AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User S S joined AbuseIPDB in March 2025 and has reported 234 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇩🇪 159.69.31.200	11 Jul 2026	Automated web scanning detected from this IP against our edge servers. 120 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 120 HTTP 404 responses across 3 server(s), 112 distinct URLs probed. Sample paths: /%252e%252e/%252e%252e/%252e%252e/%252e%252e/etc/passwd, /%252e%252e/%252e%252e/%252e%252e/etc/passwd, /%252e%252e/%252e%252e/.env, /%252e%252e/%252e%252e/etc/passwd, /%2e%2e%5c/%2e%2e%5c/etc/passwd, /%5C..%5C..%5C.env/, /%5C..%5C..%5Cetc%5Cpasswd/, /..%5C..%5C..%5Cetc%5Cpasswd/, /..%C0%AF..%C0%AF.env/, /..%C0%AF..%C0%AFetc%C0%AFpasswd/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇩🇪 116.203.106.148	11 Jul 2026	Automated web scanning detected from this IP against our edge servers. 16 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 16 HTTP 404 responses across 1 server(s), 16 distinct URLs probed. Sample paths: /%252e%252e/%252e%252e/etc/apache2/apache2.conf, /%252e%252e/%252e%252e/etc/nginx/nginx.conf, /%252e%252e/%252e%252e/etc/ssh/sshd_config, /%252e%252e/%252e%252e/home/admin/.ssh/id_rsa, /%252e%252e/%252e%252e/home/deploy/.ssh/id_rsa, /%252e%252e/%252e%252e/home/ec2-user/.ssh/id_rsa, /%252e%252e/%252e%252e/home/git/.ssh/id_rsa, /%252e%252e/%252e%252e/home/ubuntu/.ssh/id_ed25519, /%252e%252e/%252e%252e/home/ubuntu/.ssh/id_rsa, /%252e%252e/%252e%252e/home/www-data/.ssh/id_rsa. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇳🇱 104.28.217.139	05 Jul 2026	Automated web scanning detected from this IP against our edge servers. 98 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 98 HTTP 404 responses across 1 server(s), 97 distinct URLs probed. Sample paths: /.aws/config, /.aws/credentials, /.boto/, /.docker/config.json, /.env.backup/, /.env.bak/, /.env.dev/, /.env.development/, /.env.example/, /.env.local/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇳🇱 5.61.209.92	29 Jun 2026	Malformed/empty HTTP requests (no method, URL or User-Agent) holding each connection open ~10-16s be ... show more Malformed/empty HTTP requests (no method, URL or User-Agent) holding each connection open ~10-16s before nginx returns 400. Sustained slowloris-style probing across multiple reverse-proxy hosts on 2026-06-29 UTC (e.g. 10:48-10:50, 10:54-10:55, 11:02-11:05). Hundreds of such hits per host. Source: data-center IP (koddos.net). show less	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 45.33.69.253	15 Jun 2026	Automated vulnerability scanning against nginx reverse-proxy servers on 2026-06-15. Bad web bot prob ... show more Automated vulnerability scanning against nginx reverse-proxy servers on 2026-06-15. Bad web bot probing webapp/exploit paths and sending requests without a valid Host header. rDNS academyforinternetresearch.org. show less	Bad Web Bot Web App Attack
🇺🇸 45.79.190.208	15 Jun 2026	Automated vulnerability scanning against nginx reverse-proxy servers on 2026-06-15. Bad web bot prob ... show more Automated vulnerability scanning against nginx reverse-proxy servers on 2026-06-15. Bad web bot probing webapp/exploit paths and sending requests without a valid Host header. rDNS academyforinternetresearch.org. show less	Bad Web Bot Web App Attack
🇺🇸 139.87.112.150	15 Jun 2026	Automated scanning of nginx reverse-proxy servers on 2026-06-15 from Oracle Cloud 139.87.112.0/24, s ... show more Automated scanning of nginx reverse-proxy servers on 2026-06-15 from Oracle Cloud 139.87.112.0/24, same campaign as 139.87.112.128. Repeated requests to / and /index.html plus malformed HTTP requests with no valid Host header (HTTP 400), part of a vulnerability-scanning cluster. show less	Bad Web Bot Web App Attack
🇺🇸 139.87.112.85	15 Jun 2026	Automated scanning of nginx reverse-proxy servers on 2026-06-15 from Oracle Cloud 139.87.112.0/24, s ... show more Automated scanning of nginx reverse-proxy servers on 2026-06-15 from Oracle Cloud 139.87.112.0/24, same campaign as 139.87.112.128. Repeated requests to / and /index.html plus malformed HTTP requests with no valid Host header (HTTP 400), part of a vulnerability-scanning cluster. show less	Bad Web Bot Web App Attack
🇺🇸 139.87.112.128	15 Jun 2026	Automated vulnerability scanning / exploit attempts against nginx reverse-proxy servers on 2026-06-1 ... show more Automated vulnerability scanning / exploit attempts against nginx reverse-proxy servers on 2026-06-15. Probed known RCE and auth-bypass paths including /mgmt/tm/util/bash (F5 BIG-IP CVE-2022-1388), /login.action (Apache Struts), /websso/SAML2/SSO/ (VMware vCenter), /ecommerce/control/main and /accounting/control/main (Apache OFBiz), /p/u/doAuthentication.do and /nf/auth/doAuthentication.do (Citrix). Hundreds of requests, many sent without a valid Host header. show less	Hacking Bad Web Bot Web App Attack
10.0.0.5	08 Jun 2026	test	Bad Web Bot
