AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 34.162.61.116	09 Jun 2025	Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing a ... show more Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing activity. Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:18:15:02 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:18:15:02 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:18:15:02 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:18:15:02 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" show less	Hacking
🇺🇸 3.101.133.201	09 Jun 2025	Activity: Attempt to access .git/config file, potentially a web app attack or reconnaissance Action ... show more Activity: Attempt to access .git/config file, potentially a web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:14:37:24 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" "-" show less	Hacking
🇫🇷 185.177.72.236	09 Jun 2025	Activity: Reconnaissance and probing for sensitive files and server information Action: Blocked by ... show more Activity: Reconnaissance and probing for sensitive files and server information Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:13:00:45 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "-" "-" • [08/Jun/2025:13:00:48 +0000] "GET /new/.env.production HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" • [08/Jun/2025:13:00:55 +0000] "GET /.aws/credentials HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" • [08/Jun/2025:13:01:07 +0000] "GET /.aws/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Port Scan
🇺🇸 34.162.181.31	09 Jun 2025	Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing a ... show more Activity: Attempted access to Git repository files, indicating potential reconnaissance or probing activity. Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:12:31:43 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:12:31:43 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:12:31:43 +0000] "GET /.git/HEAD HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" • [08/Jun/2025:12:31:43 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "ctxE2x80x91gitxE2x80x91scanner/0.4" "-" show less	Exploited Host
🇺🇸 68.183.175.157	09 Jun 2025	Activity: Normal web browsing, port scanning, potential SQL injection attempts, and exploitation of ... show more Activity: Normal web browsing, port scanning, potential SQL injection attempts, and exploitation of host vulnerabilities Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:11:55:34 +0000] "x16x03x01x00ux01x00x00qx03x03x0FmbxF62xD8KxD4xD0xBDxEC5Ax9Dx02xC7xDBpxC5xC4Yx11x13xCA1x07/YxACxB7x9Ex81x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:11:55:35 +0000] "x16x03x01x00ux01x00x00qx03x03:yxF0sxCDcx00x88xE9\|xACxC2x00xC0x84xB6kxA2txD4cx22xE9ux1DxF4xEBxB9x9AxA4xE1@x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:11:55:35 +0000] "x16x03x01x00ux01x00x00qx03x03{Ax07xEBxE9KxE3x9Ex94x07xAFxB7xE9ZTxB7xAC2x00xA8x07xC7xF6xC6x90xA5x92xCCx89x08x8BxD8x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [08/Jun/2025:11:55:35 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan SQL Injection Exploited Host
🇺🇸 157.245.176.143	09 Jun 2025	Activity: Port scan attempt detected, possibly probing for vulnerabilities Action: Blocked by firew ... show more Activity: Port scan attempt detected, possibly probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:07:45:06 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Bad Web Bot
🇺🇸 20.169.104.239	09 Jun 2025	Activity: Web scanning activity using zgrab tool Action: Blocked by firewall Access Log Entries: • ... show more Activity: Web scanning activity using zgrab tool Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:05:44:34 +0000] "GET /portal/redlion HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇸🇪 185.213.154.229	09 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:05:33:59 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Python/3.11 aiohttp/3.12.6" "-" show less	SQL Injection
🇺🇸 20.65.194.122	09 Jun 2025	Activity: Web Bot activity scanning for version information Action: Blocked by firewall Access Log ... show more Activity: Web Bot activity scanning for version information Action: Blocked by firewall Access Log Entries: • [08/Jun/2025:03:47:22 +0000] "GET /version HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 165.232.156.168	08 Jun 2025	Activity: Normal browsing, port scan attempt, and potential SQL injection attempt Action: Blocked b ... show more Activity: Normal browsing, port scan attempt, and potential SQL injection attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:50:08 +0000] "x16x03x01x00ux01x00x00qx03x03xCCx0CxA2q}/x8BxB7xC6xD2bx8FHxC7xF7mxB7xBC#xB8x18xA2xF5xDDx93>x13x87x1Fx17xB3^x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" show less	Port Scan SQL Injection
🇩🇪 188.166.163.161	08 Jun 2025	Activity: Attempted access to CGI script indicating potential hacking or web app attack Action: Blo ... show more Activity: Attempted access to CGI script indicating potential hacking or web app attack Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:50 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 154 "http://<host_IP>:80/cgi-bin/authLogin.cgi" "Go-http-client/1.1" "-" show less	Hacking
🇩🇪 164.92.160.112	08 Jun 2025	Activity: Port scanning and web application probing Action: Blocked by firewall Access Log Entries ... show more Activity: Port scanning and web application probing Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:50 +0000] "GET /solr/admin/info/system HTTP/1.1" 403 146 "http://<host_IP>:80/solr/admin/info/system" "Go-http-client/1.1" "-" • [07/Jun/2025:23:33:50 +0000] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 403 146 "http://<host_IP>:80/solr/admin/cores?action=STATUS&wt=json" "Go-http-client/1.1" "-" show less	Port Scan Web App Attack
