AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User castipo joined AbuseIPDB in August 2025 and has reported 21,216 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 66.132.172.139	21 hours ago	nginx-bad-ua :: 66.132.172.139 - - [30/Mar/2026:11:27:06 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozill ... show more nginx-bad-ua :: 66.132.172.139 - - [30/Mar/2026:11:27:06 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [30/Mar/2026:11:27:20 +0700] "GET /wiki HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [01/Jul/2026:15:02:54 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [18/Jul/2026:11:52:48 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [31/Jul/2026:05:39:49 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [02/Aug/2026:19:57:28 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1 show less	Bad Web Bot
🇮🇩 69.5.20.205	22 hours ago	sshd :: 2026-08-19T04:56:53.229925+07:00 [host] sshd[497883]: Invalid user user2 from 69.5.20.205 po ... show more sshd :: 2026-08-19T04:56:53.229925+07:00 [host] sshd[497883]: Invalid user user2 from 69.5.20.205 port 39842 2026-08-19T05:03:42.725769+07:00 [host] sshd[498125]: Invalid user antoine from 69.5.20.205 port 57226 show less	Brute-Force SSH
🇯🇵 172.105.196.91	18 Aug 2026	nginx-bad-ua :: 172.105.196.91 - - [25/Jul/2026:18:13:31 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozill ... show more nginx-bad-ua :: 172.105.196.91 - - [25/Jul/2026:18:13:31 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 172.105.196.91 - - [29/Jul/2026:11:23:25 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 172.105.196.91 - - [14/Aug/2026:18:48:47 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 172.105.196.91 - - [19/Aug/2026:02:34:41 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇯🇵 182.171.90.17	18 Aug 2026	sshd :: 2026-08-19T02:23:43.604747+07:00 [host] sshd[452823]: Invalid user teamspeak from 182.171.90 ... show more sshd :: 2026-08-19T02:23:43.604747+07:00 [host] sshd[452823]: Invalid user teamspeak from 182.171.90.17 port 46096 2026-08-19T02:31:01.712795+07:00 [host] sshd[453005]: Invalid user test1 from 182.171.90.17 port 42818 show less	Brute-Force SSH
🇺🇸 66.132.172.187	18 Aug 2026	nginx-bad-ua :: 66.132.172.187 - - [21/Jun/2026:02:51:40 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozill ... show more nginx-bad-ua :: 66.132.172.187 - - [21/Jun/2026:02:51:40 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.187 - - [19/Aug/2026:01:56:43 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇰🇷 59.19.51.241	18 Aug 2026	sshd :: 2026-08-19T00:56:45.806419+07:00 [host] sshd[449640]: error: maximum authentication attempts ... show more sshd :: 2026-08-19T00:56:45.806419+07:00 [host] sshd[449640]: error: maximum authentication attempts exceeded for root from 59.19.51.241 port 47748 ssh2 [preauth] 2026-08-19T00:56:50.963495+07:00 [host] sshd[449642]: error: maximum authentication attempts exceeded for root from 59.19.51.241 port 48452 ssh2 [preauth] show less	Brute-Force SSH
🇨🇳 118.145.144.95	18 Aug 2026	sshd :: 2026-08-19T00:41:28.664017+07:00 [host] sshd[449191]: Invalid user user from 118.145.144.95 ... show more sshd :: 2026-08-19T00:41:28.664017+07:00 [host] sshd[449191]: Invalid user user from 118.145.144.95 port 48976 2026-08-19T00:44:56.041285+07:00 [host] sshd[449283]: Invalid user ubuntu from 118.145.144.95 port 49440 show less	Brute-Force SSH
