AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 3.101.133.201	09 Jun 2025	Activity: Attempt to access .git/config file, potentially a web app attack or reconnaissance Action ... show more Activity: Attempt to access .git/config file, potentially a web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:14:37:24 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" "-" show less	Hacking
🇺🇸 20.65.194.122	09 Jun 2025	Activity: Web Bot activity scanning for version information Action: Blocked by firewall Access Log ... show more Activity: Web Bot activity scanning for version information Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:03:47:22 +0000] "GET /version HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.169.104.239	09 Jun 2025	Activity: Web scanning activity using zgrab tool Action: Blocked by firewall Access Log Entries: • ... show more Activity: Web scanning activity using zgrab tool Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:05:44:34 +0000] "GET /portal/redlion HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 34.162.61.116	09 Jun 2025	Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing a ... show more Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing activity. Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:18:15:02 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:18:15:02 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:18:15:02 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:18:15:02 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" show less	Hacking
🇺🇸 34.162.181.31	09 Jun 2025	Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing a ... show more Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing activity. Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:12:31:43 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:12:31:43 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:12:31:43 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:12:31:43 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" show less	Exploited Host
🇺🇸 68.183.175.157	09 Jun 2025	Activity: Normal web browsing, port scanning, potential SQL injection attempts, and exploitation of ... show more Activity: Normal web browsing, port scanning, potential SQL injection attempts, and exploitation of host vulnerabilities Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:11:55:34 +0000] "x16x03x01x00ux01x00x00qx03x03x0FmbxF62xD8KxD4xD0xBDxEC5Ax9Dx02xC7xDBpxC5xC4Yx11x13xCA1x07/YxACxB7x9Ex81x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:11:55:35 +0000] "x16x03x01x00ux01x00x00qx03x03:yxF0sxCDcx00x88xE9\|xACxC2x00xC0x84xB6kxA2txD4cx22xE9ux1DxF4xEBxB9x9AxA4xE1@x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:11:55:35 +0000] "x16x03x01x00ux01x00x00qx03x03{Ax07xEBxE9KxE3x9Ex94x07xAFxB7xE9ZTxB7xAC2x00xA8x07xC7xF6xC6x90xA5x92xCCx89x08x8BxD8x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:11:55:35 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan SQL Injection Exploited Host
🇺🇸 157.245.176.143	09 Jun 2025	Activity: Port scan attempt detected, possibly probing for vulnerabilities Action: Blocked by firew ... show more Activity: Port scan attempt detected, possibly probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:07:45:06 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Bad Web Bot
🇸🇬 139.59.97.34	09 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:23:45:52 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:23:45:52 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Port Scan
🇺🇸 138.197.11.9	09 Jun 2025	Activity: Normal web activity, SSL/TLS handshake attempts, potential port scan, and possible web app ... show more Activity: Normal web activity, SSL/TLS handshake attempts, potential port scan, and possible web application attack attempts Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:23:42:40 +0000] "x16x03x01x00ux01x00x00qx03x03x82xB6'xC2xCDxA0x05x1AxD8xF3oxA1xE5xC4xD4px95>x01xFF>xD3xFCrxE6xBCx85xD5xB4Zx9FxCAx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:23:42:40 +0000] "x16x03x01x00ux01x00x00qx03x03x02xC6_x9AxB2x9Ax97xB0lx86x03x8CWxB7xECxB2x93_dS&9xD42xADx87xA1;hxA4HxA9x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:23:42:40 +0000] "x16x03x01x00ux01x00x00qx03x03xB7x14i&xC8[x95[}x0Ex16x96x05jxEDxF1)xEFxCCmx97c]*'xE5LxB9qxFFRxFEx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:23:42:40 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host Web App Attack SSH
🇲🇽 189.244.49.155	08 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially indicating a web app attack or exploitation at ... show more Activity: Attempted access to xmlrpc.php, potentially indicating a web app attack or exploitation attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:21:32:03 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇩🇪 188.166.163.161	08 Jun 2025	Activity: Attempted access to CGI script indicating potential hacking or web app attack Action: Blo ... show more Activity: Attempted access to CGI script indicating potential hacking or web app attack Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:50 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 154 "http://<host_IP>:80/cgi-bin/authLogin.cgi" "Go-http-client/1.1" "-" show less	Hacking
