AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User tye , the webmaster of tye.asia, joined AbuseIPDB in January 2026 and has reported 17,150 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇬🇧 195.96.139.98	15 minutes ago	Wazuh Alert Evidence: Sep 12 12:01:26 pico-gw1 named[256141]: client @0xffffa801d4d8 195.96.139.98#4 ... show more Wazuh Alert Evidence: Sep 12 12:01:26 pico-gw1 named[256141]: client @0xffffa801d4d8 195.96.139.98#40135 (m7fpbwnnp3dng.r5-98-62.dnscheck.internet-measurement.com): query (cache) 'm7fpbwnnp3dng.r5-98-62.dnscheck.internet-measurement.com/A/IN' denied (allow-query-cache did not match) show less	Hacking
🇩🇪 64.89.163.14	31 minutes ago	Wazuh Alert Evidence: 64.89.163.14 (64.89.163.14) - - [12/Sep/2026:19:45:55 +0800] "GET /.env HTTP/1 ... show more Wazuh Alert Evidence: 64.89.163.14 (64.89.163.14) - - [12/Sep/2026:19:45:55 +0800] "GET /.env HTTP/1.1" 404 5014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0" show less	Web App Attack
🇺🇸 173.239.198.95	34 minutes ago	Wazuh Alert Evidence: 173.239.198.95 (173.239.198.95) - - [12/Sep/2026:19:42:55 +0800] "GET /.env HT ... show more Wazuh Alert Evidence: 173.239.198.95 (173.239.198.95) - - [12/Sep/2026:19:42:55 +0800] "GET /.env HTTP/1.1" 404 5069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Web App Attack
🇳🇱 217.60.76.129	1 hour ago	Wazuh Alert Evidence: Sep 12 10:28:40 pico-gw1 named[256141]: client @0xffffa800ed58 217.60.76.129#3 ... show more Wazuh Alert Evidence: Sep 12 10:28:40 pico-gw1 named[256141]: client @0xffffa800ed58 217.60.76.129#32646 (google.com): query (cache) 'google.com/TXT/IN' denied (allow-query-cache did not match) show less	Hacking
🇳🇱 185.93.89.43	2 hours ago	Wazuh Alert Evidence: 185.93.89.43 (185.93.89.43) - - [12/Sep/2026:18:12:06 +0800] "GET /template/cu ... show more Wazuh Alert Evidence: 185.93.89.43 (185.93.89.43) - - [12/Sep/2026:18:12:06 +0800] "GET /template/custom/content-editor HTTP/1.1" 404 4998 "http://114.32.32.181/template/custom/content-editor" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.8" show less	Web App Attack
🇺🇸 154.16.115.33	3 hours ago	Wazuh Alert Evidence: Sep 12 09:11:35 pico-gw1 postfix/smtpd[322690]: warning: hostname smethurstmin ... show more Wazuh Alert Evidence: Sep 12 09:11:35 pico-gw1 postfix/smtpd[322690]: warning: hostname smethurstministries.org does not resolve to address 154.16.115.33 show less	Hacking
🇺🇸 107.173.160.165	3 hours ago	Wazuh Alert Evidence: 107.173.160.165 (107.173.160.165) - - [12/Sep/2026:16:54:06 +0800] "GET /.env ... show more Wazuh Alert Evidence: 107.173.160.165 (107.173.160.165) - - [12/Sep/2026:16:54:06 +0800] "GET /.env HTTP/1.1" 404 5261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" show less	Web App Attack
🇲🇽 177.249.170.51	4 hours ago	Wazuh Alert Evidence: Sep 12 07:24:53 pico-gw1 postfix/smtpd[320463]: warning: hostname 177.249.170. ... show more Wazuh Alert Evidence: Sep 12 07:24:53 pico-gw1 postfix/smtpd[320463]: warning: hostname 177.249.170.51-clientes-zap-izzi.mx does not resolve to address 177.249.170.51: Name or service not known show less	Hacking
🇺🇸 18.235.110.182	5 hours ago	Wazuh Alert Evidence: 18.235.110.182 (18.235.110.182) - - [12/Sep/2026:14:31:19 +0800] "GET / HTTP/1 ... show more Wazuh Alert Evidence: 18.235.110.182 (18.235.110.182) - - [12/Sep/2026:14:31:19 +0800] "GET / HTTP/1.1" 421 5148 "-" "RecordedFuture Global Inventory Crawler" show less	Web App Attack
🇨🇳 110.42.233.150	5 hours ago	Wazuh Alert Evidence: 110.42.233.150 (110.42.233.150) - - [12/Sep/2026:14:26:26 +0800] "GET /phpmyad ... show more Wazuh Alert Evidence: 110.42.233.150 (110.42.233.150) - - [12/Sep/2026:14:26:26 +0800] "GET /phpmyadmin/index.php HTTP/1.1" 404 5249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36" show less	Web App Attack
🇫🇷 194.163.170.0	6 hours ago	Wazuh Alert Evidence: 194.163.170.0 (194.163.170.0) - - [12/Sep/2026:14:07:35 +0800] "POST /cgi-bin/ ... show more Wazuh Alert Evidence: 194.163.170.0 (194.163.170.0) - - [12/Sep/2026:14:07:35 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 5225 "-" "libredtail-http" show less	Web App Attack
🇩🇪 206.189.58.129	6 hours ago	Wazuh Alert Evidence: Sep 12 05:34:50 pico-gw1 named[256141]: client @0xffffac05d598 206.189.58.129# ... show more Wazuh Alert Evidence: Sep 12 05:34:50 pico-gw1 named[256141]: client @0xffffac05d598 206.189.58.129#39231 (dNS-uDp-scaN-0.iO.INternetdaTA.IO): query (cache) 'dNS-uDp-scaN-0.iO.INternetdaTA.IO/A/IN' denied (allow-query-cache did not match) show less	Hacking
🇮🇱 35.252.13.210	7 hours ago	Wazuh Alert Evidence: 35.252.13.210 (35.252.13.210) - - [12/Sep/2026:12:48:55 +0800] "GET /.git/conf ... show more Wazuh Alert Evidence: 35.252.13.210 (35.252.13.210) - - [12/Sep/2026:12:48:55 +0800] "GET /.git/config HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇬🇧 193.32.209.247	8 hours ago	Wazuh Alert Evidence: Sep 12 03:48:56 pico-gw1 named[256141]: client @0xffffb14c00e8 193.32.209.247# ... show more Wazuh Alert Evidence: Sep 12 03:48:56 pico-gw1 named[256141]: client @0xffffb14c00e8 193.32.209.247#35703 (cloudflare.com): query (cache) 'cloudflare.com/A/IN' denied (allow-query-cache did not match) show less	Hacking
🇮🇳 167.71.233.141	8 hours ago	Wazuh Alert Evidence: 167.71.233.141 (167.71.233.141) - - [12/Sep/2026:11:33:27 +0800] "POST /cgi-bi ... show more Wazuh Alert Evidence: 167.71.233.141 (167.71.233.141) - - [12/Sep/2026:11:33:27 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 487 "-" "libredtail-http" show less	Web App Attack
🇺🇸 23.100.45.115	8 hours ago	Wazuh Alert Evidence: 23.100.45.115 (23.100.45.115) - - [12/Sep/2026:11:29:02 +0800] "POST /graphql ... show more Wazuh Alert Evidence: 23.100.45.115 (23.100.45.115) - - [12/Sep/2026:11:29:02 +0800] "POST /graphql HTTP/1.1" 404 5006 "-" "Mozilla/5.0 zgrab/0.x" show less	Web App Attack
🇰🇷 52.141.45.117	8 hours ago	Wazuh Alert Evidence: 52.141.45.117 (52.141.45.117) - - [12/Sep/2026:11:26:24 +0800] "GET /wp-conten ... show more Wazuh Alert Evidence: 52.141.45.117 (52.141.45.117) - - [12/Sep/2026:11:26:24 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5193 "-" "-" show less	Web App Attack
