AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User achmuqoddam joined AbuseIPDB in January 2026 and has reported 5 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇦🇺 170.64.189.63	10 Nov 2026	[09/Nov/2026:21:05:30 +0000] - 404 404 - GET https ckan.sampangkab.go.id "/nette.micro/?callback=she ... show more [09/Nov/2026:21:05:30 +0000] - 404 404 - GET https ckan.sampangkab.go.id "/nette.micro/?callback=shell_exec&cmd=cat%20/etc/passwd&what=-1&/nette.micro/nette.micro/?callback=shell_exec&cmd=cat%20/etc/passwd&what=-1" [Client 170.64.189.63] [Length 2349] [Gzip -] "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.78 Safari/537.36" "-" show less	Web App Attack SQL Injection Hacking
🇳🇱 77.239.124.2	09 Nov 2026	1,054 requests in 24h, Detected via logs (Wazuh SIEM). - Nov 09 08:07:28 A sshd[548498]: pam_unix ... show more 1,054 requests in 24h, Detected via logs (Wazuh SIEM). - Nov 09 08:07:28 A sshd[548498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.124.2 - Nov 09 08:07:28 B sshd[27764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.124.2 ... Reported by Sampangkab-CSIRT Diskominfo Kab. Sampang, Indonesia. Block recommended. show less	Brute-Force Web App Attack Hacking
🇳🇱 5.253.84.92	07 Nov 2026	88 requests in 24h. Automated WordPress probing against government web server (sampangkab.go.id). Re ... show more 88 requests in 24h. Automated WordPress probing against government web server (sampangkab.go.id). Repeated GET requests to /wp-admin/ and /wp-login.php. Latest: 7 Nov 2026 02:55 UTC. Detected via reverse proxy logs (Wazuh SIEM). Reported by Diskominfo Kab. Sampang, Indonesia. Block recommended. show less	Web App Attack Hacking
🇮🇩 103.235.74.79	27 Oct 2026	Automated web reconnaissance / directory enumeration detected. Source IP: 103.235.74.79 Target: ng ... show more Automated web reconnaissance / directory enumeration detected. Source IP: 103.235.74.79 Target: nginx web server — ckan.sampangkab.go.id (agent "ckan") Timestamp: 2026-10-27 01:22:33–01:22:37 UTC Behavior: - 14 HTTP GET requests within ~3 seconds, all returning HTTP 404 (response size consistent ~2286–2291 bytes) - Targeted sensitive paths: /assets/, /img/, /images/, /temp/, /cache/, /backup/, /files/, /tmp/, /upload/, /uploads/, /_next/static/, /public/ - Generic browser User-Agent commonly used by scanners: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/124.0.0.0 Safari/537.36 Detection: - Wazuh rule 31151 (level 10): "Multiple web server 400 error codes from same source ip" - MITRE ATT&CK T1595.002 – Vulnerability Scanning (Reconnaissance) Assessment: Classic automated directory/file enumeration scanner probing for exposed backup, upload, cache, and static asset directories. No successful access observed (all 404), but activity is malicious reconnaissance and should be blocked. show less	Bad Web Bot Web App Attack Port Scan Hacking
🇬🇧 185.116.214.242	13 Feb 2026	IP 185.116.214.242 attempted to send spoofed email pretending to be from sampangkab.go.id. DMARC ... show more IP 185.116.214.242 attempted to send spoofed email pretending to be from sampangkab.go.id. DMARC report shows: - SPF: fail - DKIM: fail - DMARC policy: quarantine This IP is not authorized to send mail for our domain. Likely phishing or email spoofing attempt. show less	Phishing Email Spam Spoofing