AF - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇨🇦 134.122.42.9	10 Jun 2025	Activity: Normal web activity, port scanning attempts, potential exploitation or probing for vulnera ... show more Activity: Normal web activity, port scanning attempts, potential exploitation or probing for vulnerabilities, SSH activity Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:23:27:26 +0000] "x16x03x01x00ux01x00x00qx03x03x8C5O<6x900KxEDxD7bx91x09xFE@x14xADx0CxC6xAAxCE;xFAN^_" 400 150 "-" "-" "-" • [09/Jun/2025:23:27:26 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" • [09/Jun/2025:23:27:27 +0000] "x16x03x01x00ux01x00x00qx03x03x01xE7x0EfKx8F)x1DwskCVsx8Edx7FxFD}xC8xB1xA9x90xF1x16x1BRxEDx1CxB2x8Bqx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [09/Jun/2025:23:27:27 +0000] "x16x03x01x00ux01x00x00qx03x03QxDFxE7x86x016xC2x96jzxBC*xDBx0CxECx8Fbx90'TxA5{x8CxAAxEDj84x04x0Bqx7Fx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" show less	Port Scan Exploited Host SSH
🇺🇸 185.150.189.25	10 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:23:02:46 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:23:02:46 +0000] "GET / HTTP/1.0" 400 150 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" "-" show less	Port Scan
🇧🇩 43.231.78.74	10 Jun 2025	Activity: Potential SQL Injection attempt on login page Action: Blocked by firewall Access Log Ent ... show more Activity: Potential SQL Injection attempt on login page Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:21:08:19 +0000] "GET /login.php HTTP/1.0" 400 143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0" "-" show less	SQL Injection
🇺🇸 207.58.172.85	10 Jun 2025	Activity: Port Scan attempt targeting server Action: Blocked by firewall Access Log Entries: • [09 ... show more Activity: Port Scan attempt targeting server Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:19:51:35 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" show less	Port Scan
🇫🇷 82.125.37.111	10 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity ... show more Activity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:19:49:44 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇬🇧 156.253.253.16	10 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:19:39:52 +0000] "HEAD / HTTP/1.1" 400 0 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇩🇪 107.150.117.121	10 Jun 2025	Activity: Potential SSL/TLS handshake or encrypted traffic, possibly indicating a secure connection ... show more Activity: Potential SSL/TLS handshake or encrypted traffic, possibly indicating a secure connection attempt or probe. Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:18:49:45 +0000] "x16x03x01x01x17x01x00x01x13x03x03xDDxA8xD6xE1xC7x99xE0x02x8CB{!ExF0vxE6x7Fx14x03xD4,xB3/yx8Fx96Ex15x06x9DxD2x1E Dsx8DMxC2xCFx03x02Nx16xEBfN^xA4~xC6xB6:xD3x5C=x7Fx85mE7x0CxFFx0Fx88kx004xCCxA8xCCxA9xC0/xC00xC0+xC0,xC0x09x00x9ExCCxA8xCCxAAx003x00=x00x16xC0" 400 150 "-" "-" "-" show less	SQL Injection
🇨🇦 148.113.208.45	10 Jun 2025	Activity: Normal activity, port scanning, hacking attempts, spoofing, exploited host activities, web ... show more Activity: Normal activity, port scanning, hacking attempts, spoofing, exploited host activities, web application attacks Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:18:40:42 +0000] "GET / HTTP/1.1" 400 154 "http://<host_IP>/" "Mozilla/5.0 (compatible; ModatScanner/1.0; +https://modat.io/)" "-" • [09/Jun/2025:18:48:16 +0000] "x16x03x03x01xA5x01x00x01xA1x03x03x94xBBx5Cx9FNx12xC3xEDA" 400 150 "-" "-" "-" • [09/Jun/2025:18:48:16 +0000] "x16x03x03x01xA5x01x00x01xA1x03x03x15HJxD7xB8xA2{" 400 150 "-" "-" "-" • [09/Jun/2025:18:48:16 +0000] "x16x03x03x01Vx01x00x01Rx03x03xA0x10xFE`x8DxCAaxFFx19xF8xCFx99/xD2GxE1x5Cx01^xD4xCEx0Ex0FFxA3xA6x9CDvxEAx82 xE4xBE{x92<)x19sxB1xB4xBBxE44x83+xF9mxx0CfxFExB6xA5x9DIxEDx22p2xD1xFCx8Cx00FxC0x12xC0x07xCCx14x13x01x13x02xCCxA9xC0sxC0rxC0,xC0xAFxC0xADxC0$xC0" 400 150 "-" "-" "-" • [09/Jun/2025:18:48:16 +0000] "x16x03x03x01Hx01x00x01Dx03x030x9ARxFCmxE0UxD5x91xAFxEAxC8=xA0x82x1CxEDxB5WxFAixF8,xD2iK:xBCxD8xBBx06 Yx22xFCx96x99x08xFBx88Bx09xA6x5Cx1DxF6xE0xEBxDEsx109x8CxF show less	Port Scan Hacking Spoofing Exploited Host Web App Attack
