AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User castipo joined AbuseIPDB in August 2025 and has reported 21,380 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇩🇪 150.241.115.90	22 Aug 2026	nginx-rce :: 150.241.115.90 - - [22/Aug/2026:20:26:12 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e ... show more nginx-rce :: 150.241.115.90 - - [22/Aug/2026:20:26:12 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Exploited Host Web App Attack IoT Targeted
🇧🇪 34.156.144.87	22 Aug 2026	nginx-bad-ua :: 34.156.144.87 - - [06/Aug/2026:08:32:07 +0700] "GET / HTTP/1.1" 403 118 "-" "python- ... show more nginx-bad-ua :: 34.156.144.87 - - [06/Aug/2026:08:32:07 +0700] "GET / HTTP/1.1" 403 118 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.156.144.87 - - [15/Aug/2026:21:59:41 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.156.144.87 - - [22/Aug/2026:19:33:17 +0700] "GET / HTTP/1.1" 403 118 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 65.49.1.38	22 Aug 2026	nginx-bad-ua :: 65.49.1.38 - - [25/Feb/2026:11:29:40 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5. ... show more nginx-bad-ua :: 65.49.1.38 - - [25/Feb/2026:11:29:40 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36" host="[ip]" cfip="-" cfray="-" 65.49.1.38 - - [25/Feb/2026:11:30:47 +0700] "GET /webui/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0" host="[ip]" cfip="-" cfray="-" 65.49.1.38 - - [25/Feb/2026:11:32:38 +0700] "GET /[host] HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/119.0" host="[ip]" cfip="-" cfray="-" 65.49.1.38 - - [25/Feb/2026:11:33:39 +0700] "GET /geoserver/web/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36" host="[ip]" cfip="-" cfray="-" 65.49.1.38 - - [22/Aug/2026:18:23:46 +0700] "GET /webui/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, show less	Bad Web Bot
🇺🇸 135.237.127.54	22 Aug 2026	nginx-bad-ua :: 135.237.127.54 - - [15/Mar/2026:21:17:46 +0700] "GET /ecp/Current/exporttool/[host] ... show more nginx-bad-ua :: 135.237.127.54 - - [15/Mar/2026:21:17:46 +0700] "GET /ecp/Current/exporttool/[host] HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 135.237.127.54 - - [27/Mar/2026:17:23:36 +0700] "GET /owa/auth/[host] HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 135.237.127.54 - - [07/Apr/2026:10:31:06 +0700] "GET /owa/auth/[host] HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 135.237.127.54 - - [21/Apr/2026:18:56:11 +0700] "GET /owa/auth/[host] HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 135.237.127.54 - - [27/Apr/2026:14:26:03 +0700] "GET /owa/auth/[host] HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 135.237.127.54 - - [03/Jun/2026:20:02:45 +0700] "GET /owa/auth/[host] HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 135.237.127.54 - - [26/Jul/2026:13:27:43 +0700] "GET /ecp/Current/exporttool/[host] HTTP show less	Port Scan Bad Web Bot
🇺🇸 172.178.82.191	22 Aug 2026	nginx-bad-ua :: 172.178.82.191 - - [22/Aug/2026:16:07:33 +0700] "GET /developmentserver/metadatauplo ... show more nginx-bad-ua :: 172.178.82.191 - - [22/Aug/2026:16:07:33 +0700] "GET /developmentserver/metadatauploader HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Bad Web Bot
🇸🇬 101.47.15.26	22 Aug 2026	sshd :: 2026-08-22T14:01:14.221511+07:00 [host] sshd[608445]: Invalid user manasa from 101.47.15.26 ... show more sshd :: 2026-08-22T14:01:14.221511+07:00 [host] sshd[608445]: Invalid user manasa from 101.47.15.26 port 54790 show less	Brute-Force SSH
🇬🇧 5.252.83.173	22 Aug 2026	nginx-bad-ua :: 5.252.83.173 - - [22/Aug/2026:13:48:55 +0700] "POST /onvif/device_service HTTP/1.1" ... show more nginx-bad-ua :: 5.252.83.173 - - [22/Aug/2026:13:48:55 +0700] "POST /onvif/device_service HTTP/1.1" 403 146 "-" "Go-http-client/1.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇻🇳 171.231.182.15	22 Aug 2026	sshd :: 2026-08-22T11:58:31.584320+07:00 [host] sshd[598837]: Invalid user admin from 171.231.182.15 ... show more sshd :: 2026-08-22T11:58:31.584320+07:00 [host] sshd[598837]: Invalid user admin from 171.231.182.15 port 53122 2026-08-22T11:58:49.203090+07:00 [host] sshd[598895]: Invalid user ubnt from 171.231.182.15 port 39432 show less	Brute-Force SSH
🇻🇳 27.79.6.189	22 Aug 2026	sshd :: 2026-08-22T11:58:43.638439+07:00 [host] sshd[598841]: Invalid user squid from 27.79.6.189 po ... show more sshd :: 2026-08-22T11:58:43.638439+07:00 [host] sshd[598841]: Invalid user squid from 27.79.6.189 port 51620 2026-08-22T11:58:47.067040+07:00 [host] sshd[598843]: Invalid user config from 27.79.6.189 port 51626 show less	Brute-Force SSH
🇳🇱 185.226.197.7	22 Aug 2026	nginx-bad-ua :: 185.226.197.7 - - [22/Aug/2026:09:53:12 +0700] "POST /mcp HTTP/2.0" 403 107 "-" "pyt ... show more nginx-bad-ua :: 185.226.197.7 - - [22/Aug/2026:09:53:12 +0700] "POST /mcp HTTP/2.0" 403 107 "-" "python-httpx/0.28.1" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇨🇳 221.1.226.152	22 Aug 2026	nginx-iot :: 221.1.226.152 - - [22/Aug/2026:08:04:49 +0700] "POST /HNAP1/ HTTP/1.0" 301 162 "-" "-" ... show more nginx-iot :: 221.1.226.152 - - [22/Aug/2026:08:04:49 +0700] "POST /HNAP1/ HTTP/1.0" 301 162 "-" "-" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇺🇸 66.132.172.141	21 Aug 2026	nginx-bad-ua :: 66.132.172.141 - - [11/Jul/2026:07:48:02 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozill ... show more nginx-bad-ua :: 66.132.172.141 - - [11/Jul/2026:07:48:02 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.141 - - [08/Aug/2026:00:54:22 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.141 - - [11/Aug/2026:05:57:30 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 66.132.172.141 - - [22/Aug/2026:06:31:31 +0700] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇭🇰 199.45.154.53	21 Aug 2026	nginx-bad-ua :: 199.45.154.53 - - [22/Aug/2026:06:17:04 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla ... show more nginx-bad-ua :: 199.45.154.53 - - [22/Aug/2026:06:17:04 +0700] "GET / HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 47.77.176.80	21 Aug 2026	nginx-bad-ua :: 47.77.176.80 - - [22/Aug/2026:05:07:53 +0700] "GET / HTTP/2.0" 403 107 "-" "Go-http- ... show more nginx-bad-ua :: 47.77.176.80 - - [22/Aug/2026:05:07:53 +0700] "GET / HTTP/2.0" 403 107 "-" "Go-http-client/2.0" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇺🇸 216.180.246.214	21 Aug 2026	nginx-botsearch :: 216.180.246.214 - - [22/Aug/2026:03:17:16 +0700] "GET /manage/account/login HTTP/ ... show more nginx-botsearch :: 216.180.246.214 - - [22/Aug/2026:03:17:16 +0700] "GET /manage/account/login HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://[host]/genomecrawler)" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack
🇩🇪 91.98.71.190	21 Aug 2026	sshd :: 2026-08-22T02:14:34.246596+07:00 [host] sshd[526167]: Invalid user admin from 91.98.71.190 p ... show more sshd :: 2026-08-22T02:14:34.246596+07:00 [host] sshd[526167]: Invalid user admin from 91.98.71.190 port 33464 2026-08-22T02:15:16.245693+07:00 [host] sshd[526225]: Invalid user user from 91.98.71.190 port 50666 show less	Brute-Force SSH
🇧🇪 34.156.156.224	21 Aug 2026	nginx-bad-ua :: 34.156.156.224 - - [02/Aug/2026:10:12:42 +0700] "GET / HTTP/1.1" 403 118 "-" "python ... show more nginx-bad-ua :: 34.156.156.224 - - [02/Aug/2026:10:12:42 +0700] "GET / HTTP/1.1" 403 118 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.156.156.224 - - [09/Aug/2026:08:53:49 +0700] "GET / HTTP/1.1" 403 118 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.156.156.224 - - [17/Aug/2026:00:24:12 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" 34.156.156.224 - - [22/Aug/2026:01:59:38 +0700] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇵🇰 160.30.142.212	21 Aug 2026	nginx-iot :: 160.30.142.212 - - [22/Aug/2026:01:57:58 +0700] "GET /boaform/admin/formLogin?username= ... show more nginx-iot :: 160.30.142.212 - - [22/Aug/2026:01:57:58 +0700] "GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0" 301 162 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇺🇸 20.169.83.157	21 Aug 2026	nginx-iot :: 20.169.83.157 - - [20/Jun/2026:01:22:33 +0700] "GET /manager/text/list HTTP/1.1" 301 16 ... show more nginx-iot :: 20.169.83.157 - - [20/Jun/2026:01:22:33 +0700] "GET /manager/text/list HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" 20.169.83.157 - - [22/Aug/2026:01:13:48 +0700] "GET /actuator/health HTTP/1.1" 403 118 "-" "Mozilla/5.0 zgrab/0.x" host="[ip]" cfip="-" cfray="-" show less	Port Scan Hacking Web App Attack IoT Targeted
🇮🇳 4.240.39.201	21 Aug 2026	nginx-env :: 4.240.39.201 - - [21/Aug/2026:22:39:45 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Python/ ... show more nginx-env :: 4.240.39.201 - - [21/Aug/2026:22:39:45 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Python/3.12 aiohttp/3.13.5" host="[ip]" cfip="-" cfray="-" show less	Hacking Web App Attack
🇯🇵 47.245.56.233	21 Aug 2026	nginx-bad-ua :: 47.245.56.233 - - [26/Jun/2026:23:14:55 +0700] "GET / HTTP/1.1" 301 162 "-" "curl/7. ... show more nginx-bad-ua :: 47.245.56.233 - - [26/Jun/2026:23:14:55 +0700] "GET / HTTP/1.1" 301 162 "-" "curl/7.64.1" host="[ip]" cfip="-" cfray="-" 47.245.56.233 - - [21/Aug/2026:21:15:56 +0700] "GET / HTTP/1.1" 301 162 "-" "curl/7.74.0" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇸🇬 43.106.50.207	21 Aug 2026	nginx-bad-ua :: 43.106.50.207 - - [21/Aug/2026:19:45:46 +0700] "GET / HTTP/1.1" 301 162 "-" "curl/7. ... show more nginx-bad-ua :: 43.106.50.207 - - [21/Aug/2026:19:45:46 +0700] "GET / HTTP/1.1" 301 162 "-" "curl/7.78.0" host="[ip]" cfip="-" cfray="-" show less	Bad Web Bot
🇻🇳 27.79.41.230	21 Aug 2026	sshd :: 2026-08-21T18:38:54.266844+07:00 [host] sshd[491548]: Invalid user admin from 27.79.41.230 p ... show more sshd :: 2026-08-21T18:38:54.266844+07:00 [host] sshd[491548]: Invalid user admin from 27.79.41.230 port 51566 2026-08-21T18:39:11.197718+07:00 [host] sshd[491579]: Invalid user config from 27.79.41.230 port 60078 show less	Brute-Force SSH
🇮🇳 68.183.92.206	21 Aug 2026	sshd :: 2026-08-21T17:58:30.170503+07:00 [host] sshd[488573]: Invalid user gary from 68.183.92.206 p ... show more sshd :: 2026-08-21T17:58:30.170503+07:00 [host] sshd[488573]: Invalid user gary from 68.183.92.206 port 54980 2026-08-21T18:03:03.971486+07:00 [host] sshd[488891]: Invalid user abc from 68.183.92.206 port 41060 show less	Brute-Force SSH
🇲🇽 189.204.230.91	21 Aug 2026	sshd :: 2026-08-21T17:02:17.292891+07:00 [host] sshd[484155]: Invalid user cubrid from 189.204.230.9 ... show more sshd :: 2026-08-21T17:02:17.292891+07:00 [host] sshd[484155]: Invalid user cubrid from 189.204.230.91 port 5746 2026-08-21T17:08:55.930571+07:00 [host] sshd[484791]: Invalid user testmail from 189.204.230.91 port 18646 show less	Brute-Force SSH