🇺🇸 75.127.6.2	18 Aug 2026	nginx-bad-ua :: 75.127.6.2 - - [19/Aug/2026:00:23:40 +0700] "GET http://[host]/ HTTP/1.1" 301 162 "- ... show more nginx-bad-ua :: 75.127.6.2 - - [19/Aug/2026:00:23:40 +0700] "GET http://[host]/ HTTP/1.1" 301 162 "-" "Go-http-client/1.1" host="[host]" cfip="-" cfray="-" show less	Bad Web Bot
🇸🇬 103.134.154.235	18 Aug 2026	sshd :: 2026-08-19T00:16:48.520923+07:00 [host] sshd[447801]: Invalid user stu from 103.134.154.235 ... show more sshd :: 2026-08-19T00:16:48.520923+07:00 [host] sshd[447801]: Invalid user stu from 103.134.154.235 port 39050 2026-08-19T00:20:24.276146+07:00 [host] sshd[447857]: Invalid user web from 103.134.154.235 port 48740 show less	Brute-Force SSH
🇳🇱 77.83.39.6	18 Aug 2026	nginx-env :: 77.83.39.6 - - [01/Aug/2026:18:11:17 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more nginx-env :: 77.83.39.6 - - [01/Aug/2026:18:11:17 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 5.2; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1" host="[ip]" cfip="-" cfray="-" 77.83.39.6 - - [17/Aug/2026:00:46:40 +0700] "GET /.env HTTP/1.1" 444 0 "-" "AdsBot-Google ( http://[host]/[host])" host="[ip]" cfip="-" cfray="-" 77.83.39.6 - - [18/Aug/2026:23:09:31 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 9; SM-G975F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" host="[ip]" cfip="-" cfray="-" show less	Hacking Web App Attack
🇺🇸 157.245.92.147	18 Aug 2026	nginx-bad-ua :: 157.245.92.147 - - [18/Aug/2026:22:27:00 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozill ... show more nginx-bad-ua :: 157.245.92.147 - - [18/Aug/2026:22:27:00 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇧🇪 34.38.245.25	18 Aug 2026	nginx-bad-ua :: 34.38.245.25 - - [04/Aug/2026:22:15:41 +0700] "GET / HTTP/1.1" 301 162 "-" "python-r ... show more nginx-bad-ua :: 34.38.245.25 - - [04/Aug/2026:22:15:41 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.38.245.25 - - [13/Aug/2026:07:45:19 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.38.245.25 - - [18/Aug/2026:19:57:44 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇨🇳 182.119.225.84	18 Aug 2026	nginx-iot :: 182.119.225.84 - - [18/Aug/2026:17:20:09 +0700] "GET /boaform/admin/formLogin?username= ... show more nginx-iot :: 182.119.225.84 - - [18/Aug/2026:17:20:09 +0700] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 301 162 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇭🇰 47.243.249.24	18 Aug 2026	nginx-rce :: 47.243.249.24 - - [18/Aug/2026:15:36:48 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more nginx-rce :: 47.243.249.24 - - [18/Aug/2026:15:36:48 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Exploited Host Web App Attack IoT Targeted
🇺🇸 20.65.193.226	18 Aug 2026	nginx-iot :: 20.65.193.226 - - [18/Aug/2026:14:24:29 +0700] "GET /manager/html HTTP/1.1" 301 162 "-" ... show more nginx-iot :: 20.65.193.226 - - [18/Aug/2026:14:24:29 +0700] "GET /manager/html HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇮🇩 103.89.79.77	18 Aug 2026	nginx-bad-ua :: 103.89.79.77 - - [17/Aug/2026:13:42:37 +0700] "GET / HTTP/2.0" 301 162 "-" "curl/8.7 ... show more nginx-bad-ua :: 103.89.79.77 - - [17/Aug/2026:13:42:37 +0700] "GET / HTTP/2.0" 301 162 "-" "curl/8.7.1" host="[user].[host]" cfip="103.89.79.77" cfray="a2c6b325aacf8950-SIN" 103.89.79.77 - - [17/Aug/2026:13:42:38 +0700] "GET / HTTP/2.0" 404 107 "-" "curl/8.7.1" host="vps.[user].[host]" cfip="103.89.79.77" cfray="a2c6b32c487cad69-SIN" 103.89.79.77 - - [18/Aug/2026:14:06:05 +0700] "GET / HTTP/2.0" 301 162 "-" "curl/8.7.1" host="[user].[host]" cfip="103.89.79.77" cfray="a2cf12e57a426035-SIN" show less	Bad Web Bot
🇮🇩 36.95.112.253	18 Aug 2026	nginx-botsearch :: 36.95.112.253 - - [17/Aug/2026:10:42:32 +0700] "GET /[host] HTTP/2.0" 404 2852 "h ... show more nginx-botsearch :: 36.95.112.253 - - [17/Aug/2026:10:42:32 +0700] "GET /[host] HTTP/2.0" 404 2852 "https://shop.[user].[host]/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" host="shop.[user].[host]" cfip="36.95.112.253" cfray="a2c5ab5ad9a640e0-HAM" 36.95.112.253 - - [17/Aug/2026:15:04:01 +0700] "GET /[host] HTTP/2.0" 404 2852 "https://shop.[user].[host]/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" host="shop.[user].[host]" cfip="36.95.112.253" cfray="a2c72a65cc5ffd97-HAM" 36.95.112.253 - - [18/Aug/2026:12:44:50 +0700] "GET /[host] HTTP/2.0" 404 2852 "https://shop.[user].[host]/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" host="shop.[user].[host]" cfip="36.95.112.253" cfray="a2ce9be01e538142-HAM" show less	Port Scan Hacking Web App Attack
🇺🇸 66.132.224.85	18 Aug 2026	nginx-bad-ua :: 66.132.224.85 - - [18/Aug/2026:12:21:35 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla ... show more nginx-bad-ua :: 66.132.224.85 - - [18/Aug/2026:12:21:35 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 66.132.195.46	18 Aug 2026	nginx-bad-ua :: 66.132.195.46 - - [18/Aug/2026:12:20:40 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla ... show more nginx-bad-ua :: 66.132.195.46 - - [18/Aug/2026:12:20:40 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 46.101.193.40	18 Aug 2026	nginx-bad-ua :: 46.101.193.40 - - [18/Aug/2026:10:03:23 +0700] "GET / HTTP/1.1" 400 248 "-" "Go-http ... show more nginx-bad-ua :: 46.101.193.40 - - [18/Aug/2026:10:03:23 +0700] "GET / HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇧🇮 154.117.199.56	18 Aug 2026	sshd :: 2026-08-18T09:57:44.236516+07:00 [host] sshd[361585]: Invalid user dave from 154.117.199.56 ... show more sshd :: 2026-08-18T09:57:44.236516+07:00 [host] sshd[361585]: Invalid user dave from 154.117.199.56 port 34204 2026-08-18T10:02:50.195719+07:00 [host] sshd[362127]: Invalid user hamid from 154.117.199.56 port 39948 show less	Brute-Force SSH
🇸🇬 206.189.34.180	18 Aug 2026	nginx-bad-ua :: 206.189.34.180 - - [20/Jul/2026:20:15:41 +0700] "GET /[host] HTTP/1.1" 403 146 "-" " ... show more nginx-bad-ua :: 206.189.34.180 - - [20/Jul/2026:20:15:41 +0700] "GET /[host] HTTP/1.1" 403 146 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" 206.189.34.180 - - [18/Aug/2026:09:51:26 +0700] "GET /[host] HTTP/1.1" 403 146 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 139.59.215.142	18 Aug 2026	nginx-bad-ua :: 139.59.215.142 - - [18/Aug/2026:09:40:18 +0700] "POST / HTTP/1.1" 403 146 "-" "Go-ht ... show more nginx-bad-ua :: 139.59.215.142 - - [18/Aug/2026:09:40:18 +0700] "POST / HTTP/1.1" 403 146 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 157.230.30.122	18 Aug 2026	nginx-bad-ua :: 157.230.30.122 - - [18/Aug/2026:09:40:18 +0700] "GET /v2/_catalog HTTP/1.1" 400 248 ... show more nginx-bad-ua :: 157.230.30.122 - - [18/Aug/2026:09:40:18 +0700] "GET /v2/_catalog HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇩🇪 161.35.78.63	18 Aug 2026	nginx-bad-ua :: 161.35.78.63 - - [18/Aug/2026:09:40:18 +0700] "GET /solr/admin/info/system HTTP/1.1" ... show more nginx-bad-ua :: 161.35.78.63 - - [18/Aug/2026:09:40:18 +0700] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Hacking Bad Web Bot Web App Attack