AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 142.93.185.212	07 Jun 2025	Activity: Normal web activity, port scanning attempts, potential exploitation or probing for vulnera ... show more Activity: Normal web activity, port scanning attempts, potential exploitation or probing for vulnerabilities, SSH activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:23:56:16 +0000] "x16x03x01x00ux01x00x00qx03x03xE9xEAzxF1xDF%xD3xF5x90xF3t xBCxCC+xE2xB8%~s9xE9xC8xAA~x07xE5xFB+xDF%vx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [06/Jun/2025:23:56:17 +0000] "x16x03x01x00ux01x00x00qx03x03xF8nx1Ex9D9xB8fxC2xB7NLx0633px0FxABGxEBxE1xB6xBBxE6xB7x98xC8xA6xE16xF4xFAxA2x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [06/Jun/2025:23:56:17 +0000] "x16x03x01x00ux01x00x00qx03x03xBBxB0axB9x8D-xC2_xE2xC0xCFxA7xB0^xF3x94xA2{M&x19x1Aa>xCAxBCMxE2xC4qFax00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [06/Jun/2025:23:56:17 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host SSH
🇧🇷 179.165.52.251	07 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity ... show more Activity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:23:04:28 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇳🇱 196.251.88.60	07 Jun 2025	Activity: Attempted access to PHP info page, potentially probing for vulnerabilities Action: Blocke ... show more Activity: Attempted access to PHP info page, potentially probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [06/Jun/2025:22:54:39 +0000] "GET /_profiler/phpinfo HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" "-" show less	Hacking
🇺🇸 13.86.116.162	06 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:13:29:15 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 13.89.125.225	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:15:59:09 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.65.194.29	06 Jun 2025	Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall ... show more Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:16:03:02 +0000] "GET /druid/index.html HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.163.15.119	06 Jun 2025	Activity: Web Bot activity scanning for ReportServer Action: Blocked by firewall Access Log Entrie ... show more Activity: Web Bot activity scanning for ReportServer Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:28:12 +0000] "GET /ReportServer HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇸🇬 47.245.117.221	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:24:43 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇳🇱 87.121.84.3	06 Jun 2025	Activity: Port Scan attempt Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:03:3 ... show more Activity: Port Scan attempt Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:18:03:33 +0000] "CONNECT google.com:443 HTTP/1.1" 400 150 "-" "-" "-" show less	Port Scan
🇮🇩 180.178.94.117	06 Jun 2025	Activity: Attempted directory traversal and command execution (potential web server attack) Action: ... show more Activity: Attempted directory traversal and command execution (potential web server attack) Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:16:28:21 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" show less	SQL Injection
🇳🇱 196.251.72.29	06 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web applicatio ... show more Activity: Attempted access to environment configuration file, indicative of potential web application attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:13:05:00 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" "-" show less	SQL Injection
🇺🇸 159.65.248.191	06 Jun 2025	Activity: Normal web browsing, port scanning, potential exploitation attempts, web application attac ... show more Activity: Normal web browsing, port scanning, potential exploitation attempts, web application attacks, SSH activity Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:23:25:55 +0000] "x16x03x01x00ux01x00x00qx03x03x07x0CM@f%:x1BxCCx15ax02x9Ce%xBAx02x17x13,x10xB4 xD2xB3?3x02sx8CmxC6x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:23:25:55 +0000] "x16x03x01x00ux01x00x00qx03x03x8E2x1BxCEx1A-xECx907xE0x0Fx9E0mRxC0xF1xDDxCF{xFCK [email protected]/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:23:25:55 +0000] "x16x03x01x00ux01x00x00qx03x03<*nxE8x92xC0xC6x1E)xEA7xF7x89xC4x88x80LxBBxC1px9Bd`xD4xB6xB17xB2xA6xB9,tx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:23:25:55 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host Web App Attack SSH
🇺🇸 20.14.74.80	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:06:57:30 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.65.193.199	06 Jun 2025	Activity: Web Bot activity scanning the web server Action: Blocked by firewall Access Log Entries: ... show more Activity: Web Bot activity scanning the web server Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:09:39:15 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.163.2.150	06 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:07:55:03 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.168.13.53	06 Jun 2025	Activity: Web Bot activity attempting to access login page Action: Blocked by firewall Access Log ... show more Activity: Web Bot activity attempting to access login page Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:09:42:58 +0000] "GET /login HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.171.8.156	06 Jun 2025	Activity: Web Bot activity scanning for web portals Action: Blocked by firewall Access Log Entries ... show more Activity: Web Bot activity scanning for web portals Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:01:56:16 +0000] "GET /portal/redlion HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇬🇧 138.68.145.7	06 Jun 2025	Activity: Port Scan and Exploited Host Action: Blocked by firewall Access Log Entries: • [05/Jun/2 ... show more Activity: Port Scan and Exploited Host Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:10:06:47 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Exploited Host
🇬🇧 139.59.166.229	06 Jun 2025	Activity: Normal web browsing, port scanning attempts, and potential exploitation attempts Action: ... show more Activity: Normal web browsing, port scanning attempts, and potential exploitation attempts Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:11:05:56 +0000] "x16x03x01x00ux01x00x00qx03x03x94o$x85xBAx85xF4xB5x1ExD9xFAx83rxF3xCCx91#Tx1Bjx7Fx92Mx10xC9jJ5x7FAxF06x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:11:05:56 +0000] "x16x03x01x00ux01x00x00qx03x03xE5xC6hx9Bx96xE6xFCx16xF8xFFNx1CxEBx9FxC1nx83xCBxA2xD0xCAxA4xE9x8Fx18x98xAAx0CxEFxCAqxD3x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:11:05:57 +0000] "x16x03x01x00ux01x00x00qx03x038xB0xF2xFCV4bx1DxDFxFAx97?x91/x22xCDnxEDx17xB6GxD7=LX*x1BxC4bWjx83x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [05/Jun/2025:11:05:57 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Exploited Host
🇦🇺 170.64.226.149	06 Jun 2025	Activity: Attempted access to sensitive configuration files indicating reconnaissance or probing act ... show more Activity: Attempted access to sensitive configuration files indicating reconnaissance or probing activity Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:01:39:18 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" • [05/Jun/2025:01:39:18 +0000] "GET /.git/config HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Exploited Host
🇸🇪 193.138.218.217	06 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:10:04:46 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Python/3.11 aiohttp/3.12.6" "-" show less	SQL Injection
🇳🇱 196.251.66.177	06 Jun 2025	Activity: Attempted access to .git/config file, potentially probing for source code or version contr ... show more Activity: Attempted access to .git/config file, potentially probing for source code or version control information Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:05:10:24 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" • [05/Jun/2025:05:10:24 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" show less	Exploited Host
🇳🇱 196.251.87.59	06 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [05/Jun/2025:09:56:02 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36" "-" show less	SQL Injection
🇺🇸 20.65.195.105	05 Jun 2025	Activity: Web Bot activity scanning for exposed endpoints Action: Blocked by firewall Access Log E ... show more Activity: Web Bot activity scanning for exposed endpoints Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:06:31:50 +0000] "GET /actuator/health HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.118.32.47	05 Jun 2025	Activity: Web Bot activity scanning for web server vulnerabilities Action: Blocked by firewall Acc ... show more Activity: Web Bot activity scanning for web server vulnerabilities Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:17:37:57 +0000] "GET /ReportServer HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot