AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

Due to resource limits, we cannot accept bitmasks wider than 255.255.255.0 at this time. However, you can track the range using Range Alerts .

User HM joined AbuseIPDB in December 2025 and has reported 2,067 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇱🇺 64.89.161.90	05 Jul 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 64.89.161.90,level=proxy-abuse ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 64.89.161.90,level=proxy-abuse, tags=proxy. Line='64.89.161.90 - - [05/Jul/2026:19:39:20 +0300] "CONNECT 64.89.161.90:80 HTTP/1.0" 400 150 "-" "-"', soreason=blacklist show less	Open Proxy
🇬🇧 87.236.176.39	05 Jul 2026	[[hidden by err]] Honeypot attempt GB from 87.236.176.39 to port 2000, with banner b'DmdT\x00\x00\x0 ... show more [[hidden by err]] Honeypot attempt GB from 87.236.176.39 to port 2000, with banner b'DmdT\x00\x00\x00\x17\x00\x00\x00\x01\x00\x00\x00\x00\x11\x11\x00\xff\x01\xff\x13' \| Detected type is unknown show less	Port Scan
🇬🇧 185.247.137.62	05 Jul 2026	[[hidden by err]] Honeypot attempt GB from 185.247.137.62 to port 2000, with banner b'c\x00\x00\x00\ ... show more [[hidden by err]] Honeypot attempt GB from 185.247.137.62 to port 2000, with banner b'c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' \| Detected type is unknown show less	Port Scan
🇬🇧 87.236.176.53	05 Jul 2026	[[hidden by err]] Honeypot attempt GB from 87.236.176.53 to port 2000, with banner b'\x05\x01\x00' \| ... show more [[hidden by err]] Honeypot attempt GB from 87.236.176.53 to port 2000, with banner b'\x05\x01\x00' \| Detected type is unknown show less	Port Scan
🇬🇧 87.236.176.60	05 Jul 2026	[[hidden by err]] Honeypot attempt GB from 87.236.176.60 to port 2000, with banner b'\x05\x00\x0b\x0 ... show more [[hidden by err]] Honeypot attempt GB from 87.236.176.60 to port 2000, with banner b'\x05\x00\x0b\x03\x10\x00\x00\x00H\x00\x00\x00\x01\x00\x00\x00\xb8\x10\xb8\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x08\x83\xaf\xe1\x1f]\xc9\x11\x91\xa4\x08\x00+\x14\xa0\xfa\x03\x00\x00\x00\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x00\x00' \| Detected type is unknown show less	Port Scan
🇸🇮 176.65.134.34	05 Jul 2026	[[hidden by err]] Honeypot attempt SI from 176.65.134.34 to port 5900, with banner b'CONNECT example ... show more [[hidden by err]] Honeypot attempt SI from 176.65.134.34 to port 5900, with banner b'CONNECT example.com:443 HTTP/1.1\r\nHost: example.com:443\r\nUser-Agent: Go-http-client/1.1' \| Detected type is unknown show less	Port Scan
🇬🇧 87.236.176.209	05 Jul 2026	[[hidden by err]] Honeypot attempt GB from 87.236.176.209 to port 2002, with banner b'\x05\x00\x0b\x ... show more [[hidden by err]] Honeypot attempt GB from 87.236.176.209 to port 2002, with banner b'\x05\x00\x0b\x03\x10\x00\x00\x00H\x00\x00\x00\x01\x00\x00\x00\xb8\x10\xb8\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x08\x83\xaf\xe1\x1f]\xc9\x11\x91\xa4\x08\x00+\x14\xa0\xfa\x03\x00\x00\x00\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x00\x00' \| Detected type is unknown show less	Port Scan
🇬🇧 195.96.139.33	05 Jul 2026	[[hidden by err]] Honeypot attempt GB from 195.96.139.33 to port 5353, with banner b'\x10\x12\x00\x0 ... show more [[hidden by err]] Honeypot attempt GB from 195.96.139.33 to port 5353, with banner b'\x10\x12\x00\x04MQTT\x05\x02\x00<\x05\x11\x00\x00\x00\x00\x00\x00' \| Detected type is unknown show less	Port Scan
🇱🇹 77.90.185.16	05 Jul 2026	[[hidden by err]] Honeypot attempt DE from 77.90.185.16 to port 2222, with banner b'' \| Detected typ ... show more [[hidden by err]] Honeypot attempt DE from 77.90.185.16 to port 2222, with banner b'' \| Detected type is unknown show less	Port Scan
🇺🇸 165.154.173.35	05 Jul 2026	[[hidden by err]] Honeypot attempt US from 165.154.173.35 to port 2000, with banner b'\x12\x02index\ ... show more [[hidden by err]] Honeypot attempt US from 165.154.173.35 to port 2000, with banner b'\x12\x02index\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00' \| Detected type is unknown show less	Port Scan
🇧🇪 34.78.252.147	03 Jul 2026	[[hidden by err]] Honeypot attempt BE from 34.78.252.147 to port 23, with banner b'\x16\x03\x01\x05\ ... show more [[hidden by err]] Honeypot attempt BE from 34.78.252.147 to port 23, with banner b'\x16\x03\x01\x05\xc4\x01\x00\x05\xc0\x03\x03\xcc+\x9c\x1c{@\xd3\xa1 \xbe\xdd\xac\x91\tt\x94U\x9cR\xc6\xf5Q\xde\x1amPe\xbb\x8f3\x8c\xf0 \xb7\xe7\xdf\x89\r)+\xd0\x08\xb9{\x80\xa2\xc1H\x82\x8f$\x0f@\xd8\xa6];O\xced\xb7\x9e\x93\xfb!\x002\xc0+\xc0/\xc0,\xc00\xcc\xa9\xcc\xa8' \| Detected type is tls show less	Port Scan
🇺🇸 66.132.186.199	03 Jul 2026	[[hidden by err]] Honeypot attempt US from 66.132.186.199 to port 22222, with banner b'\x16\x03\x01\ ... show more [[hidden by err]] Honeypot attempt US from 66.132.186.199 to port 22222, with banner b'\x16\x03\x01\x00\xee\x01\x00\x00\xea\x03\x039K9g\xd0\xdeI\xbb\xf4\xd8u\x8a/\xc7\x08.\x84]\xba\xf4y\\X\x88\nM\x0c\xbf\xa9\t\xb6P ?,F\xf1(o\xe7\xde\xec;\xb9\xe2\x8b\x97-yk\xd9\xf0\xc5PlZV\x8e.\xa0\x9f;]\xa7a\x00&\xcc\xa8\xcc\xa9\xc0/\xc00\xc0+\xc0,' \| Detected type is unknown show less	Port Scan
🇺🇸 71.6.134.230	03 Jul 2026	[[hidden by err]] Honeypot attempt US from 71.6.134.230 to port 22222, with banner b'GET / HTTP/1.1\ ... show more [[hidden by err]] Honeypot attempt US from 71.6.134.230 to port 22222, with banner b'GET / HTTP/1.1\r\nHost: hidden:22222\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ' \| Detected type is unknown show less	Port Scan
🇸🇬 194.164.107.6	03 Jul 2026	[[hidden by err]] Honeypot attempt SG from 194.164.107.6 to port 22222, with banner b'\x16\x03\x01\x ... show more [[hidden by err]] Honeypot attempt SG from 194.164.107.6 to port 22222, with banner b'\x16\x03\x01\x00\xec\x01\x00\x00\xe8\x03\x03A\xa1k\x13\xbc&Kc7?r\x89\x19d\xe7\xe0_SA\xfc\xc7\xf0Zs\xa5Jn\xa8\x7f\x08\xfd\xf5 \xf2` l]\xe6\xfc\xd9i7\x9c\x86_\x95o\x1d`%9\x15\x05\xd1=\xa5\xd8\x99\x0c\xd9\xe2\x8eM\x92\x00 \xea\xea\x13\x01\x13\x02\x13\x03\xc0+\xc0/' \| Detected type is unknown show less	Port Scan
🇸🇬 47.237.31.39	29 Jun 2026	[[hidden by err]] Honeypot attempt SG from 47.237.31.39 to port 7777, with banner b'l\x00\x0b\x00\x0 ... show more [[hidden by err]] Honeypot attempt SG from 47.237.31.39 to port 7777, with banner b'l\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00' \| Detected type is unknown show less	Port Scan
🇺🇸 47.251.22.15	29 Jun 2026	[[hidden by err]] Honeypot attempt US from 47.251.22.15 to port 7777, with banner b'help\r\ninfo' \| ... show more [[hidden by err]] Honeypot attempt US from 47.251.22.15 to port 7777, with banner b'help\r\ninfo' \| Detected type is unknown show less	Port Scan
🇧🇪 207.175.65.78	29 Jun 2026	[[hidden by err]] Honeypot attempt BE from 207.175.65.78 to port 23, with banner b'k\xe3\x05N\x1b?\x ... show more [[hidden by err]] Honeypot attempt BE from 207.175.65.78 to port 23, with banner b'k\xe3\x05N\x1b?\xf2\x06?\xdb\xd0\xa7\x152\x88\xeeVy\x9f\xaa\xd8\n\x1f-\x86"\xd9b\xa3\xd7Y\xae\xb3\xc8\xf0N\x11\x9f\xa4H\xd5=K\xc2\\\xf72l\xd1>\xfe\xd1\xdd\x17\x83\x0c\xe2\xb7\xd3\xf1\xe9\xd9\x19\xbe' \| Detected type is unknown show less	Port Scan
🇺🇸 20.65.195.105	29 Jun 2026	[[hidden by err]] Honeypot attempt US from 20.65.195.105 to port 2000, with banner b'MGLNDD_hidden_2 ... show more [[hidden by err]] Honeypot attempt US from 20.65.195.105 to port 2000, with banner b'MGLNDD_hidden_2000' \| Detected type is _unformatted_scanner show less	Port Scan
🇺🇸 20.221.72.95	29 Jun 2026	[[hidden by err]] Honeypot attempt US from 20.221.72.95 to port 5900, with banner b'MGLNDD_hidden_59 ... show more [[hidden by err]] Honeypot attempt US from 20.221.72.95 to port 5900, with banner b'MGLNDD_hidden_5900' \| Detected type is unknown show less	Port Scan
🇺🇸 135.119.112.96	29 Jun 2026	[[hidden by err]] Honeypot attempt US from 135.119.112.96 to port 2000, with banner b'MGLNDD_hidden_ ... show more [[hidden by err]] Honeypot attempt US from 135.119.112.96 to port 2000, with banner b'MGLNDD_hidden_2000' \| Detected type is unknown show less	Port Scan
🇺🇸 153.75.91.100	29 Jun 2026	[[hidden by err]] Honeypot attempt AE from 153.75.91.100 to port 8081, with banner b'GET / HTTP/1.1\ ... show more [[hidden by err]] Honeypot attempt AE from 153.75.91.100 to port 8081, with banner b'GET / HTTP/1.1\r\nHost: \r\n\r\nHELP\r\nEHLO leakix.net\r\n?' \| Detected type is unknown show less	Port Scan
🇺🇸 147.185.132.231	29 Jun 2026	[[hidden by err]] Honeypot attempt US from 147.185.132.231 to port 10001, with banner b"\x16\x03\x01 ... show more [[hidden by err]] Honeypot attempt US from 147.185.132.231 to port 10001, with banner b"\x16\x03\x01\x00\xee\x01\x00\x00\xea\x03\x03\xce\x0f\xf6\x0c\xd5\x06\xcd\xc0\x80r\xe1\xb47l2\xe4\xc6\xbe\x11\x90\xf8O5\xc1'e\x7f_:\x18\xd4\x9a \x9a/$\xf4\xe5\xde\xe4\xed\xe7\xec\xe5\xde\xf3\xaet\x84e\xfaQT\xc6\xe4\xe1\x8f\x19=\xcc\x87c\xe3\xda'\x00&\xc0+\xc0/\xc0,\xc00\xcc\xa9\xcc\xa8" \| Detected type is tls show less	Port Scan
🇺🇸 205.210.31.57	29 Jun 2026	[[hidden by err]] Honeypot attempt US from 205.210.31.57 to port 10001, with banner b'\x16\x03\x01\x ... show more [[hidden by err]] Honeypot attempt US from 205.210.31.57 to port 10001, with banner b'\x16\x03\x01\x00\xee\x01\x00\x00\xea\x03\x03\xd4R^Ay\xc6\x7fyj\x08\xae\x80\x12\x12\x97\|\x92\x8a\xc8&@P0Z\xc5\xf7x\x12\x00\x10\xa1\xe4 \x9a*\x08\x99U\xf7q\x98\xd7\x87\twTb\xae\xdaUsr\xe2U\xe2\x15\xff\xe6\x05\xc8f\x0b\x0e([\x00&\xc0+\xc0/\xc0,\xc00\xcc\xa9\xcc\xa8' \| Detected type is tls show less	Port Scan
🇺🇸 172.203.234.251	27 Jun 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 172.203.234.251,level=scan, ta ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 172.203.234.251,level=scan, tags=scanner,invalid. Line='172.203.234.251 - - [27/Jun/2026:23:43:09 +0300] "GET /owa/auth/logon.aspx HTTP/1.1" 404 81 "-" "Mozilla/5.0 zgrab/0.x"', soreason=blacklist show less	Port Scan Web App Attack
🇫🇷 51.159.71.139	27 Jun 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 51.159.71.139,level=critical, ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 51.159.71.139,level=critical, tags=invalid,php-scan,rce,webshell-attempt. Line='51.159.71.139 - - [27/Jun/2026:16:14:44 +0300] "GET /admin/config.php HTTP/1.1" 400 150 "-" "gbrmss/7.29.0"', soreason=blacklist show less	Port Scan Hacking Web App Attack