🇩🇪 213.209.159.133	9 hours ago	Wazuh Alert Evidence: 213.209.159.133 (213.209.159.133) - - [12/Sep/2026:10:24:36 +0800] "GET /manua ... show more Wazuh Alert Evidence: 213.209.159.133 (213.209.159.133) - - [12/Sep/2026:10:24:36 +0800] "GET /manual HTTP/1.1" 404 5224 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" show less	Web App Attack
🇧🇪 34.77.62.25	9 hours ago	Wazuh Alert Evidence: 34.77.62.25 (34.77.62.25) - - [12/Sep/2026:10:20:24 +0800] "GET /media../.env ... show more Wazuh Alert Evidence: 34.77.62.25 (34.77.62.25) - - [12/Sep/2026:10:20:24 +0800] "GET /media../.env HTTP/1.1" 404 461 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" show less	Web App Attack
🇺🇸 198.245.75.242	10 hours ago	Wazuh Alert Evidence: 198.245.75.242 (198.245.75.242) - - [12/Sep/2026:10:12:57 +0800] "GET /feed/?w ... show more Wazuh Alert Evidence: 198.245.75.242 (198.245.75.242) - - [12/Sep/2026:10:12:57 +0800] "GET /feed/?wpcb6ae6041f HTTP/1.1" 404 461 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:155.0) Gecko/20100101 Firefox/155.0" show less	Web App Attack
🇺🇸 44.220.185.168	12 hours ago	Wazuh Alert Evidence: Sep 11 23:23:33 pico-gw1 postfix/smtpd[309485]: warning: scanner-44-220-185-16 ... show more Wazuh Alert Evidence: Sep 11 23:23:33 pico-gw1 postfix/smtpd[309485]: warning: scanner-44-220-185-168.reposify.net[44.220.185.168]: SASL NTLM authentication failed: Invalid authentication mechanism, sasl_username=(unavailable) show less	Brute-Force
🇬🇧 185.247.137.36	14 hours ago	Wazuh Alert Evidence: Sep 11 21:37:23 pico-gw1 named[256141]: client @0xffffa800ed58 185.247.137.36# ... show more Wazuh Alert Evidence: Sep 11 21:37:23 pico-gw1 named[256141]: client @0xffffa800ed58 185.247.137.36#44511 (zuok7wp2imdug.r4-36-24.dnscheck.internet-measurement.com): query (cache) 'zuok7wp2imdug.r4-36-24.dnscheck.internet-measurement.com/A/IN' denied (allow-query-cache did not match) show less	Hacking
🇳🇱 160.119.76.38	15 hours ago	Wazuh Alert Evidence: Sep 11 21:15:08 pico-gw1 postfix/smtpd[305613]: warning: hostname 160-119-76-3 ... show more Wazuh Alert Evidence: Sep 11 21:15:08 pico-gw1 postfix/smtpd[305613]: warning: hostname 160-119-76-38.ptr.as49870.net does not resolve to address 160.119.76.38: Name or service not known show less	Hacking
🇳🇱 160.119.76.33	15 hours ago	Wazuh Alert Evidence: Sep 11 20:38:54 pico-gw1 postfix/smtpd[304774]: warning: hostname 160-119-76-3 ... show more Wazuh Alert Evidence: Sep 11 20:38:54 pico-gw1 postfix/smtpd[304774]: warning: hostname 160-119-76-33.ptr.as49870.net does not resolve to address 160.119.76.33: Name or service not known show less	Hacking
🇻🇳 160.250.132.238	15 hours ago	Wazuh Alert Evidence: 160.250.132.238 (160.250.132.238) - - [12/Sep/2026:04:25:40 +0800] "POST /cgi- ... show more Wazuh Alert Evidence: 160.250.132.238 (160.250.132.238) - - [12/Sep/2026:04:25:40 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 487 "-" "libredtail-http" show less	Web App Attack