AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User kkw joined AbuseIPDB in August 2024 and has reported 31,826 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇨🇦 85.217.149.73	01 Oct 2026	2026-10-02T00:49:38.817921+02:00 psifactor kernel: honeypot: IN=eno1 OUT= MAC=30:9c:23:ce:08:89:20:4 ... show more 2026-10-02T00:49:38.817921+02:00 psifactor kernel: honeypot: IN=eno1 OUT= MAC=30:9c:23:ce:08:89:20:4e:71:62:ac:db:08:00 SRC=85.217.149.73 DST=[REMOVED] LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=10474 PROTO=TCP SPT=43956 DPT=8010 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-02T00:50:43.613880+02:00 psifactor kernel: honeypot: IN=eno1 OUT= MAC=30:9c:23:ce:08:89:20:4e:71:62:ac:db:08:00 SRC=85.217.149.73 DST=[REMOVED] LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=7098 PROTO=TCP SPT=45497 DPT=8013 WINDOW=65535 RES=0x00 SYN URGP=0 ... (mode: port scanning, honeypot) show less	Port Scan
🇨🇦 34.19.150.167	01 Oct 2026	[REDACTED] 34.19.150.167 - - [02/Oct/2026:00:18:00 +0200] "GET /@fs/../.env?import&raw?? HTTP/2.0" 3 ... show more [REDACTED] 34.19.150.167 - - [02/Oct/2026:00:18:00 +0200] "GET /@fs/../.env?import&raw?? HTTP/2.0" 301 425 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 34.136.249.4	01 Oct 2026	[REDACTED] 34.136.249.4 - - [02/Oct/2026:00:11:22 +0200] "GET /.git/config HTTP/1.1" 404 4510 "-" "- ... show more [REDACTED] 34.136.249.4 - - [02/Oct/2026:00:11:22 +0200] "GET /.git/config HTTP/1.1" 404 4510 "-" "-" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇳🇱 34.141.202.234	01 Oct 2026	[REDACTED] 34.141.202.234 - - [01/Oct/2026:23:47:48 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env H ... show more [REDACTED] 34.141.202.234 - - [01/Oct/2026:23:47:48 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0" 404 343 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇲🇦 105.158.169.238	01 Oct 2026	[REDACTED] 105.158.169.238 - - [01/Oct/2026:23:28:18 +0200] "GET /.env HTTP/1.1" 302 5721 "-" "-" .. ... show more [REDACTED] 105.158.169.238 - - [01/Oct/2026:23:28:18 +0200] "GET /.env HTTP/1.1" 302 5721 "-" "-" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇫🇷 185.177.72.29	01 Oct 2026	[REDACTED] 185.177.72.29 - - [01/Oct/2026:22:39:54 +0200] "GET /backup/%2eenv HTTP/2.0" 403 418 "-" ... show more [REDACTED] 185.177.72.29 - - [01/Oct/2026:22:39:54 +0200] "GET /backup/%2eenv HTTP/2.0" 403 418 "-" "curl/8.7.1" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 2602:fa59:2:2309::1	01 Oct 2026	[REDACTED] 2602:fa59:2:2309::1 - - [01/Oct/2026:22:19:12 +0200] "GET /.git/config HTTP/1.1" 301 4697 ... show more [REDACTED] 2602:fa59:2:2309::1 - - [01/Oct/2026:22:19:12 +0200] "GET /.git/config HTTP/1.1" 301 4697 "http://upload.psifactor.pl/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇯🇵 34.146.58.157	01 Oct 2026	[REDACTED] 34.146.58.157 - - [01/Oct/2026:21:31:01 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 301 398 "- ... show more [REDACTED] 34.146.58.157 - - [01/Oct/2026:21:31:01 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 301 398 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 198.144.189.70	01 Oct 2026	[REDACTED] 198.144.189.70 - - [01/Oct/2026:18:37:50 +0200] "GET /old/ HTTP/1.1" 404 551 "-" "Mozilla ... show more [REDACTED] 198.144.189.70 - - [01/Oct/2026:18:37:50 +0200] "GET /old/ HTTP/1.1" 404 551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 34.86.56.156	01 Oct 2026	[REDACTED] 34.86.56.156 - - [01/Oct/2026:17:34:08 +0200] "GET /userfiles/x?path=../../.env HTTP/2.0" ... show more [REDACTED] 34.86.56.156 - - [01/Oct/2026:17:34:08 +0200] "GET /userfiles/x?path=../../.env HTTP/2.0" 301 426 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 136.69.184.242	01 Oct 2026	[REDACTED] 136.69.184.242 - - [01/Oct/2026:17:10:52 +0200] "GET /docker-compose.yml HTTP/2.0" 404 34 ... show more [REDACTED] 136.69.184.242 - - [01/Oct/2026:17:10:52 +0200] "GET /docker-compose.yml HTTP/2.0" 404 347 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇹🇼 34.81.72.158	01 Oct 2026	[REDACTED] 34.81.72.158 - - [01/Oct/2026:17:08:37 +0200] "GET /dist../.env HTTP/2.0" 404 343 "-" "Mo ... show more [REDACTED] 34.81.72.158 - - [01/Oct/2026:17:08:37 +0200] "GET /dist../.env HTTP/2.0" 404 343 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 34.74.128.140	01 Oct 2026	[REDACTED] 34.74.128.140 - - [01/Oct/2026:16:07:55 +0200] "GET /.ssh/id_rsa HTTP/2.0" 404 352 "-" "D ... show more [REDACTED] 34.74.128.140 - - [01/Oct/2026:16:07:55 +0200] "GET /.ssh/id_rsa HTTP/2.0" 404 352 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 35.245.39.6	01 Oct 2026	[REDACTED] 35.245.39.6 - - [01/Oct/2026:15:17:31 +0200] "GET /cache/original/%2e%2e/.env HTTP/2.0" 3 ... show more [REDACTED] 35.245.39.6 - - [01/Oct/2026:15:17:31 +0200] "GET /cache/original/%2e%2e/.env HTTP/2.0" 301 398 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇹🇼 35.229.171.139	01 Oct 2026	[REDACTED] 35.229.171.139 - - [01/Oct/2026:15:14:39 +0200] "GET /.