S S - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User S S joined AbuseIPDB in March 2025 and has reported 25 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
10.0.0.5	08 Jun 2026	test	Bad Web Bot
🇺🇸 104.237.151.174	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 197 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 197 HTTP 404 responses across 4 server(s), 20 distinct URLs probed. Sample paths: /auth/login.htm, /auth/login.html, /dashboard/auth/login/, /desktop/container/landing.jsp, /dfshealth.html/, /editor.php/, /forum/phpmyadmin/, /glpi/, /hm/login.action, /hmc/hybris. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 69.164.199.185	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 212 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 212 HTTP 404 responses across 4 server(s), 22 distinct URLs probed. Sample paths: /.bzr/branch/branch.conf, /.env/, /.git/config, /.hg/hgrc, /.svn/entries, /CitrixAccess/auth/login.aspx, /DesktopWeb/auth/login.aspx, /LogonPoint/tmindex.html, /UploadTest.aspx/, /XenApp1/auth/login.aspx. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 167.172.220.106	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 220 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 220 HTTP 404 responses across 4 server(s), 23 distinct URLs probed. Sample paths: /auth/login.htm, /auth/login.html, /cxcum/, /cxwebclient/Login.aspx, /dashboard/, /dashboard/auth/login/, /desktop/container/landing.jsp, /dfshealth.html/, /editor.php/, /forum/phpmyadmin/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 170.187.147.188	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 222 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 222 HTTP 404 responses across 4 server(s), 23 distinct URLs probed. Sample paths: /mifs/c/d/android.html, /mifs/login.jsp, /mifs/user/login.jsp, /mobile/index.php, /monitorix-cgi/monitorix.cgi, /mysql.php/, /nagiosfusion/, /nagioslogserver/, /nagiosna/, /nagiosxi/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 45.79.209.96	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 224 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 224 HTTP 404 responses across 4 server(s), 23 distinct URLs probed. Sample paths: /static/, /status.htm/, /status.php/, /system/login, /tiki-login.php/, /tiki-login_scr.php/, /typo3/phpmyadmin/, /ui/jobs, /ui/login/, /user.php/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 45.79.209.195	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 233 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 233 HTTP 404 responses across 7 server(s), 26 distinct URLs probed. Sample paths: /, /admin.php/, /admin/, /admin/index.html, /admin/login, /admin/login.html, /admin/login/, /admin/phpmyadmin/, /admin/spider.php, /adminer.php/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 159.89.227.141	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 236 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 236 HTTP 404 responses across 4 server(s), 24 distinct URLs probed. Sample paths: /admin.php/, /admin/, /admin/index.html, /admin/login, /admin/login.html, /admin/login/, /admin/phpmyadmin/, /admin/spider.php, /adminer.php/, /adminer/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 157.230.134.206	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across 4 server(s), 25 distinct URLs probed. Sample paths: /sslmgr/, /start.html/, /static/, /status.htm/, /status.php/, /system/login, /tiki-login.php/, /tiki-login_scr.php/, /typo3/phpmyadmin/, /ui/jobs. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 178.128.13.172	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across 4 server(s), 25 distinct URLs probed. Sample paths: /m_login.htm/, /manage/, /mifs/c/d/android.html, /mifs/login.jsp, /mifs/user/login.jsp, /mobile/index.php, /monitorix-cgi/monitorix.cgi, /mysql.php/, /nagiosfusion/, /nagioslogserver/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 206.189.226.255	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 271 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 271 HTTP 404 responses across 6 server(s), 31 distinct URLs probed. Sample paths: /+CSCOE+/logon.html, /.bzr/branch/branch.conf, /.env/, /.git/config, /.hg/hgrc, /.idea/WebServers.xml, /.svn/entries, /.vscode/sftp.json, /AirWatch/Login, /CFIDE/componentutils/login.cfm. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 165.22.187.177	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 370 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 370 HTTP 404 responses across 4 server(s), 37 distinct URLs probed. Sample paths: /EndUserPortal.jsp/, /_profiler/, /adfs/ls, /adfs/ls/, /appliance/, /atg/bcc, /auth/login.action, /auth/login.aspx, /auth/login.jsf, /auth/login/index.php. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 206.189.223.218	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 314 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 314 HTTP 404 responses across 4 server(s), 32 distinct URLs probed. Sample paths: /EndUserPortal.jsp/, /_profiler/, /adfs/ls, /adfs/ls/, /appliance/, /atg/bcc, /auth/login.action, /auth/login/index.php, /auth/login/page, /cgi-bin/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 143.198.189.5	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 480 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 480 HTTP 404 responses across 4 server(s), 48 distinct URLs probed. Sample paths: /Account/Login, /MagicInfo/login.htm, /OA_HTML/AppsLogin, /_layouts/15/error.aspx, /admin/config.php, /admin_login.html/, /adminui/, /adminui/welcome.php, /allversions/, /api/v1/version. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 167.99.228.200	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 459 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 459 HTTP 404 responses across 4 server(s), 47 distinct URLs probed. Sample paths: /Account/Login, /MagicInfo/login.htm, /OA_HTML/AppsLogin, /_layouts/15/error.aspx, /admin/config.php, /admin_login.html/, /adminui/, /adminui/welcome.php, /allversions/, /api/v1/version. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇨🇦 20.63.100.211	24 May 2026	PHP backdoor / webshell scanning (76 hits on a single server in 100k-line window). Probed dozens of ... show more PHP backdoor / webshell scanning (76 hits on a single server in 100k-line window). Probed dozens of well-known PHP backdoor filenames: /wp-trackback.php, /wp-ver.php, /wp-wz.php, /wp.php, /wuasr.php, /x.php, /xda.php, /yas.php, /yellow.php, /z.php, and similar variants. All 404. Source: Microsoft Azure VM (CA region). show less	Bad Web Bot Web App Attack
🇺🇸 64.225.36.28	24 May 2026	Heavy enterprise app login scanning across edge (4 servers, ~280 hits in 100k-line window). Probed: ... show more Heavy enterprise app login scanning across edge (4 servers, ~280 hits in 100k-line window). Probed: /MagicInfo/login.htm, /OA_HTML/AppsLogin, /admin_login.html, /adminui/welcome.php, /ccmadmin/showHome.do, /ccmservice/, /cgi-mod/index.cgi. All 404. DigitalOcean droplet. show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 159.65.65.222	24 May 2026	Large-scale enterprise app login scanning (3 servers, ~240 hits in 100k-line window). Probed: /Magic ... show more Large-scale enterprise app login scanning (3 servers, ~240 hits in 100k-line window). Probed: /MagicInfo/login.htm (Samsung MagicInfo), /OA_HTML/AppsLogin (Oracle EBS), /admin_login.html, /adminui/welcome.php, /ccmadmin/showHome.do (Cisco CCM), /ccmservice/, /cgi-mod/index.cgi. All 404. DigitalOcean droplet. show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 159.65.64.170	24 May 2026	Admin panel and WordPress brute-force scanning across our edge servers (4 servers, ~90 hits in 100k- ... show more Admin panel and WordPress brute-force scanning across our edge servers (4 servers, ~90 hits in 100k-line window). Probed: /web/phpmyadmin/, /webclient/Login.xhtml, /weblogin.htm, /webmin/, /wp-content/plugins/adminer/adminer.php, /wp-login.php, /xampp/phpmyadmin/. All 404. DigitalOcean droplet. show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 64.225.115.106	24 May 2026	Heavy automated scanning for vulnerable appliances / admin panels (3 servers, ~160 hits in 100k-line ... show more Heavy automated scanning for vulnerable appliances / admin panels (3 servers, ~160 hits in 100k-line window). Probed: /EndUserPortal.jsp, /appliance/, /auth/login/index.php, /cgi-bin/luci (OpenWrt), /cloud/, /ext-js/app/common/zld_product_spec.js (Zyxel), /geoserver/web. All 404. DigitalOcean droplet. show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 104.248.189.230	24 May 2026	Credentials brute-force / admin-panel scanning across our edge servers (3 servers, ~65 hits in 100k- ... show more Credentials brute-force / admin-panel scanning across our edge servers (3 servers, ~65 hits in 100k-line window). Probed: /webclient/Login.xhtml, /weblogin.htm, /webmin/, /wp-content/plugins/adminer/adminer.php, /wp-login.php, /xampp/phpmyadmin/, /zdm/login_xdm_uc.jsp. All 404. DigitalOcean droplet used as scanner. show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 173.230.155.160	24 May 2026	Web application scanning / vulnerability probing against multiple of our edge servers (3 servers, ~5 ... show more Web application scanning / vulnerability probing against multiple of our edge servers (3 servers, ~55 hits in 100k-line window). Probed paths include: /plc/webvisu.htm, /portal/webclient/index.html, /radiusmanager/user.php, /remote/login, /sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html, /search/admin/admin.php, /secure/Dashboard.jspa. All returned 404. Automated scanner from Linode. show less	Bad Web Bot Web App Attack
🇺🇸 139.87.113.52	04 Apr 2026	[04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/moin_static160beta1/robots.txt [04/Apr/2026 ... show more [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/moin_static160beta1/robots.txt [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/moin_static183/classic/css/common.css [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/moin_static12/classic/css/print.css [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/moin_static130/modern/css/screen.css [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/moin_static193/modernized/css/SlideShow.css [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/moin_static182/modern/css/print.css [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/.editorconfig [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/modules/system/assets/ui/js/inspector.validator.float.js [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/modules/system/assets/ui/js/inspector.engine.js [04/Apr/2026:11:51:24 +0000] 139.87.113.52 "GET /status/themes/demo/assets/less/theme/boot.less [04/Apr/2026:11:51:50 +0000] 139.87.113.52 "GET /status show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 139.87.112.114	23 Dec 2025	139.87.112.114 "GET /pics/reservation.png?&__user_uniq_id=415f62aac424c041395e33679f49ab33 139.87.1 ... show more 139.87.112.114 "GET /pics/reservation.png?&__user_uniq_id=415f62aac424c041395e33679f49ab33 139.87.112.114 "GET /images/top_up/dashboard/middle_right.png?&__user_uniq_id=7f1b253c468ea9d891557d159ea78b70 139.87.112.114 "GET /includes/tiny_mce/themes/simple/skins/default/content.css?&__user_uniq_id=ea349bef4a3c586f8256133746d754e2 139.87.112.114 "GET /www/editor/icons/html.png?&__user_uniq_id=b6edc14309c301cee9300f4dbf416608 139.87.112.114 "GET /moin_static123/rightsidebar/css/common.css?&__user_uniq_id=ece0985ec3acb1aeff7de38154690121 139.87.112.114 "GET /moin_static134/rightsidebar/css/print.css?&__user_uniq_id=dd551d7135d890e9d9b8f186af4b53a2 139.87.112.114 "GET /moin_static152/common/ie7/ie7-overflow.js?&__user_uniq_id=e446cfb96a0b56cfb2155e0908c83d0c 139.87.112.114 "GET /moin_static190beta3/modernized/css/projection.css?&__user_uniq_id=0191263c9eb1c759ce1a1223296011ce 139.87.112.114 "GET /moin_static197/modernized/css/common.css?&__user_uniq_id=cddf4140f1c4946ac65c5624f9b03f49 show less	Web App Attack
🇱🇹 194.32.122.74	14 Jul 2025	[14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.005 util001-sjc.tokbox.com "GET /Spheric/index.php HTTP ... show more [14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.005 util001-sjc.tokbox.com "GET /Spheric/index.php HTTP/1.1" 404 0 36716 - "0.004" [14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.005 util001-sjc.tokbox.com "GET /hubfs/subprocessors/docs/docs/struts2-core-apidocs/index-all.html HTTP/1.1" 404 0 36716 - "0.008" [14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.005 util001-sjc.tokbox.com "GET /admin/index.php HTTP/1.1" 404 0 36716 - "0.004" [14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.008 util001-sjc.tokbox.com "GET /restore-password/db.exe HTTP/1.1" 404 0 36716 - "0.008" [14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.005 util001-sjc.tokbox.com "GET /Zeuscart/index.php HTTP/1.1" 404 0 36716 - "0.004" [14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.005 util001-sjc.tokbox.com "GET /admin/index.php HTTP/1.1" 404 0 36716 - "0.004" [14/Jul/2025:12:16:35 +0000] 194.32.122.74 0.006 util001-sjc.tokbox.com "GET /hubfs/subprocessors/docs/docs/WW/cwiki.apache.org/WW/home.html HTTP/1.1" 404 0 36716 - "0.004" show less	Web App Attack