AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User castipo joined AbuseIPDB in August 2025 and has reported 21,154 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇨🇳 182.119.225.84	11 minutes ago	nginx-iot :: 182.119.225.84 - - [18/Aug/2026:17:20:09 +0700] "GET /boaform/admin/formLogin?username= ... show more nginx-iot :: 182.119.225.84 - - [18/Aug/2026:17:20:09 +0700] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 301 162 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇭🇰 47.243.249.24	1 hour ago	nginx-rce :: 47.243.249.24 - - [18/Aug/2026:15:36:48 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more nginx-rce :: 47.243.249.24 - - [18/Aug/2026:15:36:48 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Exploited Host Web App Attack IoT Targeted
🇺🇸 20.65.193.226	3 hours ago	nginx-iot :: 20.65.193.226 - - [18/Aug/2026:14:24:29 +0700] "GET /manager/html HTTP/1.1" 301 162 "-" ... show more nginx-iot :: 20.65.193.226 - - [18/Aug/2026:14:24:29 +0700] "GET /manager/html HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇮🇩 103.89.79.77	3 hours ago	nginx-bad-ua :: 103.89.79.77 - - [17/Aug/2026:13:42:37 +0700] "GET / HTTP/2.0" 301 162 "-" "curl/8.7 ... show more nginx-bad-ua :: 103.89.79.77 - - [17/Aug/2026:13:42:37 +0700] "GET / HTTP/2.0" 301 162 "-" "curl/8.7.1" host="[user].[host]" cfip="103.89.79.77" cfray="a2c6b325aacf8950-SIN" 103.89.79.77 - - [17/Aug/2026:13:42:38 +0700] "GET / HTTP/2.0" 404 107 "-" "curl/8.7.1" host="vps.[user].[host]" cfip="103.89.79.77" cfray="a2c6b32c487cad69-SIN" 103.89.79.77 - - [18/Aug/2026:14:06:05 +0700] "GET / HTTP/2.0" 301 162 "-" "curl/8.7.1" host="[user].[host]" cfip="103.89.79.77" cfray="a2cf12e57a426035-SIN" show less	Bad Web Bot
🇮🇩 36.95.112.253	4 hours ago	nginx-botsearch :: 36.95.112.253 - - [17/Aug/2026:10:42:32 +0700] "GET /[host] HTTP/2.0" 404 2852 "h ... show more nginx-botsearch :: 36.95.112.253 - - [17/Aug/2026:10:42:32 +0700] "GET /[host] HTTP/2.0" 404 2852 "https://shop.[user].[host]/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" host="shop.[user].[host]" cfip="36.95.112.253" cfray="a2c5ab5ad9a640e0-HAM" 36.95.112.253 - - [17/Aug/2026:15:04:01 +0700] "GET /[host] HTTP/2.0" 404 2852 "https://shop.[user].[host]/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" host="shop.[user].[host]" cfip="36.95.112.253" cfray="a2c72a65cc5ffd97-HAM" 36.95.112.253 - - [18/Aug/2026:12:44:50 +0700] "GET /[host] HTTP/2.0" 404 2852 "https://shop.[user].[host]/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" host="shop.[user].[host]" cfip="36.95.112.253" cfray="a2ce9be01e538142-HAM" show less	Port Scan Hacking Web App Attack
🇺🇸 66.132.224.85	5 hours ago	nginx-bad-ua :: 66.132.224.85 - - [18/Aug/2026:12:21:35 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla ... show more nginx-bad-ua :: 66.132.224.85 - - [18/Aug/2026:12:21:35 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 66.132.195.46	5 hours ago	nginx-bad-ua :: 66.132.195.46 - - [18/Aug/2026:12:20:40 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla ... show more nginx-bad-ua :: 66.132.195.46 - - [18/Aug/2026:12:20:40 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 46.101.193.40	7 hours ago	nginx-bad-ua :: 