AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Abuse Buster joined AbuseIPDB in September 2018 and has reported 1,125,576 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇰🇷 20.196.208.116	25 minutes ago	20.196.208.116 - - [17/Oct/2026:11:00:32 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTT ... show more 20.196.208.116 - - [17/Oct/2026:11:00:32 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.196.208.116 - - [17/Oct/2026:11:00:33 +0200] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.196.208.116 - - [17/Oct/2026:11:00:33 +0200] "GET /.well-known/acme-challenge/index.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇳 20.204.146.105	27 minutes ago	20.204.146.105 - [17/Oct/2026:10:57:46 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/ ... show more 20.204.146.105 - [17/Oct/2026:10:57:46 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.204.146.105 Forwared for: 20.204.146.105 20.204.146.105 - [17/Oct/2026:10:57:46 +0200] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.204.146.105 Forwared for: 20.204.146.105 20.204.146.105 - [17/Oct/2026:10:57:46 +0200] "GET /gebase.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.204.146.105 Forwared for: 20.204.146.105 ... show less	Web App Attack
🇨🇭 209.99.187.8	1 hour ago	209.99.187.8 - - [17/Oct/2026:10:20:37 +0200] "\x16\x03\x01\x05\xE2\x01\x00\x05\xDE\x03\x03L\xA9Zc\x ... show more 209.99.187.8 - - [17/Oct/2026:10:20:37 +0200] "\x16\x03\x01\x05\xE2\x01\x00\x05\xDE\x03\x03L\xA9Zc\x9A\xEC\xCB\xD9RCe\xA0^kM\xDD\x91\x00D\xAA\x8D\xEB3AC\xFC\x09\x94\xB5\x8E\x13\x18 \xEDO\x06yD\xB9\x07\xA1\x04E,?\x1Aa\xF3\xD3u\xA9\x99\xE5\xF73 \xAE\x9Fg\x15\x8A\x00 \xD2:\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 146.190.41.214	1 hour ago	146.190.41.214 - - [17/Oct/2026:10:18:30 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show more 146.190.41.214 - - [17/Oct/2026:10:18:30 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack
🇺🇸 71.6.246.216	2 hours ago	71.6.246.216 - - [17/Oct/2026:09:15:40 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD5Y\x8F ... show more 71.6.246.216 - - [17/Oct/2026:09:15:40 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD5Y\x8F4\xA0\x11jC\xC19);\xCE\xE6\xCD\x12/S.\x91o\xCE<\xE6\x19#\xF5\x19\xE4P\xA92 \xAE\x12\xA8\xF5*6\xD1\x22/a\x0F\xFA{i=\x10\xF0\xBB\xF7K\x8A\xE9fq\xE2\x0B\x93Kn\xF6\x18\xF7\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 216.180.246.215	2 hours ago	216.180.246.215 - - [17/Oct/2026:09:14:36 +0200] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03 Z\xE2 ... show more 216.180.246.215 - - [17/Oct/2026:09:14:36 +0200] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03 Z\xE2V\xD2\x02\xA0\x09\xA3\xD5/g\x02F\xABs\xB5\xB1\x09w\x08\x9EG\xF5\xEFX\x06\xF20\x05\xA7\xFE 8\x90-\xF4\xDF\xAA@\xF6\xFB\x02-X\xFEp\xD3\x01\xED\xBBh\xAAf\xB2\x18%E\x99\x9E" 400 150 "-" "-" ... show less	Web App Attack
🇮🇩 128.14.233.253	2 hours ago	128.14.233.253 - - [17/Oct/2026:08:59:10 +0200] "\x16\x03\x01\x01\x15\x01\x00\x01\x11\x03\x03\xB9f<d ... show more 128.14.233.253 - - [17/Oct/2026:08:59:10 +0200] "\x16\x03\x01\x01\x15\x01\x00\x01\x11\x03\x03\xB9f<d#\x1B\xA3o\xB0\xA6i\x90\xF5c\xE3\xF2\x8A\xE9\x9B\xCE\xD4\xDFdO\xC9\x00\x8B\x97\x80\xA5\x0E\x81 o\xF3\x22M\xD0\x15w\x15\x99Y\xB6S\xA9RW/5\xF3*@\x07\xACF\x16\xC4\x9E\xD8\x8E\xBC\x83\x01\xAE\x004\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x09\x00\x9E\xCC\xA8\xCC\xAA\x003\x00=\x00\x16\xC0" 400 150 "-" "-" ... show less	Web App Attack
🇩🇪 34.107.125.49	3 hours ago	34.107.125.49 - [17/Oct/2026:08:17:24 +0200] "GET /.boto HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows ... show more 34.107.125.49 - [17/Oct/2026:08:17:24 +0200] "GET /.boto HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.107.125.49 - [17/Oct/2026:08:17:24 +0200] "GET /.docker/laravel/app/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.107.125.49 - [17/Oct/2026:08:17:24 +0200] "GET /.amplifyrc HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇨🇦 45.198.224.239	3 hours ago	45.198.224.239 - - [17/Oct/2026:08:07:27 +0200] "\x05\x01\x00" 400 150 "-" "-" ...	Web App Attack
