User OneLuca joined AbuseIPDB in December 2025 and has reported 1,192 IP addresses.
Standing (weight) is good.
ACTIVE USER
WEBMASTER
SUPPORTER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 48.216.242.184 |
malicious bot (ua: Mozilla/5.0 zgrab/0.x; GET /portal/redlion)
|
Web App Attack | |
| 🇺🇸 66.132.172.132 |
|
Web App Attack | |
| 🇳🇱 89.21.67.173 |
malicious bot (ua: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/); GET /sse)
|
Web App Attack | |
| 🇳🇱 193.176.31.209 |
requested /api/mcp (disallowed by robots.txt)
|
Bad Web Bot Web App Attack | |
| 🇳🇱 193.176.31.195 |
probed for exposed service (GET /mcp)
|
Web App Attack | |
| 🇳🇱 185.223.235.59 |
probed for exposed service (GET /mcp/)
|
Web App Attack | |
| 🇫🇷 173.212.212.139 |
probed for exposed or leaked files (GET /.env)
|
Web App Attack | |
| 🇩🇪 102.220.163.241 |
probed for exposed or leaked files (GET /.env)
|
Web App Attack | |
| 🇺🇸 20.65.170.52 |
malicious bot (ua: Mozilla/5.0 zgrab/0.x; GET /developmentserver/metadatauploader)
|
Web App Attack | |
| 🇺🇸 216.180.246.170 |
probed for known vulnerability (GET /manage/account/login)
|
Web App Attack | |
| 🇧🇷 34.151.250.217 |
malicious bot (ua: ; OPTIONS /)
|
Web App Attack | |
| 🇳🇱 94.154.43.99 |
malicious bot (ua: -; PROPFIND /)
|
Web App Attack | |
| 🇺🇸 66.132.172.180 |
probed for known vulnerability (GET /phpinfo.php)
|
Web App Attack | |
| 🇭🇰 118.193.35.202 |
|
Web App Attack | |
| 🇺🇸 65.49.1.38 |
|
Web App Attack | |
| 🇦🇺 144.6.221.23 |
probed for known vulnerability (GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php)
|
Web App Attack | |
| 🇹🇼 34.80.116.203 |
|
Web App Attack | |
| 🇺🇸 66.132.195.67 |
|
Web App Attack | |
| 🇵🇰 111.92.157.199 |
malicious probe (ua: ; POST /HNAP1/)
|
Web App Attack | |
| 🇳🇱 46.151.178.15 |
|
Bad Web Bot Web App Attack | |
| 🇺🇸 20.40.252.29 |
malicious bot (ua: Mozilla/5.0 zgrab/0.x; GET /developmentserver/metadatauploader)
|
Web App Attack | |
| 🇳🇱 89.21.67.187 |
requested /api/mcp (disallowed by robots.txt)
|
Bad Web Bot Web App Attack | |
| 🇳🇱 81.19.216.123 |
probed for exposed service (GET /mcp)
|
Web App Attack | |
| 🇳🇱 89.21.67.163 |
malicious bot (ua: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/); GET /sse)
|
Web App Attack | |
| 🇺🇸 160.153.187.97 |
probed for exposed or leaked files (GET /.git/config)
|
Web App Attack |