AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wupinyin , the webmaster of wupinyin.co.uk, joined AbuseIPDB in July 2025 and has reported 8,427 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 165.22.144.99	17 hours ago	IDS alert: ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE- ... show more IDS alert: ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-~ (TCP/80); ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body (TCP/80); ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body (TCP/80) [2 events, 2026-10-27T14:58:59Z; auto-reported by CrowdSec] show less	Hacking SQL Injection Web App Attack
🇳🇱 45.225.135.21	17 hours ago	IDS alert: ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 (TCP/80 ... show more IDS alert: ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 (TCP/80); ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt (TCP/80) [2 events, 2026-10-27T14:58:51Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇨🇭 176.65.144.71	17 hours ago	IDS alert: GPL WEB_SERVER .htpasswd access (TCP/80) \| Probing for sensitive files: GET /.env, GET /. ... show more IDS alert: GPL WEB_SERVER .htpasswd access (TCP/80) \| Probing for sensitive files: GET /.env, GET /.docker/config.json, GET /config/secrets.yml, GET /backup.sql, GET /backup/.env [6 events, 2026-10-27T14:27:03Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇯🇵 34.180.91.95	18 hours ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-27T13:26:55Z; auto-reported by CrowdSec] show less	Web App Attack
🇮🇳 34.93.12.227	19 hours ago	Probing for sensitive files: GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development, G ... show more Probing for sensitive files: GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development, GET /.env.test \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [17 events, 2026-10-27T12:58:01Z; auto-reported by CrowdSec] show less	Web App Attack
🇨🇦 152.236.14.113	19 hours ago	IDS alert: ET WEB_SERVER PHP System Command in HTTP POST (TCP/80) \| Exploit attempt for CVE-2017-984 ... show more IDS alert: ET WEB_SERVER PHP System Command in HTTP POST (TCP/80) \| Exploit attempt for CVE-2017-9841: POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php [2 events, 2026-10-27T12:23:40Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇵🇱 45.138.12.188	19 hours ago	Web exploit probing (known CVE paths): GET /_ignition/execute-solution [1 event, 2026-10-27T12:20:34 ... show more Web exploit probing (known CVE paths): GET /_ignition/execute-solution [1 event, 2026-10-27T12:20:34Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇺🇸 34.82.53.124	20 hours ago	Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.env.backup, GET /. ... show more Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.env.backup, GET /.env.old, GET /.env.prod, GET /.env.local \| Probing for sensitive files: GET /.env.backup, GET /.env.prod, GET /.env.local, GET /backend/.env, GET /.env.save \| Path traversal attempts: GET /@fs/../.env, GET /@fs/proc/self/cwd/.env, GET /@fs/proc/self/cmdline \| Exploit attempt for CVE-2021-41773: GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env \| Exploit attempt for CVE-2021-43798: GET /public/plugins/grafana-clock-panel/../../../../../../../..~ [22 events, 2026-10-27T12:10:14Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇧🇪 35.233.99.27	20 hours ago	Probing for sensitive files: GET /.aws/.env, GET /.aws/config, GET /.aws/credentials, GET /.docker/c ... show more Probing for sensitive files: GET /.aws/.env, GET /.aws/config, GET /.aws/credentials, GET /.docker/config.json, GET /.aws/credentials.bak \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.env-example, GET /.env-sample, GET /.aws/.env, GET /.aws/config, GET /.env.anthropic (+4 more) \| Probing for admin interfaces: GET /admin/.env, GET /api/phpinfo.php, GET /phpinfo.php [19 events, 2026-10-27T11:56:52Z; auto-reported by CrowdSec] show less	Web App Attack
🇳🇱 45.148.10.21	20 hours ago	Probing for sensitive files: GET /.aws/credentials, GET /.aws/credentials.bak, GET /.env, GET /.aws/ ... show more Probing for sensitive files: GET /.aws/credentials, GET /.aws/credentials.bak, GET /.env, GET /.aws/.env, GET /.docker/config.json \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.aws/credentials, GET /.aws/credentials.bak, GET /.env, GET /.env-example, GET /.aws/.env (+2 more) \| Probing for admin interfaces: GET /admin/.env, GET /api/phpinfo.php, GET /phpinfo.php [19 events, 2026-10-27T11:17:33Z; auto-reported by CrowdSec] show less	Web App Attack
🇳🇱 34.187.71.40	21 hours ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-27T11:07:22Z; auto-reported by CrowdSec] show less	Web App Attack
🇺🇸 38.148.20.75	21 hours ago	IDS alert: ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 (TCP/80 ... show more IDS alert: ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 (TCP/80); ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt (TCP/80) [1 event, 2026-10-27T10:48:17Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇸🇮 102.220.161.104	21 hours ago	Probing for sensitive files: GET /.env.bak, GET /.env.dev, GET /.env.prod, GET /.env, GET /.env.loca ... show more Probing for sensitive files: GET /.env.bak, GET /.env.dev, GET /.env.prod, GET /.env, GET /.env.local [5 events, 2026-10-27T10:37:28Z; auto-reported by CrowdSec] show less	Web App Attack
🇵🇱 45.138.12.19	21 hours ago	Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /litellm/config.yaml ... show more Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /litellm/config.yaml, GET /litellm/config.yml, GET /litellm_config.yaml, GET /litellm_config.yml, GET /openai-proxy/config.yaml (+5 more) [11 events, 2026-10-27T10:31:17Z; auto-reported by CrowdSec] show less	Web App Attack
🇮🇳 34.47.174.165	23 hours ago	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-27T09:10:44Z; auto-reported by CrowdSec] show less	Web App Attack
🇳🇱 45.148.10.15	23 hours ago	Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /wp-json/, GET /blog ... show more Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /wp-json/, GET /blog/wp-json/, GET /wp/wp-json/ [11 events, 2026-10-27T08:45:05Z; auto-reported by CrowdSec] show less	Web App Attack
🇫🇷 157.173.114.178	27 Oct 2026	Probing for sensitive files: GET /.env, GET /media/.env, GET /backend/.env, GET /static/.env, GET /a ... show more Probing for sensitive files: GET /.env, GET /media/.env, GET /backend/.env, GET /static/.env, GET /admin/.env \| IDS alert: ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability (TCP/80) \| IDS alert: ET WEB_SERVER WEB-PHP phpinfo access (TCP/80) [12 events, 2026-10-27T08:07:14Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇨🇳 113.98.254.50	27 Oct 2026	SSH login brute-force against a git server [6 events, 2026-10-27T07:24:47Z; auto-reported by CrowdSe ... show more SSH login brute-force against a git server [6 events, 2026-10-27T07:24:47Z; auto-reported by CrowdSec] show less	Brute-Force SSH
🇫🇷 144.91.103.172	27 Oct 2026	Honeypot: tried to load a malicious module into a decoy Redis server (rogue replication master) [1 e ... show more Honeypot: tried to load a malicious module into a decoy Redis server (rogue replication master) [1 event, 2026-10-27T07:16:19Z; auto-reported by CrowdSec] show less	Hacking Exploited Host
🇧🇪 34.140.234.80	27 Oct 2026	Probing for sensitive files: GET /.aws/credentials.bak, GET /.docker/config.json, GET /.env, GET /.a ... show more Probing for sensitive files: GET /.aws/credentials.bak, GET /.docker/config.json, GET /.env, GET /.aws/config, GET /.aws/.env \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.aws/credentials.bak, GET /.docker/config.json, GET /.env.anthropic, GET /.env, GET /.aws/config (+4 more) \| Probing for admin interfaces: GET /admin/.env, GET /api/phpinfo.php, GET /phpinfo.php [19 events, 2026-10-27T07:13:34Z; auto-reported by CrowdSec] show less	Web App Attack
🇵🇱 45.138.12.25	27 Oct 2026	Path traversal attempts: GET /content../.git/config, GET /lib../.git/config, GET /img../.git/config, ... show more Path traversal attempts: GET /content../.git/config, GET /lib../.git/config, GET /img../.git/config, GET /js../.git/config \| Probing for sensitive files: GET /content../.git/config, GET /lib../.git/config, GET /img../.git/config, GET /js../.git/config, GET /static../.git/config \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /content../.git/config, GET /lib../.git/config, GET /img../.git/config, GET /js../.git/config, GET /static../.git/config (+5 more) [20 events, 2026-10-27T06:47:50Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇳🇱 81.171.72.135	27 Oct 2026	Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /config.php, GET /wp ... show more Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /config.php, GET /wp-config.php, GET /database_backup.sql, GET /backup.sql, GET /dump.sql (+4 more) \| Probing for sensitive files: GET /database_backup.sql, GET /backup.sql, GET /dump.sql, GET /database.sql, GET /_vti_pvt/service.pwd [16 events, 2026-10-27T06:24:19Z; auto-reported by CrowdSec] show less	Web App Attack
🇵🇱 45.138.12.18	27 Oct 2026	Probing for sensitive files: GET /static../.git/config, GET /.git/config, GET /lib../.git/config, GE ... show more Probing for sensitive files: GET /static../.git/config, GET /.git/config, GET /lib../.git/config, GET /.git/HEAD, GET /js../.git/config \| Path traversal attempts: GET /static../.git/config, GET /lib../.git/config, GET /js../.git/config, GET /media../.git/config \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /static../.git/config, GET /.git/config, GET /lib../.git/config, GET /.git/HEAD, GET /js../.git/config (+6 more) [20 events, 2026-10-27T05:45:28Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇺🇸 185.190.56.235	27 Oct 2026	IDS alert: ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 (TCP/80 ... show more IDS alert: ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 (TCP/80); ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt (TCP/80) [1 event, 2026-10-27T05:44:17Z; auto-reported by CrowdSec] show less	Hacking Web App Attack
🇯🇵 34.97.182.209	27 Oct 2026	Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ... show more Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development \| Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-27T05:11:00Z; auto-reported by CrowdSec] show less	Web App Attack