AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User baz smh joined AbuseIPDB in March 2025 and has reported 64 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇫🇮 144.31.169.21	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.169.21 - - [14/May/2026:21:17:43 +0000] "GET /wp-config.php.bak HTTP/1.1" 403 1943 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇮 144.31.169.155	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "920350"] [msg "IP address found in Host header"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.169.155 - - [15/May/2026:18:35:05 +0000] "GET /administrator/ HTTP/1.1" 403 258 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" show less	Hacking Web App Attack
🇩🇪 144.31.223.155	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.223.155 - - [16/May/2026:22:13:53 +0000] "GET /telescope/requests HTTP/1.1" 403 1294 "-" "python-requests/2.31.0" show less	Hacking Web App Attack
🇩🇪 144.31.223.17	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.223.17 - - [14/May/2026:23:10:55 +0000] "GET /phpinfo.php HTTP/1.1" 403 1352 "-" "python-requests/2.31.0" show less	Hacking Web App Attack
🇩🇪 144.31.148.59	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "920350"] [msg "IP address found in Host header"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.148.59 - - [16/May/2026:12:46:56 +0000] "GET /wp-config.php~ HTTP/1.1" 403 735 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Hacking Web App Attack
🇩🇪 144.31.148.232	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.148.232 - - [15/May/2026:23:54:36 +0000] "GET /admin/config.php HTTP/1.1" 403 1696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Hacking Web App Attack
🇫🇮 95.85.251.82	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 95.85.251.82 - - [16/May/2026:10:38:24 +0000] "GET /administrator/ HTTP/1.1" 403 398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 144.31.223.110	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.223.110 - - [14/May/2026:18:30:29 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 715 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Hacking Web App Attack
🇫🇮 144.31.169.226	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.169.226 - - [14/May/2026:19:32:46 +0000] "GET /swagger.json HTTP/1.1" 403 749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Hacking Web App Attack
🇩🇪 144.31.148.191	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "920350"] [msg "IP address found in Host header"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.148.191 - - [14/May/2026:17:50:38 +0000] "GET /debug/pprof/ HTTP/1.1" 403 710 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 144.31.148.87	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.148.87 - - [14/May/2026:17:57:53 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 403 1701 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇮 95.85.251.183	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 95.85.251.183 - - [14/May/2026:00:32:46 +0000] "GET /cgi-bin/luci HTTP/1.1" 403 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" show less	Hacking Web App Attack
🇩🇪 144.31.238.88	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.238.88 - - [15/May/2026:09:11:41 +0000] "GET /debug/pprof/ HTTP/1.1" 403 797 "-" "python-requests/2.31.0" show less	Hacking Web App Attack
🇫🇮 2.26.122.209	17 May 2026	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 2.26.122.209 - - [16/May/2026:20:21:21 +0000] "GET /eval HTTP/1.1" 403 1295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack