AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User castipo joined AbuseIPDB in August 2025 and has reported 21,251 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇪🇨 186.47.77.39	19 Aug 2026	sshd :: 2026-08-19T11:14:18.398964+07:00 [host] sshd[40984]: Invalid user tommy from 186.47.77.39 po ... show more sshd :: 2026-08-19T11:14:18.398964+07:00 [host] sshd[40984]: Invalid user tommy from 186.47.77.39 port 34360 2026-08-19T11:17:42.629919+07:00 [host] sshd[41894]: Invalid user sato from 186.47.77.39 port 36728 show less	Brute-Force SSH
🇺🇸 20.69.90.245	19 Aug 2026	nginx-rce :: 20.69.90.245 - - [19/Aug/2026:10:50:32 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/. ... show more nginx-rce :: 20.69.90.245 - - [19/Aug/2026:10:50:32 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Exploited Host Web App Attack IoT Targeted
🇺🇸 66.132.172.103	19 Aug 2026	nginx-bad-ua :: 66.132.172.103 - - [18/Apr/2026:10:50:20 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozill ... show more nginx-bad-ua :: 66.132.172.103 - - [18/Apr/2026:10:50:20 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.103 - - [19/Aug/2026:10:18:07 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 172.202.49.190	19 Aug 2026	nginx-iot :: 172.202.49.190 - - [19/Aug/2026:10:17:08 +0700] "GET /manager/html HTTP/1.1" 400 248 "- ... show more nginx-iot :: 172.202.49.190 - - [19/Aug/2026:10:17:08 +0700] "GET /manager/html HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇺🇸 66.132.172.132	19 Aug 2026	nginx-bad-ua :: 66.132.172.132 - - [11/Jun/2026:11:57:14 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozill ... show more nginx-bad-ua :: 66.132.172.132 - - [11/Jun/2026:11:57:14 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.132 - - [19/Aug/2026:10:16:53 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 137.184.21.21	19 Aug 2026	nginx-env :: 137.184.21.21 - - [19/Aug/2026:10:11:38 +0700] "GET /.git/config HTTP/1.1" 301 162 "-" ... show more nginx-env :: 137.184.21.21 - - [19/Aug/2026:10:11:38 +0700] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" host="[ip]" cfip="-" cfray="-" 137.184.21.21 - - [19/Aug/2026:10:11:39 +0700] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" host="[ip]" cfip="-" cfray="-" show less	Hacking Web App Attack
🇷🇴 80.94.92.55	19 Aug 2026	sshd :: 2026-08-19T10:03:30.762550+07:00 [host] sshd[27230]: Invalid user test1 from 80.94.92.55 por ... show more sshd :: 2026-08-19T10:03:30.762550+07:00 [host] sshd[27230]: Invalid user test1 from 80.94.92.55 port 57040 2026-08-19T10:04:53.426677+07:00 [host] sshd[27375]: Invalid user test2 from 80.94.92.55 port 58904 show less	Brute-Force SSH
🇪🇬 193.227.54.55	19 Aug 2026	nginx-env :: 193.227.54.55 - - [19/Aug/2026:09:27:13 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Mozill ... show more nginx-env :: 193.227.54.55 - - [19/Aug/2026:09:27:13 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" host="[ip]" cfip="-" cfray="-" show less	Hacking Web App Attack
🇫🇷 169.58.161.169	19 Aug 2026	nginx-rce :: 169.58.161.169 - - [19/Aug/2026:08:54:46 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e ... show more nginx-rce :: 169.58.161.169 - - [19/Aug/2026:08:54:46 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Exploited Host Web App Attack IoT Targeted
🇯🇵 8.216.17.84	18 Aug 2026	nginx-bad-ua :: 8.216.17.84 - - [19/Aug/2026:06:22:35 +0700] "GET / HTTP/1.1" 301 162 "-" "curl/7.74 ... show more nginx-bad-ua :: 8.216.17.84 - - [19/Aug/2026:06:22:35 +0700] "GET / HTTP/1.1" 301 162 "-" "curl/7.74.0" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 66.132.172.139	18 Aug 2026	nginx-bad-ua :: 66.132.172.139 - - [30/Mar/2026:11:27:06 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozill ... show more nginx-bad-ua :: 66.132.172.139 - - [30/Mar/2026:11:27:06 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [30/Mar/2026:11:27:20 +0700] "GET /wiki HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [01/Jul/2026:15:02:54 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [18/Jul/2026:11:52:48 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [31/Jul/2026:05:39:49 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.139 - - [02/Aug/2026:19:57:28 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1 show less	Bad Web Bot
🇮🇩 69.5.20.205	18 Aug 2026	sshd :: 2026-08-19T04:56:53.229925+07:00 [host] sshd[497883]: Invalid user user2 from 69.5.20.205 po ... show more sshd :: 2026-08-19T04:56:53.229925+07:00 [host] sshd[497883]: Invalid user user2 from 69.5.20.205 port 39842 2026-08-19T05:03:42.725769+07:00 [host] sshd[498125]: Invalid user antoine from 69.5.20.205 port 57226 show less	Brute-Force SSH
🇯🇵 172.105.196.91	18 Aug 2026	nginx-bad-ua :: 172.105.196.91 - - [25/Jul/2026:18:13:31 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozill ... show more nginx-bad-ua :: 172.105.196.91 - - [25/Jul/2026:18:13:31 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 172.105.196.91 - - [29/Jul/2026:11:23:25 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 172.105.196.91 - - [14/Aug/2026:18:48:47 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 172.105.196.91 - - [19/Aug/2026:02:34:41 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇯🇵 182.171.90.17	18 Aug 2026	sshd :: 2026-08-19T02:23:43.604747+07:00 [host] sshd[452823]: Invalid user teamspeak from 182.171.90 ... show more sshd :: 2026-08-19T02:23:43.604747+07:00 [host] sshd[452823]: Invalid user teamspeak from 182.171.90.17 port 46096 2026-08-19T02:31:01.712795+07:00 [host] sshd[453005]: Invalid user test1 from 182.171.90.17 port 42818 show less	Brute-Force SSH
🇺🇸 66.132.172.187	18 Aug 2026	nginx-bad-ua :: 66.132.172.187 - - [21/Jun/2026:02:51:40 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozill ... show more nginx-bad-ua :: 66.132.172.187 - - [21/Jun/2026:02:51:40 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.187 - - [19/Aug/2026:01:56:43 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇰🇷 59.19.51.241	18 Aug 2026	sshd :: 2026-08-19T00:56:45.806419+07:00 [host] sshd[449640]: error: maximum authentication attempts ... show more sshd :: 2026-08-19T00:56:45.806419+07:00 [host] sshd[449640]: error: maximum authentication attempts exceeded for root from 59.19.51.241 port 47748 ssh2 [preauth] 2026-08-19T00:56:50.963495+07:00 [host] sshd[449642]: error: maximum authentication attempts exceeded for root from 59.19.51.241 port 48452 ssh2 [preauth] show less	Brute-Force SSH
🇨🇳 118.145.144.95	18 Aug 2026	sshd :: 2026-08-19T00:41:28.664017+07:00 [host] sshd[449191]: Invalid user user from 118.145.144.95 ... show more sshd :: 2026-08-19T00:41:28.664017+07:00 [host] sshd[449191]: Invalid user user from 118.145.144.95 port 48976 2026-08-19T00:44:56.041285+07:00 [host] sshd[449283]: Invalid user ubuntu from 118.145.144.95 port 49440 show less	Brute-Force SSH
🇺🇸 75.127.6.2	18 Aug 2026	nginx-bad-ua :: 75.127.6.2 - - [19/Aug/2026:00:23:40 +0700] "GET http://[host]/ HTTP/1.1" 301 162 "- ... show more nginx-bad-ua :: 75.127.6.2 - - [19/Aug/2026:00:23:40 +0700] "GET http://[host]/ HTTP/1.1" 301 162 "-" "Go-http-client/1.1" host="[host]" cfip="-" cfray="-" show less	Bad Web Bot
🇸🇬 103.134.154.235	18 Aug 2026	sshd :: 2026-08-19T00:16:48.520923+07:00 [host] sshd[447801]: Invalid user stu from 103.134.154.235 ... show more sshd :: 2026-08-19T00:16:48.520923+07:00 [host] sshd[447801]: Invalid user stu from 103.134.154.235 port 39050 2026-08-19T00:20:24.276146+07:00 [host] sshd[447857]: Invalid user web from 103.134.154.235 port 48740 show less	Brute-Force SSH
🇳🇱 77.83.39.6	18 Aug 2026	nginx-env :: 77.83.39.6 - - [01/Aug/2026:18:11:17 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more nginx-env :: 77.83.39.6 - - [01/Aug/2026:18:11:17 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 5.2; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1" host="[ip]" cfip="-" cfray="-" 77.83.39.6 - - [17/Aug/2026:00:46:40 +0700] "GET /.env HTTP/1.1" 444 0 "-" "AdsBot-Google ( http://[host]/[host])" host="[ip]" cfip="-" cfray="-" 77.83.39.6 - - [18/Aug/2026:23:09:31 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 9; SM-G975F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" host="[ip]" cfip="-" cfray="-" show less	Hacking Web App Attack
🇺🇸 157.245.92.147	18 Aug 2026	nginx-bad-ua :: 157.245.92.147 - - [18/Aug/2026:22:27:00 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozill ... show more nginx-bad-ua :: 157.245.92.147 - - [18/Aug/2026:22:27:00 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇧🇪 34.38.245.25	18 Aug 2026	nginx-bad-ua :: 34.38.245.25 - - [04/Aug/2026:22:15:41 +0700] "GET / HTTP/1.1" 301 162 "-" "python-r ... show more nginx-bad-ua :: 34.38.245.25 - - [04/Aug/2026:22:15:41 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.38.245.25 - - [13/Aug/2026:07:45:19 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.38.245.25 - - [18/Aug/2026:19:57:44 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇨🇳 182.119.225.84	18 Aug 2026	nginx-iot :: 182.119.225.84 - - [18/Aug/2026:17:20:09 +0700] "GET /boaform/admin/formLogin?username= ... show more nginx-iot :: 182.119.225.84 - - [18/Aug/2026:17:20:09 +0700] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 301 162 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇭🇰 47.243.249.24	18 Aug 2026	nginx-rce :: 47.243.249.24 - - [18/Aug/2026:15:36:48 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more nginx-rce :: 47.243.249.24 - - [18/Aug/2026:15:36:48 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Exploited Host Web App Attack IoT Targeted
🇺🇸 20.65.193.226	18 Aug 2026	nginx-iot :: 20.65.193.226 - - [18/Aug/2026:14:24:29 +0700] "GET /manager/html HTTP/1.1" 301 162 "-" ... show more nginx-iot :: 20.65.193.226 - - [18/Aug/2026:14:24:29 +0700] "GET /manager/html HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted