AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ktwrd , the webmaster of kate.pet, joined AbuseIPDB in August 2025 and has reported 26 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇸🇬 173.239.196.98	12 Aug 2026	173.239.196.98 - - [12/Aug/2026:06:26:24 +0800] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 404 555 ... show more 173.239.196.98 - - [12/Aug/2026:06:26:24 +0800] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "173.239.196.98" "redfur.cloud" 173.239.196.98 - - [12/Aug/2026:06:26:25 +0800] "GET /backup/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "173.239.196.98" "redfur.cloud" 173.239.196.98 - - [12/Aug/2026:06:26:25 +0800] "GET /files/shares/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "173.239.196.98" "redfur.cloud" 173.239.196.98 - - [12/Aug/2026:06:26:25 +0800] "GET /wp-content/plugins/xt/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "173.239.196.98" "redfur.cloud" show less	Web Spam Bad Web Bot
🇧🇪 34.78.84.79	12 Aug 2026	Aggressive web scan/brute-force with user-agent "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https ... show more Aggressive web scan/brute-force with user-agent "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" show less	Web Spam Brute-Force Bad Web Bot
🇳🇱 176.65.148.171	17 Jul 2026	[Thu 17:26:09 INFO Server/ServerLoginPacketListenerImpl] MineScan215a1c (/176.65.148.171:42836) los ... show more [Thu 17:26:09 INFO Server/ServerLoginPacketListenerImpl] MineScan215a1c (/176.65.148.171:42836) lost connection: Disconnected [Fri 01:11:08 INFO Server/ServerLoginPacketListenerImpl] MineScan447929 (/176.65.148.171:54284) lost connection: Disconnected [Fri 07:45:51 INFO Server/ServerLoginPacketListenerImpl] MineScanb6d092 (/176.65.148.171:53460) lost connection: Disconnected show less	Port Scan
🇧🇷 20.226.66.230	14 Jul 2026	20.226.66.230 - - [14/Jul/2026:06:56:52 +0800] "GET /xstelth.php HTTP/1.1" 404 153 "-" "-" "-" "mini ... show more 20.226.66.230 - - [14/Jul/2026:06:56:52 +0800] "GET /xstelth.php HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" 20.226.66.230 - - [14/Jul/2026:06:56:52 +0800] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" 20.226.66.230 - - [14/Jul/2026:06:56:53 +0800] "GET /aaa.php HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" 20.226.66.230 - - [14/Jul/2026:06:56:53 +0800] "GET /gecko.php HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" 20.226.66.230 - - [14/Jul/2026:06:56:53 +0800] "GET /sh3ll.php HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" 20.226.66.230 - - [14/Jul/2026:06:56:54 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" 20.226.66.230 - - [14/Jul/2026:06:56:54 +0800] "GET /pbck.php HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" 20.226.66.230 - - [14/Jul/2026:06:56:55 +0800] "GET /1254xx.php HTTP/1.1" 404 153 "-" "-" "-" "minio.kate.pet" show less	Web App Attack
🇫🇷 185.177.72.49	14 Jul 2026	185.177.72.49 - - [14/Jul/2026:07:39:29 +0800] "GET /v3/%2eenv HTTP/1.1" 404 153 "-" "curl/8.7.1" ... show more 185.177.72.49 - - [14/Jul/2026:07:39:29 +0800] "GET /v3/%2eenv HTTP/1.1" 404 153 "-" "curl/8.7.1" and many other requests to find environment config files. (2173 requests) show less	Brute-Force Web App Attack
🇲🇪 77.222.27.49	02 Jul 2026	Mastodon account spam/with scam/spam intent	Web Spam
🇯🇵 43.207.109.154	24 Jun 2026	172.71.8.59 - - [24/Jun/2026:13:50:37 +0800] "GET /wp-admin/phpinfo.php HTTP/2.0" 502 559 "-" "Mozil ... show more 172.71.8.59 - - [24/Jun/2026:13:50:37 +0800] "GET /wp-admin/phpinfo.php HTTP/2.0" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "43.207.109.154" "xenia.social" many other queries like this (>300) within a few minutes show less	Web Spam Bad Web Bot Web App Attack
🇳🇱 176.65.148.158	23 Jun 2026	Minecraft server scanning (KittyScanNya 0235ffa8-ad25-4537-a3fd-535afff0987c)	Port Scan
🇺🇸 172.86.114.38	23 Jun 2026	[Sun 17:53:18 INFO Server/ServerLoginPacketListenerImpl] herobrine (/172.86.114.38:56372) lost conn ... show more [Sun 17:53:18 INFO Server/ServerLoginPacketListenerImpl] herobrine (/172.86.114.38:56372) lost connection: Disconnected show less	Hacking
🇩🇪 209.50.184.81	20 Feb 2026	Mastodon account creation spam (advertising AI agents for business, in russian)	Web Spam
🇩🇪 104.207.56.18	20 Feb 2026	Mastodon account creation spam (advertising)	Web Spam
🇺🇸 3.84.101.55	27 Dec 2025	Accessing authentik server with headless browser.	Web App Attack
🇩🇪 45.135.194.44	01 Nov 2025	toastware.org:8080 - port scan (connection reset by peer)	Port Scan
🇺🇸 98.98.100.232	13 Sep 2025	Mastodon account creation spam.	Web Spam
🇩🇪 135.220.210.207	10 Sep 2025	172.68.195.183 - - [10/Sep/2025:05:31:38 +0800] "GET /wp-trackback.php HTTP/1.1" 404 153 "-" "-" "13 ... show more 172.68.195.183 - - [10/Sep/2025:05:31:38 +0800] "GET /wp-trackback.php HTTP/1.1" 404 153 "-" "-" "135.220.210.207" "xenia.social" show less	Brute-Force Web App Attack
🇳🇱 93.123.109.245	19 Aug 2025	Attempting to search for secrets, and using "l9explore" as the user agent. 93.123.109.245 - - [19/A ... show more Attempting to search for secrets, and using "l9explore" as the user agent. 93.123.109.245 - - [19/Aug/2025:17:28:40 +0800] "GET /.env HTTP/1.1" 404 153 "-" "l9explore/1.2.2" "-" "159.196.93.202" show less	Web App Attack
🇦🇲 46.70.145.58	19 Aug 2025	Attempted to access "/wp-content/plugins/.git/config"	Web Spam Web App Attack
🇬🇧 78.153.140.224	19 Aug 2025	Attempted to access "/Media/.env" with user-agent "Mobile: Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 l ... show more Attempted to access "/Media/.env" with user-agent "Mobile: Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 like Mac OS X) AppleWebKit/602.1.38 (KHTML, like Gecko) Version/10.0 Mobile/14A300 Safari/602.1" show less	Web Spam Web App Attack
🇺🇸 193.27.12.40	19 Aug 2025	Mastodon account creation spam. Using VPS to create accounts. AI-generated join reason.	Web Spam
🇺🇸 130.195.212.70	19 Aug 2025	Mastodon spam account creation. Join reason is AI-generated and email is (8 random letters)(4 number ... show more Mastodon spam account creation. Join reason is AI-generated and email is (8 random letters)(4 numbers)(at)gmail.com show less	Web Spam
🇻🇳 1.53.52.63	19 Aug 2025	Mastodon account creation spam. Advertising a Vietnamese shipping company in join reason. Email is ... show more Mastodon account creation spam. Advertising a Vietnamese shipping company in join reason. Email is also (dictionary word)(5 numbers)(at)gmail.com show less	Web Spam
🇬🇷 109.242.90.190	19 Aug 2025	Mastodon account creation spam. (reason: "I like content") Email that was used is a random (diction ... show more Mastodon account creation spam. (reason: "I like content") Email that was used is a random (dictionary name)(5 numbers)(at)gmail.com show less	Web Spam
🇳🇱 2a00:7c80:0:3ad::14	19 Aug 2025	Mastodon account creation spam. (reason: "I like the content") Email that was used is a random (dic ... show more Mastodon account creation spam. (reason: "I like the content") Email that was used is a random (dictionary name)(5 numbers)(at)gmail.com show less	Web Spam
🇳🇱 172.233.60.240	19 Aug 2025	Mastodon account creation spam.	Web Spam
🇫🇷 185.177.72.201	19 Aug 2025	Credential scraper for websites. Tried to get credentials via exposed config files (config/aws.json, ... show more Credential scraper for websites. Tried to get credentials via exposed config files (config/aws.json, secrets.json, config.php, etc...) https://share.kate.pet/d/SCo5OaqW show less	Web Spam Web App Attack