🇨🇦 143.198.37.243	4 hours ago	143.198.37.243 - - [17/Oct/2026:07:13:56 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5. ... show more 143.198.37.243 - - [17/Oct/2026:07:13:56 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 143.198.37.243 - - [17/Oct/2026:07:14:06 +0200] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0" ... show less	Web App Attack
🇳🇱 45.153.34.249	4 hours ago	45.153.34.249 - - [17/Oct/2026:07:12:43 +0200] "GET /phpinfo HTTP/2.0" 404 22 "http://api.wingthor.n ... show more 45.153.34.249 - - [17/Oct/2026:07:12:43 +0200] "GET /phpinfo HTTP/2.0" 404 22 "http://api.wingthor.net/phpinfo" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.153.34.249 - - [17/Oct/2026:07:12:47 +0200] "GET /phpinfo.php HTTP/2.0" 404 22 "http://api.wingthor.net/phpinfo.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.153.34.249 - - [17/Oct/2026:07:12:53 +0200] "GET /_profiler/phpinfo HTTP/2.0" 404 22 "http://api.wingthor.net/_profiler/phpinfo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Web App Attack
🇳🇱 185.189.182.234	4 hours ago	185.189.182.234 - - [17/Oct/2026:06:47:19 +0200] "GET / HTTP/1.1" 400 150 "-" "-" ...	Web App Attack
🇸🇬 157.245.202.75	5 hours ago	157.245.202.75 - - [17/Oct/2026:06:21:35 +0200] "GET //images/images/cache.php HTTP/1.1" 301 162 "ww ... show more 157.245.202.75 - - [17/Oct/2026:06:21:35 +0200] "GET //images/images/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack
🇩🇪 185.73.23.161	5 hours ago	185.73.23.161 - - [17/Oct/2026:04:54:02 +0200] "GET /en/ HTTP/1.1" 404 22 "-" "Software Security Res ... show more 185.73.23.161 - - [17/Oct/2026:04:54:02 +0200] "GET /en/ HTTP/1.1" 404 22 "-" "Software Security Research/1.0 (+https://finn.softsec.ruhr-uni-bochum.de)" 185.73.23.161 - - [17/Oct/2026:05:30:25 +0200] "GET /de/home.html HTTP/1.1" 404 22 "-" "Software Security Research/1.0 (+https://finn.softsec.ruhr-uni-bochum.de)" 185.73.23.161 - - [17/Oct/2026:05:48:42 +0200] "GET /az HTTP/1.1" 404 22 "-" "Software Security Research/1.0 (+https://finn.softsec.ruhr-uni-bochum.de)" ... show less	Web App Attack
🇻🇳 180.93.244.150	5 hours ago	180.93.244.150 - - [17/Oct/2026:05:48:20 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; ... show more 180.93.244.150 - - [17/Oct/2026:05:48:20 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.93.244.150 - - [17/Oct/2026:05:48:22 +0200] "GET /.env HTTP/1.1" 404 22 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇸🇬 47.237.122.62	5 hours ago	47.237.122.62 - - [17/Oct/2026:05:38:42 +0200] "GET / HTTP/1.1" 301 162 "-" "curl/7.78.0" ...	Web App Attack
🇮🇳 74.225.203.7	5 hours ago	74.225.203.7 - - [17/Oct/2026:05:38:39 +0200] "GET /alfa.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Wind ... show more 74.225.203.7 - - [17/Oct/2026:05:38:39 +0200] "GET /alfa.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.225.203.7 - - [17/Oct/2026:05:38:40 +0200] "GET /abcd.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.225.203.7 - - [17/Oct/2026:05:38:40 +0200] "GET /about.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇬🇧 104.218.164.117	5 hours ago	2026-10-17T05:33:28.458096+02:00 mx postfix/dnsblog[344079]: addr 104.218.164.117 listed by domain z ... show more 2026-10-17T05:33:28.458096+02:00 mx postfix/dnsblog[344079]: addr 104.218.164.117 listed by domain zen.spamhaus.org as 127.0.0.11 2026-10-17T05:33:28.458158+02:00 mx postfix/dnsblog[344079]: addr 104.218.164.117 listed by domain zen.spamhaus.org as 127.0.0.4 2026-10-17T05:33:28.465794+02:00 mx postfix/dnsblog[344079]: addr 104.218.164.117 listed by domain zen.spamhaus.org as 127.0.0.11 ... show less	Email Spam
🇰🇷 20.214.147.109	5 hours ago	20.214.147.109 - [17/Oct/2026:05:29:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.214.147.109 - [17/Oct/2026:05:29:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 404 36 "-" "-" Connecting ip: 20.214.147.109 Forwared for: 20.214.147.109 20.214.147.109 - [17/Oct/2026:05:29:22 +0200] "GET /this_is_a_new_hello_world.php HTTP/2.0" 404 36 "-" "-" Connecting ip: 20.214.147.109 Forwared for: 20.214.147.109 20.214.147.109 - [17/Oct/2026:05:29:22 +0200] "GET /3PJcpMFsD8B.php HTTP/2.0" 404 36 "-" "-" Connecting ip: 20.214.147.109 Forwared for: 20.214.147.109 ... show less	Web App Attack
🇰🇷 20.194.17.163	5 hours ago	20.194.17.163 - - [17/Oct/2026:05:26:01 +0200] "GET /02.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windo ... show more 20.194.17.163 - - [17/Oct/2026:05:26:01 +0200] "GET /02.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.17.163 - - [17/Oct/2026:05:26:02 +0200] "GET /1.php7 HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.194.17.163 - - [17/Oct/2026:05:26:02 +0200] "GET /12.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 65.49.20.66	6 hours ago	65.49.20.66 - - [17/Oct/2026:04:48:41 +0200] "GET /webui/ HTTP/1.1" 404 22 "-" "Mozilla/5.0 (X11; Li ... show more 65.49.20.66 - - [17/Oct/2026:04:48:41 +0200] "GET /webui/ HTTP/1.1" 404 22 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0" 65.49.20.66 - - [17/Oct/2026:04:55:26 +0200] "GET /favicon.ico HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 65.49.20.66 - - [17/Oct/2026:05:08:43 +0200] "GET /geoserver/web/ HTTP/1.1" 404 22 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0" ... show less	Web App Attack
🇧🇪 34.78.156.204	6 hours ago	34.78.156.204 - - [17/Oct/2026:05:03:21 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ... show more 34.78.156.204 - - [17/Oct/2026:05:03:21 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-" ... show less	Web App Attack
🇧🇷 205.210.31.181	7 hours ago	205.210.31.181 - - [17/Oct/2026:04:25:09 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xAB\x9 ... show more 205.210.31.181 - - [17/Oct/2026:04:25:09 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xAB\x9E" 400 150 "-" "-" ... show less	Web App Attack
🇷🇺 82.147.85.101	7 hours ago	Oct 17 03:53:28 balder kernel: ROGUE IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:bc:85:3e:80:08:00 ... show more Oct 17 03:53:28 balder kernel: ROGUE IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:bc:85:3e:80:08:00 SRC=82.147.85.101 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=38018 PROTO=TCP SPT=41997 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 17 03:53:28 balder kernel: ROGUE IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:bc:85:3e:80:08:00 SRC=82.147.85.101 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=65123 PROTO=TCP SPT=41997 DPT=3380 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 17 03:53:28 balder kernel: ROGUE IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:bc:85:3e:80:08:00 SRC=82.147.85.101 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=48742 PROTO=TCP SPT=41997 DPT=3352 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 17 03:53:36 balder kernel: ROGUE IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:bc:85:3e:80:08:00 SRC=82.147.85.101 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=49010 PROTO=TCP SPT=41997 DPT=3378 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 17 03:53:48 balder kerne ... show less	DDoS Attack
🇳🇱 195.178.110.242	7 hours ago	195.178.110.242 - [17/Oct/2026:03:53:48 +0200] "GET /.docker/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 ... show more 195.178.110.242 - [17/Oct/2026:03:53:48 +0200] "GET /.docker/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" Connecting ip: 195.178.110.242 Forwared for: 195.178.110.242 195.178.110.242 - [17/Oct/2026:03:53:48 +0200] "GET /.aws/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" Connecting ip: 195.178.110.242 Forwared for: 195.178.110.242 ... show less	Web App Attack