AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User billfor joined AbuseIPDB in September 2025 and has reported 5,395 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 172.169.234.118	11 Sep 2026	stretchoid.com port scanning	Port Scan
🇺🇸 20.127.166.74	11 Sep 2026	stretchoid.com port scanning	Port Scan
🇺🇸 52.248.42.105	11 Sep 2026	52.248.42.105 - - [11/Sep/2026:09:45:55 -0400] "GET /actuator/health HTTP/1.1" 404 0 "-" "Mozilla/5. ... show more 52.248.42.105 - - [11/Sep/2026:09:45:55 -0400] "GET /actuator/health HTTP/1.1" 404 0 "-" "Mozilla/5.0 zgrab/0.x" show less	Web App Attack
🇺🇸 44.220.188.161	11 Sep 2026	Sep 11 08:15:45 <mail.info> [redacted] sm-mta[9505]: 68BCFjdg009505: rejecting commands from scanner ... show more Sep 11 08:15:45 <mail.info> [redacted] sm-mta[9505]: 68BCFjdg009505: rejecting commands from scanner-44-220-188-161.reposify.net [44.220.188.161] due to pre-greeting traffic after 0 seconds Sep 11 08:15:50 <mail.info> [redacted] sm-mta[9535]: 68BCFob0009535: rejecting commands from scanner-44-220-188-161.reposify.net [44.220.188.161] due to pre-greeting traffic after 0 seconds show less	Brute-Force
🇺🇸 20.150.195.240	11 Sep 2026	20.150.195.240 - - [11/Sep/2026:06:16:52 -0400] "GET /developmentserver/metadatauploader HTTP/1.1" 4 ... show more 20.150.195.240 - - [11/Sep/2026:06:16:52 -0400] "GET /developmentserver/metadatauploader HTTP/1.1" 404 0 "-" "Mozilla/5.0 zgrab/0.x" show less	Web App Attack
🇸🇬 154.26.129.167	11 Sep 2026	154.26.129.167 - - [11/Sep/2026:03:08:04 -0400] "GET /wp-login.php HTTP/1.1" 404 0 "-" "OpenDataCMS/ ... show more 154.26.129.167 - - [11/Sep/2026:03:08:04 -0400] "GET /wp-login.php HTTP/1.1" 404 0 "-" "OpenDataCMS/1.1 (+https://opendata.jangan-khawatir.site; research fingerprint)" show less	Web App Attack
🇫🇷 185.197.194.99	11 Sep 2026	185.197.194.99 - - [11/Sep/2026:03:06:46 -0400] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 185.197.194.99 - - [11/Sep/2026:03:06:46 -0400] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 3171 "-" "-" show less	Web App Attack
🇺🇸 107.21.1.152	11 Sep 2026	107.21.1.152 - - [10/Sep/2026:23:19:10 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh ... show more 107.21.1.152 - - [10/Sep/2026:23:19:10 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 34.106.237.106	11 Sep 2026	34.106.237.106 - - [10/Sep/2026:21:41:30 -0400] "GET /.git/config HTTP/1.1" 404 0 "-" "-"	Web App Attack
🇺🇸 100.59.187.139	11 Sep 2026	100.59.187.139 - - [10/Sep/2026:20:18:16 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macinto ... show more 100.59.187.139 - - [10/Sep/2026:20:18:16 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 98.84.171.90	10 Sep 2026	98.84.171.90 - - [10/Sep/2026:19:11:00 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh ... show more 98.84.171.90 - - [10/Sep/2026:19:11:00 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 40.119.35.34	10 Sep 2026	stretchoid.com port scanning	Port Scan
🇺🇸 20.150.211.61	10 Sep 2026	20.150.211.61 - - [10/Sep/2026:15:15:17 -0400] "GET /autodiscover/autodiscover.json?@zdi/Powershell ... show more 20.150.211.61 - - [10/Sep/2026:15:15:17 -0400] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 0 "-" "Mozilla/5.0 zgrab/0.x" show less	Web App Attack
🇸🇬 174.138.24.129	10 Sep 2026	174.138.24.129 - - [10/Sep/2026:14:54:11 -0400] "PROPFIND / HTTP/1.1" 404 2472 "http://173.56.79.52: ... show more 174.138.24.129 - - [10/Sep/2026:14:54:11 -0400] "PROPFIND / HTTP/1.1" 404 2472 "http://173.56.79.52:443/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇲🇽 201.102.194.207	10 Sep 2026	201.102.194.207 - - [10/Sep/2026:13:17:34 -0400] "POST /xmlrpc.php HTTP/1.1" 404 916 "-" "Mozilla/5. ... show more 201.102.194.207 - - [10/Sep/2026:13:17:34 -0400] "POST /xmlrpc.php HTTP/1.1" 404 916 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 34.23.140.208	10 Sep 2026	34.23.140.208 - - [10/Sep/2026:11:58:59 -0400] "GET /.git/config HTTP/1.1" 404 0 "-" "-"	Web App Attack
🇫🇮 34.88.15.34	10 Sep 2026	34.88.15.34 - - [10/Sep/2026:10:56:45 -0400] "GET /.git/config HTTP/1.1" 404 1135 "-" "Mozilla/5.0 ( ... show more 34.88.15.34 - - [10/Sep/2026:10:56:45 -0400] "GET /.git/config HTTP/1.1" 404 1135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 20.168.124.5	10 Sep 2026	Sep 10 07:48:22 <mail.info> [redacted] sm-mta[13669]: 68ABmMka013669: rejecting commands from [20.16 ... show more Sep 10 07:48:22 <mail.info> [redacted] sm-mta[13669]: 68ABmMka013669: rejecting commands from [20.168.124.5] [20.168.124.5] due to pre-greeting traffic after 0 seconds Sep 10 07:48:27 <mail.info> [redacted] sm-mta[13677]: 68ABmRus013677: rejecting commands from [20.168.124.5] [20.168.124.5] due to pre-greeting traffic after 0 seconds show less	Brute-Force
🇨🇴 154.47.16.45	10 Sep 2026	154.47.16.45 - - [10/Sep/2026:02:49:45 -0400] "CONNECT icanhazip.com:443 HTTP/1.1" 400 0 "-" "-"	Web App Attack
🇧🇪 34.62.252.149	10 Sep 2026	Sep 10 02:43:31 <mail.info> [redacted] sm-mta[6206]: 68A6hV2o006206: rejecting commands from 149.252 ... show more Sep 10 02:43:31 <mail.info> [redacted] sm-mta[6206]: 68A6hV2o006206: rejecting commands from 149.252.62.34.bc.googleusercontent.com [34.62.252.149] due to pre-greeting traffic after 0 seconds Sep 10 02:43:33 <mail.info> [redacted] sm-mta[6208]: 68A6hXrV006208: rejecting commands from 149.252.62.34.bc.googleusercontent.com [34.62.252.149] due to pre-greeting traffic after 0 seconds show less	Brute-Force
🇺🇸 146.148.49.241	10 Sep 2026	146.148.49.241 - - [10/Sep/2026:02:34:45 -0400] "GET /.env HTTP/1.1" 404 2937 "-" "python-requests/2 ... show more 146.148.49.241 - - [10/Sep/2026:02:34:45 -0400] "GET /.env HTTP/1.1" 404 2937 "-" "python-requests/2.34.2" show less	Web App Attack
🇧🇪 207.175.71.14	10 Sep 2026	Sep 10 01:50:26 <mail.info> [redacted] sm-mta[31526]: 68A5oQxd031526: rejecting commands from 14.71. ... show more Sep 10 01:50:26 <mail.info> [redacted] sm-mta[31526]: 68A5oQxd031526: rejecting commands from 14.71.175.207.bc.googleusercontent.com [207.175.71.14] due to pre-greeting traffic after 0 seconds Sep 10 01:50:28 <mail.info> [redacted] sm-mta[31528]: 68A5oSdY031528: rejecting commands from 14.71.175.207.bc.googleusercontent.com [207.175.71.14] due to pre-greeting traffic after 0 seconds show less	Brute-Force
🇧🇪 34.79.6.205	10 Sep 2026	Sep 10 01:10:29 <mail.info> [redacted] sm-mta[26425]: 68A5AT73026425: rejecting commands from 205.6. ... show more Sep 10 01:10:29 <mail.info> [redacted] sm-mta[26425]: 68A5AT73026425: rejecting commands from 205.6.79.34.bc.googleusercontent.com [34.79.6.205] due to pre-greeting traffic after 0 seconds Sep 10 01:10:31 <mail.info> [redacted] sm-mta[26426]: 68A5AVxX026426: rejecting commands from 205.6.79.34.bc.googleusercontent.com [34.79.6.205] due to pre-greeting traffic after 0 seconds show less	Brute-Force
🇺🇸 40.74.208.142	10 Sep 2026	stretchoid.com port scanning	Port Scan
🇺🇸 54.89.13.172	10 Sep 2026	54.89.13.172 - - [09/Sep/2026:20:41:55 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh ... show more 54.89.13.172 - - [09/Sep/2026:20:41:55 -0400] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Web App Attack