🇩🇪 164.90.233.210	08 Jun 2025	Activity: Port scan and possible SSL/TLS handshake attempts, indicating probing or scanning activity ... show more Activity: Port scan and possible SSL/TLS handshake attempts, indicating probing or scanning activity Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:49 +0000] "x16x03x01x00xEEx01x00x00xEAx03x03x0Ex81x9AxF4x8Ex01E]kxFDxA2x15xD80xE8xC6xA6axxBF0Qdx9EYxDFxCExDD&gx05xE8 xFAx1C#x85xAExF06x17CxAFxCFxDAx93xD4Px01xD4\|x7Fx81xA6x87:nx0CmxF0xDExF0x91xE8x8Ax00&xC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0x13xC0" 400 150 "-" "-" "-" • [07/Jun/2025:23:33:50 +0000] "x16x03x01x00xEEx01x00x00xEAx03x03LxD5F'xCB7)xF3xB7=x9CxFDx13x1C Lx16xA2xFAx17Sx92xA0x1Ax1Fvx9FxCAx01zxA3f x093xBEx9Bx81a}x811x9DxAE`jxBExxC2x0Fx93xBAx97xF5x11xB5QxFBKxFBxC8N[~gx00&xC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0x13xC0" 400 150 "-" "-" "-" show less	Port Scan SQL Injection
🇩🇪 161.35.209.222	08 Jun 2025	Activity: Normal web activity and potential spoofing or probing attempt Action: Blocked by firewall ... show more Activity: Normal web activity and potential spoofing or probing attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:49 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:50 +0000] "x16x03x01x00xC6x01x00x00xC2x03x03xABx9DxF7 x92x0Cx06xF2XxB6,x95xF4xB3`xD2x92xE7" 400 150 "-" "-" "-" show less	Spoofing
🇩🇪 161.35.217.117	08 Jun 2025	Activity: Port scanning and potential web application attack attempts Action: Blocked by firewall ... show more Activity: Port scanning and potential web application attack attempts Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:47 +0000] "GET /odinhttpcall1749339226 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:47 +0000] "POST /sdk HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:47 +0000] "GET /HNAP1 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [07/Jun/2025:23:33:47 +0000] "GET /evox/about HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" show less	Port Scan SQL Injection
🇺🇸 20.65.194.117	08 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:58:34 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇨🇳 123.185.8.231	08 Jun 2025	Activity: Port scanning and potential SQL injection attempt Action: Blocked by firewall Access Log ... show more Activity: Port scanning and potential SQL injection attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:19:33 +0000] "sh+/tmp/gpon80&ipv=0" 400 150 "-" "-" "-" show less	Port Scan SQL Injection
🇫🇷 91.196.152.123	08 Jun 2025	Activity: Ping of Death Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:10:14 +0 ... show more Activity: Ping of Death Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:22:10:14 +0000] "x16x03x03x01xA5x01x00x01xA1x03x03xFF9xD0xCBxA7xC8xF7xEAx9ExA1xEExD0xC0cx86xB7x93xECx1DxDE2xAC" 400 150 "-" "-" "-" show less	Ping of Death
🇺🇸 20.80.104.232	08 Jun 2025	Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [07/J ... show more Activity: Web Bot Activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:21:38:53 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇲🇽 189.244.49.155	08 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially indicating a web app attack or exploitation at ... show more Activity: Attempted access to xmlrpc.php, potentially indicating a web app attack or exploitation attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:21:32:03 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇺🇸 20.65.193.129	08 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:21:18:39 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 104.131.118.62	08 Jun 2025	Activity: Port scan attempts targeting web administration interfaces Action: Blocked by firewall A ... show more Activity: Port scan attempts targeting web administration interfaces Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:16:02:46 +0000] "GET HTTP/1.1 HTTP/1.1" 400 150 "-" "-" "-" show less	Port Scan
🇺🇸 129.146.4.238	08 Jun 2025	Activity: Normal web activity with potential probing or reconnaissance attempts Action: Blocked by ... show more Activity: Normal web activity with potential probing or reconnaissance attempts Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:15:20:43 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" • [07/Jun/2025:15:20:43 +0000] "GET //blog/robots.txt HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" • [07/Jun/2025:15:20:43 +0000] "GET //blog/ HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" • [07/Jun/2025:15:20:43 +0000] "GET //wordpress/ HTTP/1.1" 403 548 "https://lettiykorrie.pages.dev//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 show less	Spoofing
🇺🇸 20.163.15.43	08 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:13:23:32 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 64.225.57.213	08 Jun 2025	Activity: Normal web activity, port scanning attempts, potential spoofing, and web application attac ... show more Activity: Normal web activity, port scanning attempts, potential spoofing, and web application attacks Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:11:46:52 +0000] "x16x03x01x00ux01x00x00qx03x03xA0xB6xAF5x06" 400 150 "-" "-" "-" • [07/Jun/2025:11:46:52 +0000] "x16x03x01x00ux01x00x00qx03x03CnxE9@J;x82Fw/x0BxF45CxF0zx87xEDxA3x00_Cx16 xDB9x8Ax89xF2xFAvxF0x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [07/Jun/2025:11:46:52 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" • [07/Jun/2025:11:46:53 +0000] "x16x03x01x00ux01x00x00qx03x03xBCxC3NxDAxEExBFxA8xE2x12xB5/!x11xD3x95gx03xC8uDxABxA1x95<xEDxB8ZxC3xA9x89x8FxB7x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" show less	Port Scan Spoofing Web App Attack