User OneLuca joined AbuseIPDB in December 2025 and has reported 1,341 IP addresses.
Standing (weight) is good.
ACTIVE USER
WEBMASTER
SUPPORTER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇲🇽 189.145.7.137 |
probed for known vulnerability (GET /xmlrpc.php)
|
Web App Attack | |
| 🇧🇪 34.156.187.18 |
malicious bot (ua: Mozilla/5.0 (compatible); OPTIONS /)
|
Web App Attack | |
| 🇳🇱 89.21.67.152 |
probed for exposed service (GET /mcp/)
|
Web App Attack | |
| 🇳🇱 185.223.235.34 |
probed for exposed service (GET /mcp)
|
Web App Attack | |
| 🇳🇱 193.176.31.153 |
malicious bot (ua: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/); GET /sse)
|
Web App Attack | |
| 🇳🇱 193.176.31.198 |
requested /api/mcp (disallowed by robots.txt)
|
Web App Attack Bad Web Bot | |
| 🇺🇸 20.80.75.245 |
malicious bot (ua: Mozilla/5.0 zgrab/0.x; GET /developmentserver/metadatauploader)
|
Web App Attack | |
| 🇩🇪 91.92.41.32 |
probed for exposed or leaked files (GET /.env)
|
Web App Attack | |
| 🇳🇱 46.151.178.14 |
|
Web App Attack | |
| 🇺🇸 66.132.172.196 |
|
Web App Attack | |
| 🇩🇪 193.174.89.19 |
|
Web App Attack | |
| 🇺🇸 103.215.74.112 |
probed for exposed or leaked files (GET /.env)
|
Web App Attack | |
| 🇺🇦 80.64.93.198 |
probed for known vulnerability (GET /SDK/webLanguage)
|
Web App Attack | |
| 🇺🇸 40.124.117.28 |
malicious bot (ua: Mozilla/5.0 zgrab/0.x; GET /ReportServer)
|
Web App Attack | |
| 🇺🇸 66.132.186.203 |
|
Web App Attack | |
| 🇬🇧 5.252.83.7 |
probed for exposed service (GET /mcp/)
|
Web App Attack | |
| 🇬🇧 5.252.83.239 |
malicious bot (ua: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/); GET /sse)
|
Web App Attack | |
| 🇬🇧 45.133.173.183 |
requested /api/mcp (disallowed by robots.txt)
|
Web App Attack Bad Web Bot | |
| 🇬🇧 2.57.17.154 |
probed for exposed service (GET /mcp)
|
Web App Attack | |
| 🇦🇺 203.17.177.250 |
|
Web App Attack | |
| 🇧🇷 177.129.209.236 |
probed for known vulnerability (GET /admin/config.php)
|
Web App Attack | |
| 🇫🇷 87.98.226.247 |
probed for known vulnerability (GET /admin/config.php)
|
Web App Attack | |
| 🇩🇴 148.255.228.222 |
probed for exposed service (HEAD /invoker/EJBInvokerServlet)
|
Web App Attack | |
| 🇺🇸 66.132.159.120 |
probed for known vulnerability (GET /phpinfo.php)
|
Web App Attack | |
| 🇺🇸 216.180.246.155 |
probed for known vulnerability (GET /manage/account/login)
|
Web App Attack |