🇺🇸 104.237.151.174	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 197 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 197 HTTP 404 responses across 4 server(s), 20 distinct URLs probed. Sample paths: /auth/login.htm, /auth/login.html, /dashboard/auth/login/, /desktop/container/landing.jsp, /dfshealth.html/, /editor.php/, /forum/phpmyadmin/, /glpi/, /hm/login.action, /hmc/hybris. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 69.164.199.185	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 212 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 212 HTTP 404 responses across 4 server(s), 22 distinct URLs probed. Sample paths: /.bzr/branch/branch.conf, /.env/, /.git/config, /.hg/hgrc, /.svn/entries, /CitrixAccess/auth/login.aspx, /DesktopWeb/auth/login.aspx, /LogonPoint/tmindex.html, /UploadTest.aspx/, /XenApp1/auth/login.aspx. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 167.172.220.106	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 220 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 220 HTTP 404 responses across 4 server(s), 23 distinct URLs probed. Sample paths: /auth/login.htm, /auth/login.html, /cxcum/, /cxwebclient/Login.aspx, /dashboard/, /dashboard/auth/login/, /desktop/container/landing.jsp, /dfshealth.html/, /editor.php/, /forum/phpmyadmin/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 170.187.147.188	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 222 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 222 HTTP 404 responses across 4 server(s), 23 distinct URLs probed. Sample paths: /mifs/c/d/android.html, /mifs/login.jsp, /mifs/user/login.jsp, /mobile/index.php, /monitorix-cgi/monitorix.cgi, /mysql.php/, /nagiosfusion/, /nagioslogserver/, /nagiosna/, /nagiosxi/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 45.79.209.96	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 224 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 224 HTTP 404 responses across 4 server(s), 23 distinct URLs probed. Sample paths: /static/, /status.htm/, /status.php/, /system/login, /tiki-login.php/, /tiki-login_scr.php/, /typo3/phpmyadmin/, /ui/jobs, /ui/login/, /user.php/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 45.79.209.195	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 233 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 233 HTTP 404 responses across 7 server(s), 26 distinct URLs probed. Sample paths: /, /admin.php/, /admin/, /admin/index.html, /admin/login, /admin/login.html, /admin/login/, /admin/phpmyadmin/, /admin/spider.php, /adminer.php/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 157.230.134.206	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across 4 server(s), 25 distinct URLs probed. Sample paths: /sslmgr/, /start.html/, /static/, /status.htm/, /status.php/, /system/login, /tiki-login.php/, /tiki-login_scr.php/, /typo3/phpmyadmin/, /ui/jobs. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 159.89.227.141	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 236 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 236 HTTP 404 responses across 4 server(s), 24 distinct URLs probed. Sample paths: /admin.php/, /admin/, /admin/index.html, /admin/login, /admin/login.html, /admin/login/, /admin/phpmyadmin/, /admin/spider.php, /adminer.php/, /adminer/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 178.128.13.172	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 244 HTTP 404 responses across 4 server(s), 25 distinct URLs probed. Sample paths: /m_login.htm/, /manage/, /mifs/c/d/android.html, /mifs/login.jsp, /mifs/user/login.jsp, /mobile/index.php, /monitorix-cgi/monitorix.cgi, /mysql.php/, /nagiosfusion/, /nagioslogserver/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 165.22.187.177	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 370 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 370 HTTP 404 responses across 4 server(s), 37 distinct URLs probed. Sample paths: /EndUserPortal.jsp/, /_profiler/, /adfs/ls, /adfs/ls/, /appliance/, /atg/bcc, /auth/login.action, /auth/login.aspx, /auth/login.jsf, /auth/login/index.php. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 206.189.226.255	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 271 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 271 HTTP 404 responses across 6 server(s), 31 distinct URLs probed. Sample paths: /+CSCOE+/logon.html, /.bzr/branch/branch.conf, /.env/, /.git/config, /.hg/hgrc, /.idea/WebServers.xml, /.svn/entries, /.vscode/sftp.json, /AirWatch/Login, /CFIDE/componentutils/login.cfm. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 206.189.223.218	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 314 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 314 HTTP 404 responses across 4 server(s), 32 distinct URLs probed. Sample paths: /EndUserPortal.jsp/, /_profiler/, /adfs/ls, /adfs/ls/, /appliance/, /atg/bcc, /auth/login.action, /auth/login/index.php, /auth/login/page, /cgi-bin/. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 143.198.189.5	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 480 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 480 HTTP 404 responses across 4 server(s), 48 distinct URLs probed. Sample paths: /Account/Login, /MagicInfo/login.htm, /OA_HTML/AppsLogin, /_layouts/15/error.aspx, /admin/config.php, /admin_login.html/, /adminui/, /adminui/welcome.php, /allversions/, /api/v1/version. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇺🇸 167.99.228.200	08 Jun 2026	Automated web scanning detected from this IP against our edge servers. 459 HTTP 404 responses across ... show more Automated web scanning detected from this IP against our edge servers. 459 HTTP 404 responses across 4 server(s), 47 distinct URLs probed. Sample paths: /Account/Login, /MagicInfo/login.htm, /OA_HTML/AppsLogin, /_layouts/15/error.aspx, /admin/config.php, /admin_login.html/, /adminui/, /adminui/welcome.php, /allversions/, /api/v1/version. Tail of nginx meter.log. show less	Bad Web Bot Web App Attack
🇨🇦 20.63.100.211	24 May 2026	PHP backdoor / webshell scanning (76 hits on a single server in 100k-line window). Probed dozens of ... show more PHP backdoor / webshell scanning (76 hits on a single server in 100k-line window). Probed dozens of well-known PHP backdoor filenames: /wp-trackback.php, /wp-ver.php, /wp-wz.php, /wp.php, /wuasr.php, /x.php, /xda.php, /yas.php, /yellow.php, /z.php, and similar variants. All 404. Source: Microsoft Azure VM (CA region). show less	Bad Web Bot Web App Attack