AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User SeMPaI , the webmaster of catgirllover.ru, joined AbuseIPDB in December 2025 and has reported 48,276 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇳🇱 45.198.224.231	20 Aug 2026	[[hidden by err]] Honeypot on port 25565 \| IP: 45.198.224.231 \| Protocol: MINECRAFT_STATUS, \| Minec ... show more [[hidden by err]] Honeypot on port 25565 \| IP: 45.198.224.231 \| Protocol: MINECRAFT_STATUS, \| Minecraft Server List Ping: Protocol: 800, Port: 25565 show less	Port Scan
🇺🇸 65.49.1.122	20 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.122,level=clear, tags= ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.122,level=clear, tags=. Line='65.49.1.122 - - [20/Aug/2026:14:08:20 +0300] "GET / HTTP/1.1" 200 1634 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"', soreason=blocked_domain:in-addr.arpa show less	Port Scan
🇺🇸 52.180.146.145	19 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 52.180.146.145,level=scan, tag ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 52.180.146.145,level=scan, tags=scanner,invalid. Line='52.180.146.145 - - [19/Aug/2026:17:23:14 +0300] "GET /hudson HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"', soreason=high_risk show less	Port Scan Web App Attack
🇺🇸 35.237.4.214	19 Aug 2026	35.237.4.214 - - [19/Aug/2026:17:11:26 +0300] "GET /.well-known/discord HTTP/2.0" 200 44 "-" "Mozill ... show more 35.237.4.214 - - [19/Aug/2026:17:11:26 +0300] "GET /.well-known/discord HTTP/2.0" 200 44 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)" show less	Web App Attack
🇺🇸 66.132.195.54	19 Aug 2026	[[hidden by err]] Honeypot on port 2222 \| IP: 66.132.195.54 \| Protocol: TLS,	Port Scan
🇺🇸 65.49.1.48	19 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.48,level=clear, tags=i ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.48,level=clear, tags=invalid. Line='65.49.1.48 - - [19/Aug/2026:14:38:07 +0300] "GET /favicon.ico HTTP/1.1" 404 73 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:142.0) Gecko/20100101 Firefox/142.0"', soreason=blocked_domain:in-addr.arpa show less	Port Scan Web App Attack
🇺🇸 65.49.1.52	19 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.52,level=clear, tags=i ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.52,level=clear, tags=invalid. Line='65.49.1.52 - - [19/Aug/2026:14:18:22 +0300] "GET / HTTP/1.1" 404 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 YaBrowser/24.1.0.0 Safari/537.36"', soreason=blocked_domain:in-addr.arpa show less	Port Scan Web App Attack
🇺🇸 144.172.112.233	19 Aug 2026	[[hidden by err]] Honeypot on port 1337 \| IP: 144.172.112.233 \| Protocol: DNS, \| Banner: b'h\x01\x00 ... show more [[hidden by err]] Honeypot on port 1337 \| IP: 144.172.112.233 \| Protocol: DNS, \| Banner: b'h\x01\x00fM2\x05\x00\xff\x01\x06\x00\xff\t\x05\x07\x00\xff\t\x07\x01\x00\x00!5/////./..//////./..//////./../flash/rw/store/user.dat\x02\x00\xff\x88\x02\x00\x00\x00\x00\x00\x08\x00\x00\x00\x01\x00\xff\x88\x02\x00\x02\x00\x00\x00\x02\x00\x00\x00' show less	Port Scan
🇳🇱 45.198.224.231	19 Aug 2026	[[hidden by err]] Honeypot on port 25565 \| IP: 45.198.224.231 \| Protocol: MINECRAFT_STATUS, \| Minec ... show more [[hidden by err]] Honeypot on port 25565 \| IP: 45.198.224.231 \| Protocol: MINECRAFT_STATUS, \| Minecraft Server List Ping: Protocol: 800, Port: 25565 show less	Port Scan
🇩🇪 151.243.11.237	19 Aug 2026	[[hidden by err]] Honeypot on port 8081 \| IP: 151.243.11.237 \| Protocol: HTTP, \| Banner: b'GET / HTT ... show more [[hidden by err]] Honeypot on port 8081 \| IP: 151.243.11.237 \| Protocol: HTTP, \| Banner: b'GET / HTTP/1.1\r\nuser-agent: Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)\r\naccept: /\r\nconnection: close\r\nhost: hidden:8081\r\n\r\n' \| HTTP Request info: PATH=/ UA=- show less	Port Scan
🇺🇸 216.218.206.68	19 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 216.218.206.68,level=clear, ta ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 216.218.206.68,level=clear, tags=. Line='216.218.206.68 - - [19/Aug/2026:03:01:37 +0300] "GET / HTTP/1.1" 200 1634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"', soreason=blocked_domain:in-addr.arpa show less	Port Scan
🇫🇷 51.159.149.103	18 Aug 2026	[[hidden by err]] Honeypot on port 25565 \| IP: 51.159.149.103 \| Protocol: MINECRAFT_STATUS, \| Minec ... show more [[hidden by err]] Honeypot on port 25565 \| IP: 51.159.149.103 \| Protocol: MINECRAFT_STATUS, \| Minecraft Server List Ping: Protocol: 774, Port: 1337 show less	Port Scan
🇳🇱 164.92.218.133	18 Aug 2026	sshd[1743364]: Invalid user xuxin from 164.92.218.133 port 40484 sshd[1743364]: Invalid user xuxin ... show more sshd[1743364]: Invalid user xuxin from 164.92.218.133 port 40484 sshd[1743364]: Invalid user xuxin from 164.92.218.133 port 40484 sshd[1743364]: Received disconnect from 164.92.218.133 port 40484:11: Bye Bye [preauth] sshd[1743364]: Received disconnect from 164.92.218.133 port 40484:11: Bye Bye [preauth] sshd[1743364]: Disconnected from invalid user xuxin 164.92.218.133 port 40484 [preauth] sshd[1743364]: Disconnected from invalid user xuxin 164.92.218.133 port 40484 [preauth] sshd[1743366]: Invalid user xuxin from 164.92.218.133 port 40490 sshd[1743366]: Invalid user xuxin from 164.92.218.133 port 40490 sshd[1743366]: Received disconnect from 164.92.218.133 port 40490:11: Bye Bye [preauth] show less	SSH FTP Brute-Force Hacking
🇺🇸 65.49.1.202	18 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.202,level=clear, tags= ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.202,level=clear, tags=invalid. Line='65.49.1.202 - - [18/Aug/2026:03:11:54 +0300] "GET / HTTP/1.1" 404 62 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"', soreason=blocked_domain:in-addr.arpa show less	Port Scan Web App Attack
🇳🇱 5.61.209.44	17 Aug 2026	[[hidden by err]] Honeypot on port 8081 \| IP: 5.61.209.44 \| Protocol: HTTP, \| Banner: b'GET /SDK/web ... show more [[hidden by err]] Honeypot on port 8081 \| IP: 5.61.209.44 \| Protocol: HTTP, \| Banner: b'GET /SDK/webLanguage HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\r\nAccept-Encoding: gzip, deflate\r\nAccept: /\r\nConnection: keep-alive\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en US,en;q=0.9,sv;q=0.8\r\nHost: \r\n\r\n' \| HTTP Request info: PATH=/SDK/webLanguage UA=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 show less	Port Scan
🇳🇱 85.209.88.76	17 Aug 2026	85.209.88.76 - - [17/Aug/2026:18:37:03 +0300] "GET /index.action?redirect%3A%24%7B%23context%5B%22xw ... show more 85.209.88.76 - - [17/Aug/2026:18:37:03 +0300] "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d show less	Web Spam Web App Attack Hacking
🇫🇷 51.159.149.103	17 Aug 2026	[[hidden by err]] Honeypot on port 25565 \| IP: 51.159.149.103 \| Protocol: MINECRAFT_STATUS, \| Minec ... show more [[hidden by err]] Honeypot on port 25565 \| IP: 51.159.149.103 \| Protocol: MINECRAFT_STATUS, \| Minecraft Server List Ping: Protocol: 774, Port: 1337 show less	Port Scan
🇻🇳 152.32.250.36	17 Aug 2026	[[hidden by err]] Honeypot on port 8081 \| IP: 152.32.250.36 \| Protocol: TLS,	Port Scan
🇳🇱 176.65.148.216	17 Aug 2026	[[hidden by err]] Honeypot on port 25565 \| IP: 176.65.148.216 \| Protocol: MINECRAFT_STATUS, \| Minec ... show more [[hidden by err]] Honeypot on port 25565 \| IP: 176.65.148.216 \| Protocol: MINECRAFT_STATUS, \| Minecraft Server List Ping: Protocol: 47, Port: 25565 show less	Port Scan
🇺🇸 65.49.1.24	17 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.24,level=clear, tags=i ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.24,level=clear, tags=invalid. Line='65.49.1.24 - - [17/Aug/2026:14:17:34 +0300] "GET / HTTP/1.1" 404 62 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0"', soreason=blocked_domain:in-addr.arpa show less	Port Scan Web App Attack
🇬🇧 35.203.210.129	17 Aug 2026	[[hidden by err]] Honeypot on port 23 \| IP: 35.203.210.129 \| Protocol: MYSQLSERVER, \| MySQLServer d ... show more [[hidden by err]] Honeypot on port 23 \| IP: 35.203.210.129 \| Protocol: MYSQLSERVER, \| MySQLServer data: capability_flags: 0x490018fa, capabilities=CLIENT_FOUND_ROWS,CLIENT_LONG_FLAG,CLIENT_PROTOCOL_41, username: 79-4-E show less	Port Scan
🇩🇪 151.243.11.235	17 Aug 2026	[[hidden by err]] Honeypot on port 2222 \| IP: 151.243.11.235 \| Protocol: HTTP, \| Banner: b'GET / HTT ... show more [[hidden by err]] Honeypot on port 2222 \| IP: 151.243.11.235 \| Protocol: HTTP, \| Banner: b'GET / HTTP/1.1\r\nuser-agent: Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)\r\naccept: /\r\nconnection: close\r\nhost: hidden:2222\r\n\r\n' show less	Port Scan
🇺🇸 65.49.1.142	17 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.142,level=clear, tags= ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 65.49.1.142,level=clear, tags=. Line='65.49.1.142 - - [17/Aug/2026:11:25:01 +0300] "GET / HTTP/1.1" 200 1634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"', soreason=blocked_domain:in-addr.arpa show less	Port Scan
🇳🇱 45.198.224.231	17 Aug 2026	[[hidden by err]] Honeypot on port 25565 \| IP: 45.198.224.231 \| Protocol: MINECRAFT_STATUS, \| Minec ... show more [[hidden by err]] Honeypot on port 25565 \| IP: 45.198.224.231 \| Protocol: MINECRAFT_STATUS, \| Minecraft Server List Ping: Protocol: 800, Port: 25565 show less	Port Scan
🇺🇸 184.105.247.252	17 Aug 2026	[[hidden by err]] NginxScanWarning found some malicious activity from 184.105.247.252,level=clear, t ... show more [[hidden by err]] NginxScanWarning found some malicious activity from 184.105.247.252,level=clear, tags=. Line='184.105.247.252 - - [17/Aug/2026:08:36:14 +0300] "GET / HTTP/1.1" 200 1634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"', soreason=blocked_domain:in-addr.arpa show less	Port Scan