🇺🇸 135.222.40.117	10 Jun 2025	Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [09/J ... show more Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:16:23:02 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 161.35.230.183	10 Jun 2025	Activity: Port Scan and Exploited Host Action: Blocked by firewall Access Log Entries: • [09/Jun/2 ... show more Activity: Port Scan and Exploited Host Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:13:20:45 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Exploited Host
🇩🇪 173.249.29.55	10 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:11:48:13 +0000] "GET /api/.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36" "-" show less	SQL Injection
🇺🇸 162.243.114.182	10 Jun 2025	Activity: Normal browsing, port scanning, and probing for exploited hosts Action: Blocked by firewa ... show more Activity: Normal browsing, port scanning, and probing for exploited hosts Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:11:10:19 +0000] "x16x03x01x00ux01x00x00qx03x03xF4x8Ex13xEBxFES,xE9x08oxDD4x027xABx91_xCDxC9xBBx09x930x08xCCxFAx09xx8BxF1x19x0Fx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [09/Jun/2025:11:10:19 +0000] "x16x03x01x00ux01x00x00qx03x03xDDx9Bx0ExC2xEAx15xD0_ xCCx86dx9DxC1xA2Gx95OcxCCxAAxF3+x9FxDDTxAE[3xC8xBC/x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [09/Jun/2025:11:10:19 +0000] "x16x03x01x00ux01x00x00qx03x03Cx84x9Fx06px89xB5xFAx9BxF5xE05=@xB4x9Cx8Ex84x9FxEC1xFC_x07xB8xBFxB2xE5'x93K;x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [09/Jun/2025:11:10:19 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host
🇨🇦 68.183.197.169	10 Jun 2025	Activity: Normal web activity, port scan attempt, and potential SQL injection attempt Action: Block ... show more Activity: Normal web activity, port scan attempt, and potential SQL injection attempt Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:10:47:09 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" • [09/Jun/2025:10:47:14 +0000] "x16x03x01x00ux01x00x00qx03x03rHx92x89x86x07:_xAFx9Ax98xAE:ZxA8xA3sx04xD0x155xCDx991- x00xD8x11`xD3x08x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" show less	Port Scan SQL Injection
🇺🇸 34.162.226.135	10 Jun 2025	Activity: Attempted access to Git repository files, indicating reconnaissance or probing activity. ... show more Activity: Attempted access to Git repository files, indicating reconnaissance or probing activity. Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:08:00:41 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:08:00:41 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:08:00:41 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:08:00:41 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" show less	Port Scan
🇺🇸 34.162.194.228	10 Jun 2025	Activity: Attempted Git repository access scan, potentially probing for vulnerabilities Action: Blo ... show more Activity: Attempted Git repository access scan, potentially probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:06:05:51 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:06:05:51 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:06:05:51 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:06:05:51 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" show less	Hacking
🇺🇸 3.88.55.155	10 Jun 2025	Activity: Attempted access to .git/config file, indicative of reconnaissance or hacking activity Ac ... show more Activity: Attempted access to .git/config file, indicative of reconnaissance or hacking activity Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:05:42:45 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Debian; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" "-" show less	Hacking
