rafix - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User rafix , the webmaster of trol.pl, joined AbuseIPDB in February 2019 and has reported 50,590 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇩🇪 212.132.99.227	01 Apr 2026	Phishing URL: https[:]//enta[.]baxterbatting[.]com/talg/ Delivered-To: [email protected] Received-S ... show more Phishing URL: https[:]//enta[.]baxterbatting[.]com/talg/ Delivered-To: [email protected] Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=212.132.99.227; helo=info.casadelsilencio.de; [email protected]; receiver=[...] Received: from info.casadelsilencio.de (info.casadelsilencio.de [212.132.99.227]) by [...] (Postfix) with ESMTP id [...] for <[...]>; Tue, 31 Mar 2026 10:37:34 +0200 (CEST) Subject: We couldn't process your ChatGPT Plus payment show less	Phishing Email Spam
🇫🇷 109.199.125.62	01 Apr 2026	Excessive scan 109.199.125.62 425630 - - [01/Apr/2026:07:36:59 +0200] "GET /[...] HTTP/1.1" 200 213 ... show more Excessive scan 109.199.125.62 425630 - - [01/Apr/2026:07:36:59 +0200] "GET /[...] HTTP/1.1" 200 213311 "https://[...]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Bad Web Bot
🇳🇱 88.216.92.29	15 Mar 2026	88.216.92.29 30117 - - [14/Mar/2026:23:03:33 +0100] "GET /[...] HTTP/1.1" 200 1404 "-" "Mozilla/5.0 ... show more 88.216.92.29 30117 - - [14/Mar/2026:23:03:33 +0100] "GET /[...] HTTP/1.1" 200 1404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	DDoS Attack Bad Web Bot
🇵🇱 34.0.247.93	13 Mar 2026	Massive HTTP scan: 34.0.247.93 3458931 - - [13/Mar/2026:05:02:44 +0100] "GET /[...] HTTP/1.1" 200 2 ... show more Massive HTTP scan: 34.0.247.93 3458931 - - [13/Mar/2026:05:02:44 +0100] "GET /[...] HTTP/1.1" 200 29564 "[...]" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" show less	Bad Web Bot
🇵🇱 34.0.244.67	13 Mar 2026	Massive HTTP scan: 34.0.244.67 3495281 - - [13/Mar/2026:07:07:44 +0100] "GET /[...] HTTP/1.1" 200 2 ... show more Massive HTTP scan: 34.0.244.67 3495281 - - [13/Mar/2026:07:07:44 +0100] "GET /[...] HTTP/1.1" 200 28575 "[...]" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" show less	Bad Web Bot
🇺🇸 50.31.205.10	13 Mar 2026	Phishing URL: https[:]//office-lexware[.]org/doc/ Received-SPF: Pass (sender SPF authorized) identi ... show more Phishing URL: https[:]//office-lexware[.]org/doc/ Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=50.31.205.10; helo=mta10-ab1.mtasv.net; [email protected]; receiver=[...] Received: from mta10-ab1.mtasv.net (mta10-ab1.mtasv.net [50.31.205.10]) From: DocuSing <[email protected]> show less	Phishing Email Spam
🇵🇱 109.95.151.134	13 Mar 2026	Spam: https://zgloszenia[.]org[.]pl Received-SPF: Pass (sender SPF authorized) identity=mailfrom; c ... show more Spam: https://zgloszenia[.]org[.]pl Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=109.95.151.134; helo=iodnis2.pl; [email protected]; receiver=[...] Received: from iodnis2.pl (iodnis2.pl [109.95.151.134]) by [...] (Postfix) with ESMTP id [...] for <[...]>; Fri, 13 Mar 2026 01:28:38 +0100 (CET) From: "KSC- IOD" <[email protected]> Subject: =?iso-8859-2?Q?Uchwalona=20Ustawa=20o=20KSC=20-=20?= =?iso-8859-2?Q?nowe=20obowi=B1zki=20=7C=20=20Kurs=20IO?= =?iso-8859-2?Q?D=20=7C=20Kurs=20Audytora=20wewn=EAtrzn?= =?iso-8859-2?Q?ego=20ISO=2027001-22301?= show less	Email Spam
🇩🇪 3.122.64.138	10 Mar 2026	GET /[...]?class_product[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&in_row[$invalid]=TL0V ... show more GET /[...]?class_product[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&in_row[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&per_page[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&pid[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&strona[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&type[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&value[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM&view[$invalid]=TL0VfklthU4tJnVYZSgCBrclvnqwSCdb9aqnJSG37cM show less	Web App Attack
🇦🇺 139.99.248.110	09 Mar 2026	Excessive web scan	DDoS Attack Bad Web Bot
🇺🇸 74.91.126.209	09 Mar 2026	Excessive web scan	DDoS Attack Bad Web Bot
🇬🇧 88.150.154.3	09 Mar 2026	Excessive web scan	DDoS Attack Bad Web Bot
🇺🇸 74.91.112.234	09 Mar 2026	Excessive web scan	DDoS Attack Bad Web Bot
🇷🇴 176.121.104.208	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇵🇹 103.104.128.161	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 185.58.199.135	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 185.58.199.106	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇩🇪 162.55.14.97	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 185.58.199.195	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 212.80.209.159	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 185.58.198.17	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 89.40.87.173	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 195.184.73.133	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 195.184.73.66	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 185.58.198.4	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot
🇪🇸 93.92.231.53	09 Mar 2026	DDoS on HTTP/HTTPS, Excessive scan	DDoS Attack Bad Web Bot