AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wupinyin , the webmaster of wupinyin.co.uk, joined AbuseIPDB in July 2025 and has reported 8,303 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇵🇰 153.117.50.149	3 minutes ago	Honeypot: sent a command-injection exploit that downloads malware to a decoy web server: hxxp://153. ... show more Honeypot: sent a command-injection exploit that downloads malware to a decoy web server: hxxp://153.117.50.149:54216/Mozi.m [1 event, 2026-10-25T06:06:59Z; auto-reported by CrowdSec] show less	Hacking Exploited Host Web App Attack
🇿🇦 34.35.194.230	31 minutes ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-25T05:39:25Z; auto-reported by CrowdSec] show less	Web App Attack
🇧🇪 35.241.204.214	33 minutes ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.backup [5 events, 2026-10-25T05:37:09Z; auto-reported by CrowdSec] show less	Web App Attack
🇫🇷 157.173.114.178	46 minutes ago	Probing for sensitive files: GET /.env, GET /media/.env, GET /backend/.env, GET /api/.env, GET /stat ... show more Probing for sensitive files: GET /.env, GET /media/.env, GET /backend/.env, GET /api/.env, GET /static/.env \| IDS alert: ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability (TCP/80) \| IDS alert: ET WEB_SERVER WEB-PHP phpinfo access (TCP/80) [12 events, 2026-10-25T05:23:47Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇫🇷 34.155.24.128	49 minutes ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-25T05:21:06Z; auto-reported by CrowdSec] show less	Web App Attack
🇨🇱 34.176.49.214	1 hour ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-25T05:06:14Z; auto-reported by CrowdSec] show less	Web App Attack
🇨🇳 120.48.181.68	1 hour ago	SSH login brute-force against a git server [6 events, 2026-10-25T04:36:03Z; auto-reported by CrowdSe ... show more SSH login brute-force against a git server [6 events, 2026-10-25T04:36:03Z; auto-reported by CrowdSec] show less	Brute-Force SSH
🇯🇵 34.180.84.239	4 hours ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development [5 events, 2026-10-25T02:10:29Z; auto-reported by CrowdSec] show less	Web App Attack
🇵🇱 45.138.12.68	4 hours ago	Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.env.anthropic, GET ... show more Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.env.anthropic, GET /.env.aws, GET /.env.aws.local, GET /.env.ai, GET /.env.openai (+6 more) \| Probing for sensitive files: GET /.env.aws, GET /.aws/config, GET /.aws/credentials, GET /azure/secrets.env, GET /aws/credentials.env [16 events, 2026-10-25T01:43:27Z; auto-reported by CrowdSec] show less	Web App Attack
🇧🇷 35.247.221.97	4 hours ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-25T01:25:23Z; auto-reported by CrowdSec] show less	Web App Attack
🇭🇰 107.150.123.48	4 hours ago	IDS alert: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack (TCP/22) [1 event, ... show more IDS alert: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack (TCP/22) [1 event, 2026-10-25T01:23:18Z; auto-reported by CrowdSec] show less	Port Scan Hacking Brute-Force
🇺🇸 144.225.6.184	5 hours ago	IDS alert: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack (TCP/22) [1 event, ... show more IDS alert: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack (TCP/22) [1 event, 2026-10-25T00:47:46Z; auto-reported by CrowdSec] show less	Port Scan Hacking Brute-Force
🇳🇱 176.65.132.19	6 hours ago	IDS alert: ET WEB_SPECIFIC_APPS Geoserver Unsafe jxpath Evaluation RCE Attempt M5 (CVE-2024-36401) ( ... show more IDS alert: ET WEB_SPECIFIC_APPS Geoserver Unsafe jxpath Evaluation RCE Attempt M5 (CVE-2024-36401) (TCP/80); ET WEB_SERVER Possible SQL Injection (exec) in HTTP URI (TCP/80) [1 event, 2026-10-25T00:00:30Z; auto-reported by CrowdSec] show less	Hacking SQL Injection Web App Attack
🇳🇱 34.90.173.39	6 hours ago	Probing for sensitive files: GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development, G ... show more Probing for sensitive files: GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development, GET /.env.test \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [17 events, 2026-10-24T23:44:37Z; auto-reported by CrowdSec] show less	Web App Attack
🇺🇸 104.28.201.73	7 hours ago	Probing for sensitive files: GET /.env, GET /.git/HEAD, GET /.aws/credentials, GET /secrets.json, GE ... show more Probing for sensitive files: GET /.env, GET /.git/HEAD, GET /.aws/credentials, GET /secrets.json, GET /wp-config.php.bak [5 events, 2026-10-24T22:42:55Z; auto-reported by CrowdSec] show less	Web App Attack
🇧🇷 34.39.144.73	7 hours ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-24T22:28:52Z; auto-reported by CrowdSec] show less	Web App Attack
🇵🇰 175.107.0.17	9 hours ago	Honeypot: sent a command-injection exploit that downloads malware to a decoy web server: hxxp://175. ... show more Honeypot: sent a command-injection exploit that downloads malware to a decoy web server: hxxp://175.107.0.17:33505/Mozi.a [1 event, 2026-10-24T20:56:40Z; auto-reported by CrowdSec] show less	Hacking Exploited Host Web App Attack
🇨🇳 8.140.51.136	12 hours ago	SSH login brute-force against a git server [6 events, 2026-10-24T17:22:51Z; auto-reported by CrowdSe ... show more SSH login brute-force against a git server [6 events, 2026-10-24T17:22:51Z; auto-reported by CrowdSec] show less	Brute-Force SSH
🇳🇱 94.154.43.12	13 hours ago	IDS alert: ET EXPLOIT MVPower DVR Shell UCE (TCP/80); ET WEB_SPECIFIC_APPS MVPower CCTV DVR /shell J ... show more IDS alert: ET EXPLOIT MVPower DVR Shell UCE (TCP/80); ET WEB_SPECIFIC_APPS MVPower CCTV DVR /shell JAWS Webserver Unauthenticated Remote Comman~ (TCP/80); ET HUNTING Suspicious Chmod Usage in URI (Inbound) (TCP/80); ET WEB_SERVER /bin/bash In URI, Possible Shell Command Execution Attempt Within Web Explo~ (TCP/80) [1 event, 2026-10-24T16:58:40Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇵🇱 45.138.12.51	13 hours ago	IDS alert: ET USER_AGENTS Suspcious LeakIX User-Agent (l9explore) (TCP/80); ET INFO Request to Hidde ... show more IDS alert: ET USER_AGENTS Suspcious LeakIX User-Agent (l9explore) (TCP/80); ET INFO Request to Hidden Environment File - Inbound (TCP/80) [6 events, 2026-10-24T16:29:49Z; auto-reported by CrowdSec] show less	Hacking
🇵🇰 223.29.233.230	13 hours ago	Honeypot: sent a command-injection exploit that downloads malware to a decoy web server: hxxp://223. ... show more Honeypot: sent a command-injection exploit that downloads malware to a decoy web server: hxxp://223.29.233.230:58480/Mozi.m [1 event, 2026-10-24T16:17:27Z; auto-reported by CrowdSec] show less	Hacking Exploited Host Web App Attack
🇨🇦 34.0.41.251	14 hours ago	Known attack-tool / scanner user agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show more Known attack-tool / scanner user agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ~ [2 events, 2026-10-24T15:48:51Z; auto-reported by CrowdSec] show less	Bad Web Bot Web App Attack
🇸🇬 35.247.182.201	15 hours ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-24T14:41:00Z; auto-reported by CrowdSec] show less	Web App Attack
🇩🇪 64.89.160.73	16 hours ago	Probing for sensitive files: GET /.env, GET /.env.local, GET /.env.prod, GET /.env.staging, GET /.en ... show more Probing for sensitive files: GET /.env, GET /.env.local, GET /.env.prod, GET /.env.staging, GET /.env.backup \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.env, GET /.env.local, GET /.env.production, GET /.env.prod, GET /.env.staging (+6 more) [16 events, 2026-10-24T14:05:31Z; auto-reported by CrowdSec] show less	Web App Attack
🇳🇱 195.178.110.94	16 hours ago	Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.aws/credentials, G ... show more Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.aws/credentials, GET /.dockercfg, GET /.circleci/config.yml, GET /.docker/config.json, GET /.config/gcloud/credentials.db (+1 more) [13 events, 2026-10-24T13:57:38Z; auto-reported by CrowdSec] show less	Web App Attack