//.env HTTP/2.0" 404 347 "-" "Mozi ... show more [REDACTED] 35.229.171.139 - - [01/Oct/2026:15:14:39 +0200] "GET /.//.env HTTP/2.0" 404 347 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇦 95.46.213.148	01 Oct 2026	[REDACTED] 95.46.213.148 - - [01/Oct/2026:14:55:03 +0200] "GET /.env HTTP/2.0" 404 341 "-" "Mozilla/ ... show more [REDACTED] 95.46.213.148 - - [01/Oct/2026:14:55:03 +0200] "GET /.env HTTP/2.0" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇻🇳 116.110.209.18	01 Oct 2026	2026-10-01T13:42:24.218230+02:00 valhalla sshd-session[401307]: Failed keyboard-interactive/pam for ... show more 2026-10-01T13:42:24.218230+02:00 valhalla sshd-session[401307]: Failed keyboard-interactive/pam for invalid user admin from 116.110.209.18 port 36082 ssh2 ... <tp_comment> show less	Brute-Force SSH
🇩🇪 35.242.231.163	01 Oct 2026	[REDACTED] 35.242.231.163 - - [01/Oct/2026:13:31:48 +0200] "GET /api/console/api_server?sense_versio ... show more [REDACTED] 35.242.231.163 - - [01/Oct/2026:13:31:48 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 404 343 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇸🇬 34.87.50.163	01 Oct 2026	[REDACTED] 34.87.50.163 - - [01/Oct/2026:12:30:32 +0200] "GET /docker-compose.yml HTTP/2.0" 404 341 ... show more [REDACTED] 34.87.50.163 - - [01/Oct/2026:12:30:32 +0200] "GET /docker-compose.yml HTTP/2.0" 404 341 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇬🇧 129.121.94.183	01 Oct 2026	2026-10-01T11:53:02.324080+02:00 valhalla sshd-session[396188]: Disconnected from authenticating use ... show more 2026-10-01T11:53:02.324080+02:00 valhalla sshd-session[396188]: Disconnected from authenticating user root 129.121.94.183 port 45756 [preauth] ... <tp_comment> show less	Brute-Force SSH
🇨🇳 47.93.192.43	01 Oct 2026	[REDACTED] 47.93.192.43 - - [01/Oct/2026:11:03:27 +0200] "GET /old/xmlrpc.php HTTP/2.0" 403 418 "htt ... show more [REDACTED] 47.93.192.43 - - [01/Oct/2026:11:03:27 +0200] "GET /old/xmlrpc.php HTTP/2.0" 403 418 "http://szkola.gorajec.pl/old/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 18.218.118.203	01 Oct 2026	2026-10-01T10:47:29.681831+02:00 psifactor kernel: honeypot: IN=eno1 OUT= MAC=30:9c:23:ce:08:89:20:4 ... show more 2026-10-01T10:47:29.681831+02:00 psifactor kernel: honeypot: IN=eno1 OUT= MAC=30:9c:23:ce:08:89:20:4e:71:62:ac:db:08:00 SRC=18.218.118.203 DST=[REMOVED] LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37466 DF PROTO=TCP SPT=46390 DPT=8011 WINDOW=62727 RES=0x00 SYN URGP=0 2026-10-01T10:47:30.729916+02:00 psifactor kernel: honeypot: IN=eno1 OUT= MAC=30:9c:23:ce:08:89:20:4e:71:62:ac:db:08:00 SRC=18.218.118.203 DST=[REMOVED] LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37467 DF PROTO=TCP SPT=46390 DPT=8011 WINDOW=62727 RES=0x00 SYN URGP=0 ... (mode: port scanning, honeypot) show less	Port Scan
🇹🇼 35.187.149.130	01 Oct 2026	[REDACTED] 35.187.149.130 - - [01/Oct/2026:10:18:12 +0200] "GET /docker-compose.yml HTTP/2.0" 404 34 ... show more [REDACTED] 35.187.149.130 - - [01/Oct/2026:10:18:12 +0200] "GET /docker-compose.yml HTTP/2.0" 404 347 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇸🇬 157.245.52.131	01 Oct 2026	[REDACTED] 157.245.52.131 - - [01/Oct/2026:09:59:56 +0200] "GET /.env.example HTTP/1.1" 302 4838 "-" ... show more [REDACTED] 157.245.52.131 - - [01/Oct/2026:09:59:56 +0200] "GET /.env.example HTTP/1.1" 302 4838 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇺🇸 34.168.91.88	01 Oct 2026	[REDACTED] 34.168.91.88 - - [01/Oct/2026:09:28:26 +0200] "GET /build../.env HTTP/2.0" 404 347 "-" "M ... show more [REDACTED] 34.168.91.88 - - [01/Oct/2026:09:28:26 +0200] "GET /build../.env HTTP/2.0" 404 347 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack