AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

Due to resource limits, we cannot accept bitmasks wider than ffff:ffff:ffff:ffff:: at this time. However, you can track the range using Range Alerts .

User lakered , the webmaster of blog.reseauboulard.com, joined AbuseIPDB in December 2025 and has reported 9,769 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇨🇳 118.145.104.105	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity \| ... show more Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity \| Evidence: Repeat-Offender (Past Bans: 1) show less	Port Scan
🇨🇦 35.203.68.180	28 Aug 2026	Detectors: [NGINX] \| Reasons: Nginx Honeypot: Sensitive configuration file search \| Evidence: High-C ... show more Detectors: [NGINX] \| Reasons: Nginx Honeypot: Sensitive configuration file search \| Evidence: High-Criminality-Signature (ja4:t13d1011h1 - Ratio:0.96), High-Criminality-Signature (ja4h:5cf9f33397d2cfab2c8ca2fd9e424522 - Ratio:0.96) \| UA: crusader-worker/1.0 \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:25538m) show less	Hacking Web App Attack
🇩🇪 85.14.245.122	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity \| ... show more Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity \| Evidence: Persistent-Slow-Scanner (Strikes: 384), Repeat-Offender (Past Bans: 383) show less	Port Scan
🇺🇸 8.234.217.180	28 Aug 2026	Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: URL-Found-In-UA, High-Criminality-Signature ... show more Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: URL-Found-In-UA, High-Criminality-Signature (p0f::128:0::mss*46,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0 - Ratio:0.99) \| UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) \| TCP Fingerprint: Legacy Windows (XP/2003) (Link:generic tunnel or VPN, Uptime:0m) show less	Port Scan
🇫🇮 77.42.49.249	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity \| ... show more Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity \| Evidence: Repeat-Offender (Past Bans: 1) show less	Port Scan
🇺🇸 20.3.231.118	28 Aug 2026	Detectors: [NGINX, SURICATA] \| Reasons: Suricata: IDS security alert \| Nginx Honeypot: Sensitive con ... show more Detectors: [NGINX, SURICATA] \| Reasons: Suricata: IDS security alert \| Nginx Honeypot: Sensitive configuration file search \| Evidence: High-Criminality-Signature (p0f::64:0::mss*44,10:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.89), OS-Signature-Mismatch (UA:Windows/p0f:Linux) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:IPIP or SIT, Uptime:31459m) show less	Hacking Web App Attack
🇺🇸 34.75.216.192	28 Aug 2026	Detectors: [NGINX] \| Reasons: Nginx Honeypot: Exploitation / Shell attempt \| Evidence: High-Criminal ... show more Detectors: [NGINX] \| Reasons: Nginx Honeypot: Exploitation / Shell attempt \| Evidence: High-Criminality-Signature (ja4:t13d1011h1 - Ratio:0.96), High-Criminality-Signature (ja4h:5cf9f33397d2cfab2c8ca2fd9e424522 - Ratio:0.95) \| UA: crusader-worker/1.0 \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:43259m) show less	Hacking
🇨🇳 106.63.26.141	28 Aug 2026	Detectors: [NGINX] \| Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole \| Evid ... show more Detectors: [NGINX] \| Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole \| Evidence: Repeat-Offender (Past Bans: 2) \| TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:0m) show less	Port Scan
🇺🇸 35.227.123.157	28 Aug 2026	Detectors: [NGINX, SURICATA] \| Reasons: Nginx Honeypot: Sensitive configuration file search \| Surica ... show more Detectors: [NGINX, SURICATA] \| Reasons: Nginx Honeypot: Sensitive configuration file search \| Suricata: Web Server attack \| Evidence: High-Criminality-Signature (ja4:t13d1011h1 - Ratio:0.96), High-Criminality-Signature (ja4h:5cf9f33397d2cfab2c8ca2fd9e424522 - Ratio:0.95) \| UA: crusader-worker/1.0 \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:30586m) show less	Hacking Web App Attack
🇦🇲 46.36.123.36	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇷🇺 95.31.168.194	28 Aug 2026	Detectors: [NGINX] \| Reasons: Nginx: Repeat offender returning to default/inactive vhost after previ ... show more Detectors: [NGINX] \| Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban \| Evidence: High-Criminality-Signature (p0f::64:0::mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 2) \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0 Safari/537.36 NWSIP-Stage1 \| TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:36958m) show less	Port Scan Web App Attack
🇨🇲 154.72.163.169	28 Aug 2026	Detectors: [NGINX] \| Reasons: Nginx Honeypot: Administration interface scan \| Evidence: High-Crimina ... show more Detectors: [NGINX] \| Reasons: Nginx Honeypot: Administration interface scan \| Evidence: High-Criminality-Signature (ja4:t12d190800 - Ratio:0.93) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/64.0.0.0 Safari/537.36 \| TCP Fingerprint: Modern Windows (Link:PPPoE, Uptime:0m) show less	Port Scan Web App Attack
🇳🇱 185.93.89.86	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇰🇪 102.0.28.22	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇺🇸 34.139.22.117	28 Aug 2026	Detectors: [NGINX, SURICATA] \| Reasons: Nginx Honeypot: Sensitive configuration file search \| Surica ... show more Detectors: [NGINX, SURICATA] \| Reasons: Nginx Honeypot: Sensitive configuration file search \| Suricata: Web Server attack \| Evidence: High-Criminality-Signature (ja4:t13d1011h1 - Ratio:0.96), High-Criminality-Signature (ja4h:5cf9f33397d2cfab2c8ca2fd9e424522 - Ratio:0.95) \| UA: crusader-worker/1.0 \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:3548m) show less	Hacking Web App Attack
🇵🇸 188.161.159.76	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇦🇷 186.19.123.83	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇨🇳 61.146.235.54	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇺🇸 20.169.50.119	28 Aug 2026	Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), H ... show more Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), High-Criminality-Signature (p0f::64:0::mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 1) \| UA: Mozilla/5.0 zgrab/0.x \| TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m) show less	Port Scan
🇨🇳 106.13.105.183	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇺🇸 20.40.253.27	28 Aug 2026	Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), H ... show more Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), High-Criminality-Signature (p0f::64:0::mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) \| UA: Mozilla/5.0 zgrab/0.x \| TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m) show less	Port Scan
🇨🇳 115.191.11.182	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇷🇺 77.74.177.114	28 Aug 2026	Detectors: [NGINX] \| Reasons: Nginx: Repeat offender returning to default/inactive vhost after previ ... show more Detectors: [NGINX] \| Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban \| Evidence: Persistent-Slow-Scanner (Strikes: 4), High-Criminality-Signature (p0f::64:0::mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95), Repeat-Offender (Past Bans: 2) \| UA: Mozilla/5.0 (Linux; arm_64; Android 12; CPH2205) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 YaBrowser/23.3.3.86.00 SA/3 Mobile Safari/537.36 \| TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:0m) show less	Port Scan Web App Attack
🇺🇸 18.215.151.183	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇺🇸 159.65.216.50	28 Aug 2026	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan