more 2026-06-14T23:18:25.840542+02:00 pve02 sshd-session[62062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.14.39 user=root 2026-06-14T23:18:28.063740+02:00 pve02 sshd-session[62062]: Failed password for root from 120.48.14.39 port 59674 ssh2 ... show less	Brute-Force SSH
🇧🇪 198.235.24.234	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic on 135/epmapper Reported by: https://github.com/sefinek/T-Pot- ... show more Honeypot [tpot]: Unauthorized traffic on 135/epmapper Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇲🇾 47.254.231.82	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 40000 [2] TCP Reported by: https://git ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 40000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 66.132.186.164	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 6757 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 6757 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇭🇰 45.142.154.42	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (110 bytes of payload); 8000 [7] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (110 bytes of payload); 8000 [7] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 195.96.139.126	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 2829 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 2829 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 45.205.1.244	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 8899 GET / User-Agent: curl/7.68.0; 8899 [1] TCP Reported by: ... show more Honeypot [tpot]: HTTP/1.1 request on 8899 GET / User-Agent: curl/7.68.0; 8899 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 104.248.14.21	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 8089 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWe ... show more Honeypot [tpot]: HTTP/1.1 request on 8089 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 8089 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 20.171.25.42	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (128 bytes of payload); 5223 [2] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (128 bytes of payload); 5223 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇪 198.235.24.246	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 10255 [2] TCP Reported by: https://git ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 10255 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇪 198.235.24.221	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 6001 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 6001 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 205.210.31.219	14 Jun 2026	Honeypot [tpot]: HTTP/1.1 request on 10250 GET / User-Agent: Hello from Palo Alto Networks, find ou ... show more Honeypot [tpot]: HTTP/1.1 request on 10250 GET / User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity Accept-Encoding: gzip; 10250 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇲🇾 47.250.130.240	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 4190 [3] TCP Reported by: https://gith ... show more Honeypot [tpot]: Unauthorized traffic (243 bytes of payload); 4190 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 85.239.234.47	14 Jun 2026	Honeypot [tpot]: Unauthorized traffic on 3306/mysqld Reported by: https://github.com/sefinek/T-Pot-T ... show more Honeypot [tpot]: Unauthorized traffic on 3306/mysqld Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 217.216.84.206	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 3333 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 3333 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 205.210.31.177	14 Jun 2026	Honeypot [tpot]: Empty payload (likely service probe); 5909 [1] TCP Reported by: https://github.com/ ... show more Honeypot [tpot]: Empty payload (likely service probe); 5909 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan