User SOC PR joined AbuseIPDB in January 2026 and has reported 12,994 IP addresses.

Standing (weight) is good.

ACTIVE USER
IP Date Comment Categories
🇺🇸 132.196.80.136
IPS: Sensitive Configuration File Disclosure.
Hacking
🇵🇰 223.123.71.120
IPS: NETGEAR DGN Command Injection.
Web App Attack
🇩🇪 31.76.29.145
IPS: Directory Traversal.
Web App Attack
🇺🇸 20.127.239.252
IPS: Linux System Files Information Disclosure.
Hacking
🇵🇰 153.117.15.145
IPS: Command Injection Over HTTP.
Web App Attack
🇺🇸 20.55.126.241
IPS: Linux System Files Information Disclosure.
Hacking
🇵🇰 175.107.228.99
IPS: Command Injection Over HTTP.
Web App Attack
🇵🇰 175.107.3.195
IPS: Command Injection Over HTTP.
Web App Attack
🇳🇱 176.65.139.225
IPS: Command Injection Over HTTP.
Web App Attack
🇵🇱 185.238.72.3
IPS: Directory Traversal.
Web App Attack
🇩🇿 197.205.45.253
IPS: Command Injection Over HTTP.
Web App Attack
🇵🇰 175.107.237.198
IPS: Command Injection Over HTTP.
Web App Attack
🇩🇪 2.26.51.57
IPS: Directory Traversal.
Web App Attack
🇬🇧 195.96.139.184
IPS: Nmap Scripting Engine Scanner Over HTTP Request.
Port Scan
🇮🇳 202.141.32.58
IPS: Command Injection Over HTTP.
Web App Attack
🇺🇦 82.144.223.116
IPS: Apache HTTP Server Directory Traversal.
Web App Attack
🇩🇪 85.121.52.46
IPS: PHPUnit Command Injection (CVE-2017-9841).
Web App Attack
🇷🇺 194.85.235.99
IPS: Apache HTTP Server Directory Traversal.
Web App Attack
🇺🇸 166.88.178.212
IPS: WordPress HTTP Brute Force Login Attempt.
Brute-Force
🇫🇷 94.239.235.212
IPS: Web Servers Slow HTTP Denial of Service.
DDoS Attack
🇷🇺 5.255.231.79
IPS: Multiple login.php. Possible brute-force attempt.
Web App Attack
🇵🇰 103.26.86.191
IPS: Mozi IoT botnet payload delivery.
Hacking
🇵🇰 153.117.6.57
IPS: Mozi IoT botnet payload delivery.
Hacking
🇺🇸 199.96.167.27
IPS: WordPress HTTP Brute Force Login Attempt.
Brute-Force
🇩🇪 195.63.28.188
IPS: WordPress HTTP Brute Force Login Attempt.
Brute-Force