AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User b0r1s joined AbuseIPDB in June 2025 and has reported 39 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 67.205.45.85	10 Sep 2025	It is a fraudulent website, aimed at stealing and deceiving customers.	Fraud Orders Phishing
🇫🇮 94.141.122.140	10 Sep 2025		SQL Injection
🇰🇷 58.141.76.45	05 Sep 2025	Attempted SQL Injection via HTTP GET request using a UNION SELECT payload targeting a public-facing ... show more Attempted SQL Injection via HTTP GET request using a UNION SELECT payload targeting a public-facing web endpoint. The request included typical SQLi syntax and was flagged by WAF with high severity. show less	SQL Injection
🇧🇷 35.199.98.44	29 Aug 2025	Involved in repeated SQL injection attempts via HTTP requests, including boolean-based and error-bas ... show more Involved in repeated SQL injection attempts via HTTP requests, including boolean-based and error-based payloads such as SELECT ... FROM DUAL. Pattern matches known reconnaissance techniques. show less	SQL Injection
🇧🇷 34.151.197.7	29 Aug 2025	Sent multiple HTTP requests with SQL injection attempts, including boolean-based payloads and error- ... show more Sent multiple HTTP requests with SQL injection attempts, including boolean-based payloads and error-based probes targeting API endpoints. Activity suggests automated vulnerability scanning. show less	SQL Injection
🇧🇷 34.151.247.162	29 Aug 2025	Originated repeated HTTP requests with SQL injection patterns, including MySQL time-based payloads u ... show more Originated repeated HTTP requests with SQL injection patterns, including MySQL time-based payloads using IF() and SLEEP(). Behavior indicates scanning for exploitable endpoints. show less	SQL Injection
🇩🇪 86.38.98.37	29 Aug 2025	Detected multiple HTTP requests containing SQL injection payloads, including time-based techniques u ... show more Detected multiple HTTP requests containing SQL injection payloads, including time-based techniques using PG_SLEEP(). Activity consistent with automated probing for database vulnerabilities. show less	SQL Injection
🇧🇷 191.38.217.124	22 Aug 2025	This IP address (191.38.217.124) attempted a SQL Injection attack targeting our website. The request ... show more This IP address (191.38.217.124) attempted a SQL Injection attack targeting our website. The request included a malicious payload in the id parameter: id=999999.9 union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13/ The attack was executed using the python-requests/2.32.3 library, indicating automated scanning or exploitation. show less	SQL Injection
🇨🇳 211.150.70.199	31 Jul 2025	Spam / phishing.	Phishing Email Spam
🇨🇿 213.192.2.99	31 Jul 2025	Attempted SQL Injection, XSS, and Command Injection in a single payload. Included UNION SELECT from ... show more Attempted SQL Injection, XSS, and Command Injection in a single payload. Included UNION SELECT from information_schema and xp_cmdshell to read /etc/passwd. show less	SQL Injection
🇧🇪 109.130.194.63	31 Jul 2025	The request URI included a classic SQLi payload: ' and 5990=5990-- , indicating a probing attempt.	SQL Injection
🇺🇦 95.214.235.76	21 Jul 2025	Credential stuffing against M365	Brute-Force
🇺🇸 64.23.166.14	18 Jul 2025	hiae-portal.com phishing campaing	Phishing
🇺🇸 151.101.194.217	14 Jul 2025	This IP was used in an attempt to connect to a server associated with an exploit kit (Fiesta Exploit ... show more This IP was used in an attempt to connect to a server associated with an exploit kit (Fiesta Exploit Kit). show less	Hacking