46.101.193.40 - - [18/Aug/2026:10:03:23 +0700] "GET / HTTP/1.1" 400 248 "-" "Go-http ... show more nginx-bad-ua :: 46.101.193.40 - - [18/Aug/2026:10:03:23 +0700] "GET / HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇧🇮 154.117.199.56	7 hours ago	sshd :: 2026-08-18T09:57:44.236516+07:00 [host] sshd[361585]: Invalid user dave from 154.117.199.56 ... show more sshd :: 2026-08-18T09:57:44.236516+07:00 [host] sshd[361585]: Invalid user dave from 154.117.199.56 port 34204 2026-08-18T10:02:50.195719+07:00 [host] sshd[362127]: Invalid user hamid from 154.117.199.56 port 39948 show less	Brute-Force SSH
🇸🇬 206.189.34.180	7 hours ago	nginx-bad-ua :: 206.189.34.180 - - [20/Jul/2026:20:15:41 +0700] "GET /[host] HTTP/1.1" 403 146 "-" " ... show more nginx-bad-ua :: 206.189.34.180 - - [20/Jul/2026:20:15:41 +0700] "GET /[host] HTTP/1.1" 403 146 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" 206.189.34.180 - - [18/Aug/2026:09:51:26 +0700] "GET /[host] HTTP/1.1" 403 146 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 139.59.215.142	7 hours ago	nginx-bad-ua :: 139.59.215.142 - - [18/Aug/2026:09:40:18 +0700] "POST / HTTP/1.1" 403 146 "-" "Go-ht ... show more nginx-bad-ua :: 139.59.215.142 - - [18/Aug/2026:09:40:18 +0700] "POST / HTTP/1.1" 403 146 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 157.230.30.122	7 hours ago	nginx-bad-ua :: 157.230.30.122 - - [18/Aug/2026:09:40:18 +0700] "GET /v2/_catalog HTTP/1.1" 400 248 ... show more nginx-bad-ua :: 157.230.30.122 - - [18/Aug/2026:09:40:18 +0700] "GET /v2/_catalog HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 161.35.78.63	7 hours ago	nginx-bad-ua :: 161.35.78.63 - - [18/Aug/2026:09:40:18 +0700] "GET /solr/admin/info/system HTTP/1.1" ... show more nginx-bad-ua :: 161.35.78.63 - - [18/Aug/2026:09:40:18 +0700] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Hacking Bad Web Bot Web App Attack
🇩🇪 164.92.176.135	7 hours ago	nginx-bad-ua :: 164.92.176.135 - - [18/Aug/2026:09:40:18 +0700] "GET /query?q=SHOW+DIAGNOSTICS HTTP/ ... show more nginx-bad-ua :: 164.92.176.135 - - [18/Aug/2026:09:40:18 +0700] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 207.154.233.124	7 hours ago	nginx-bad-ua :: 207.154.233.124 - - [18/Aug/2026:09:40:18 +0700] "GET /cgi-bin/[host] HTTP/1.1" 400 ... show more nginx-bad-ua :: 207.154.233.124 - - [18/Aug/2026:09:40:18 +0700] "GET /cgi-bin/[host] HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Bad Web Bot Web App Attack IoT Targeted
🇩🇪 164.90.185.169	7 hours ago	nginx-botsearch :: 164.90.185.169 - - [18/Aug/2026:09:40:18 +0700] "GET /HNAP1 HTTP/1.1" 403 146 "-" ... show more nginx-botsearch :: 164.90.185.169 - - [18/Aug/2026:09:40:18 +0700] "GET /HNAP1 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; Odin; https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack
🇰🇿 194.32.140.43	8 hours ago	nginx-bad-ua :: 194.32.140.43 - - [18/Aug/2026:09:02:36 +0700] "GET / HTTP/2.0" 403 107 "-" "Mozilla ... show more nginx-bad-ua :: 194.32.140.43 - - [18/Aug/2026:09:02:36 +0700] "GET / HTTP/2.0" 403 107 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇮🇩 43.133.140.5	12 hours ago	sshd :: 2026-08-18T05:19:19.595253+07:00 [host] sshd[338377]: Invalid user de from 43.133.140.5 port ... show more sshd :: 2026-08-18T05:19:19.595253+07:00 [host] sshd[338377]: Invalid user de from 43.133.140.5 port 52670 2026-08-18T05:26:04.843776+07:00 [host] sshd[338597]: Invalid user test01 from 43.133.140.5 port 33802 show less	Brute-Force SSH
🇱🇹 5.181.86.46	13 hours ago	nginx-botsearch :: 5.181.86.46 - - [03/Apr/2026:23:24:19 +0700] "GET /remote/login?lang=en HTTP/1.1" ... show more nginx-botsearch :: 5.181.86.46 - - [03/Apr/2026:23:24:19 +0700] "GET /remote/login?lang=en HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" 5.181.86.46 - - [03/Apr/2026:23:24:19 +0700] "GET /remote/login?lang=en HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" 5.181.86.46 - - [18/Aug/2026:03:44:38 +0700] "GET /remote/login?lang=en HTTP/1.1" 403 118 "-" "-" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack
🇩🇪 167.94.146.57	14 hours ago	nginx-bad-ua :: 167.94.146.57 - - [25/Apr/2026:07:17:32 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla ... show more nginx-bad-ua :: 167.94.146.57 - - [25/Apr/2026:07:17:32 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 167.94.146.57 - - [11/May/2026:18:01:38 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 167.94.146.57 - - [10/Jun/2026:22:53:52 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 167.94.146.57 - - [19/Jun/2026:01:16:16 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 167.94.146.57 - - [19/Jul/2026:00:35:53 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 167.94.146.57 - - [18/Aug/2026:03:16:16 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https:/ show less	Bad Web Bot
🇵🇰 223.123.92.56	15 hours ago	nginx-rce :: 223.123.92.56 - - [18/Aug/2026:02:26:37 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more nginx-rce :: 223.123.92.56 - - [18/Aug/2026:02:26:37 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Exploited Host Web App Attack IoT Targeted
🇨🇦 45.194.92.47	17 hours ago	nginx-bad-ua :: 45.194.92.47 - - [18/Aug/2026:00:12:53 +0700] "GET http://[host]:8080/judge HTTP/1.1 ... show more nginx-bad-ua :: 45.194.92.47 - - [18/Aug/2026:00:12:53 +0700] "GET http://[host]:8080/judge HTTP/1.1" 301 162 "-" "Go-http-client/1.1" host="[host]" cfip="-" cfray="-" show less	VPN IP Bad Web Bot
🇺🇸 20.14.93.87	17 hours ago	nginx-bad-ua :: 20.14.93.87 - - [17/Aug/2026:23:42:54 +0700] "GET /autodiscover/[host]?@zdi/Powershe ... show more nginx-bad-ua :: 20.14.93.87 - - [17/Aug/2026:23:42:54 +0700] "GET /autodiscover/[host]?@zdi/Powershell HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇨🇳 175.6.54.21	17 hours ago	nginx-bad-ua :: 175.6.54.21 - - [17/Aug/2026:23:37:32 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5 ... show more nginx-bad-ua :: 175.6.54.21 - - [17/Aug/2026:23:37:32 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇮🇩 103.93.129.237	18 hours ago	nginx-botsearch :: 103.93.129.237 - - [17/Aug/2026:23:16:40 +0700] "GET //wp-includes/[host] HTTP/2. ... show more nginx-botsearch :: 103.93.129.237 - - [17/Aug/2026:23:16:40 +0700] "GET //wp-includes/[host] HTTP/2.0" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" host="vps.[user].[host]" cfip="103.93.129.237" cfray="a2c9fc0bdf589bda-SIN" show less	Port Scan Hacking Web App Attack