🇺🇸 165.232.156.168	08 Jun 2025	Activity: Normal browsing, port scan attempt, and potential SQL injection attempt Action: Blocked b ... show more Activity: Normal browsing, port scan attempt, and potential SQL injection attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:50:08 +0000] "x16x03x01x00ux01x00x00qx03x03xCCx0CxA2q}/x8BxB7xC6xD2bx8FHxC7xF7mxB7xBC#xB8x18xA2xF5xDDx93>x13x87x1Fx17xB3^x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" show less	Port Scan SQL Injection
🇩🇪 164.92.160.112	08 Jun 2025	Activity: Port scanning and web application probing Action: Blocked by firewall Access Log Entries ... show more Activity: Port scanning and web application probing Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:50 +0000] "GET /solr/admin/info/system HTTP/1.1" 403 146 "http://<host_IP>:80/solr/admin/info/system" "Go-http-client/1.1" "-" • [07/Jun/2025:23:33:50 +0000] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 403 146 "http://<host_IP>:80/solr/admin/cores?action=STATUS&wt=json" "Go-http-client/1.1" "-" show less	Port Scan Web App Attack
🇺🇸 20.65.194.143	08 Jun 2025	Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [07/J ... show more Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:10:11:06 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.163.15.43	08 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:13:23:32 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 64.225.57.213	08 Jun 2025	Activity: Normal web activity, port scanning attempts, potential spoofing, and web application attac ... show more Activity: Normal web activity, port scanning attempts, potential spoofing, and web application attacks Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:11:46:52 +0000] "x16x03x01x00ux01x00x00qx03x03xA0xB6xAF5x06" 400 150 "-" "-" "-" • [07/Jun/2025:11:46:52 +0000] "x16x03x01x00ux01x00x00qx03x03CnxE9@J;x82Fw/x0BxF45CxF0zx87xEDxA3x00_Cx16 xDB9x8Ax89xF2xFAvxF0x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [07/Jun/2025:11:46:52 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" • [07/Jun/2025:11:46:53 +0000] "x16x03x01x00ux01x00x00qx03x03xBCxC3NxDAxEExBFxA8xE2x12xB5/!x11xD3x95gx03xC8uDxABxA1x95<xEDxB8ZxC3xA9x89x8FxB7x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" show less	Port Scan Spoofing Web App Attack
🇺🇸 104.131.118.62	08 Jun 2025	Activity: Port scan attempts targeting web administration interfaces Action: Blocked by firewall A ... show more Activity: Port scan attempts targeting web administration interfaces Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:16:02:46 +0000] "GET HTTP/1.1 HTTP/1.1" 400 150 "-" "-" "-" show less	Port Scan
🇺🇸 129.146.4.238	08 Jun 2025	Activity: Normal web activity with potential probing or reconnaissance attempts Action: Blocked by ... show more Activity: Normal web activity with potential probing or reconnaissance attempts Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:15:20:43 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" • [07/Jun/2025:15:20:43 +0000] "GET //blog/robots.txt HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" • [07/Jun/2025:15:20:43 +0000] "GET //blog/ HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" • [07/Jun/2025:15:20:43 +0000] "GET //wordpress/ HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 show less	Spoofing
🇺🇸 20.65.193.129	08 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:21:18:39 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.65.194.117	08 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:58:34 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.80.104.232	08 Jun 2025	Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [07/J ... show more Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:21:38:53 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇫🇷 91.196.152.123	08 Jun 2025	Activity: Ping of Death Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:10:14 +0 ... show more Activity: Ping of Death Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:10:14 +0000] "x16x03x03x01xA5x01x00x01xA1x03x03xFF9xD0xCBxA7xC8xF7xEAx9ExA1xEExD0xC0cx86xB7x93xECx1DxDE2xAC" 400 150 "-" "-" "-" show less	Ping of Death
🇨🇳 123.185.8.231	08 Jun 2025	Activity: Port scanning and potential SQL injection attempt Action: Blocked by firewall Access Log ... show more Activity: Port scanning and potential SQL injection attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:19:33 +0000] "sh+/tmp/gpon80&ipv=0" 400 150 "-" "-" "-" show less	Port Scan SQL Injection
🇩🇪 161.35.209.222	08 Jun 2025	Activity: Normal web activity and potential spoofing or probing attempt Action: Blocked by firewall ... show more Activity: Normal web activity and potential spoofing or probing attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:49 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:50 +0000] "x16x03x01x00xC6x01x00x00xC2x03x03xABx9DxF7 x92x0Cx06xF2XxB6,x95xF4xB3`xD2x92xE7" 400 150 "-" "-" "-" show less	Spoofing
🇩🇪 161.35.217.117	08 Jun 2025	Activity: Port scanning and potential web application attack attempts Action: Blocked by firewall ... show more Activity: Port scanning and potential web application attack attempts Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:47 +0000] "GET /odinhttpcall1749339226 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:47 +0000] "POST /sdk HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:47 +0000] "GET /HNAP1 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:47 +0000] "GET /evox/about HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" show less	Port Scan SQL Injection