🇺🇸 34.162.177.88	10 Jun 2025	Activity: Attempted access to Git repository files, indicating a potential reconnaissance or probing ... show more Activity: Attempted access to Git repository files, indicating a potential reconnaissance or probing activity. Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:05:01:45 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:05:01:45 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:05:01:45 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [09/Jun/2025:05:01:45 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" show less	Port Scan
🇨🇦 148.113.206.49	10 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:04:51:48 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:04:51:48 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; ModatScanner/1.0; +https://modat.io/)" "-" • [09/Jun/2025:09:49:10 +0000] "SSH-2.0-Go" 400 150 "-" "-" "-" show less	Port Scan
🇺🇸 104.234.115.4	10 Jun 2025	Activity: Normal web browsing, port scanning attempt, potential exploitation attempt Action: Blocke ... show more Activity: Normal web browsing, port scanning attempt, potential exploitation attempt Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:03:49:39 +0000] "x16x03x01x00xEEx01x00x00xEAx03x03x1CxA2x94xD2\|x88xB1xC5SxF0%x02xBCxC1xA1P!xAEr rx07)$Bx09,xE6x9FxE9xC8x8E xAAxC3uxD1)xD1xBAxC2x87x1EyPxE0xEFx1BxBFxF5xD9xC31YxA9xA3xC0x1FxABx9AtxDDx9Ax890x00&xCCxA8xCCxA9xC0/xC00xC0+xC0,xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [09/Jun/2025:04:29:24 +0000] "GET //webpages/login.html HTTP/1.1" 403 118 "-" "'Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)'" "-" show less	Port Scan Exploited Host
🇺🇸 172.210.68.2	10 Jun 2025	Activity: Web Bot activity attempting to access /developmentserver/metadatauploader Action: Blocked ... show more Activity: Web Bot activity attempting to access /developmentserver/metadatauploader Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:02:43:47 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.163.15.130	10 Jun 2025	Activity: Web Bot activity scanning the website Action: Blocked by firewall Access Log Entries: • ... show more Activity: Web Bot activity scanning the website Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:01:51:34 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 34.86.47.169	10 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:00:53:07 +0000] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (SymbianOS/9.1; U; en-us) AppleWebKit/413 (KHTML, like Gecko) Safari/413 es50" "-" show less	SQL Injection
🇸🇬 139.59.97.34	09 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:23:45:52 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:23:45:52 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Port Scan
🇺🇸 138.197.11.9	09 Jun 2025	Activity: Normal web activity, SSL/TLS handshake attempts, potential port scan, and possible web app ... show more Activity: Normal web activity, SSL/TLS handshake attempts, potential port scan, and possible web application attack attempts Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:23:42:40 +0000] "x16x03x01x00ux01x00x00qx03x03x82xB6'xC2xCDxA0x05x1AxD8xF3oxA1xE5xC4xD4px95>x01xFF>xD3xFCrxE6xBCx85xD5xB4Zx9FxCAx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:23:42:40 +0000] "x16x03x01x00ux01x00x00qx03x03x02xC6_x9AxB2x9Ax97xB0lx86x03x8CWxB7xECxB2x93_dS&9xD42xADx87xA1;hxA4HxA9x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:23:42:40 +0000] "x16x03x01x00ux01x00x00qx03x03xB7x14i&xC8[x95[}x0Ex16x96x05jxEDxF1)xEFxCCmx97c]*'xE5LxB9qxFFRxFEx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:23:42:40 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host Web App Attack SSH
🇺🇸 216.82.47.26	09 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack activi ... show more Activity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack activity Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:21:15:13 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking