User antispammer999 joined AbuseIPDB in April 2026 and has reported 195 IP addresses.
Standing (weight) is good.
INACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇳🇱 93.123.109.152 |
Parallel .git/config enumeration across multiple paths on subdomains
|
Bad Web Bot Web App Attack | |
| 🇵🇱 146.19.24.57 |
Blockchain/crypto node scanning - Ethereum Cosmos TON Algorand endpoints
|
Port Scan Bad Web Bot | |
| 🇺🇸 3.239.1.167 |
Scanning for exposed Anthropic API proxy /anthropic/v1/models x8
|
Bad Web Bot | |
| 🇩🇪 130.12.180.34 |
.env enumeration - subnet 130.12.181.0/24 also brute forced SSH
|
Bad Web Bot Web App Attack | |
| 🇳🇱 192.253.248.169 |
LFI attempt via /static//proc/self/environ and /static//root/.aws/credentials path traversal
|
Web App Attack | |
| 🇩🇪 207.189.10.178 |
|
Bad Web Bot Web App Attack | |
| 🇮🇳 115.248.8.65 |
PHPUnit eval-stdin.php RCE exploit chain attempt
|
Web App Attack | |
| 🇨🇦 143.110.220.107 |
PHPUnit eval-stdin.php RCE exploit chain attempt
|
Web App Attack | |
| 🇱🇹 138.124.65.80 |
PHPUnit eval-stdin.php RCE exploit chain attempt
|
Web App Attack | |
| 🇩🇪 188.245.202.133 |
PHPUnit eval-stdin.php RCE exploit chain attempt
|
Web App Attack | |
| 🇿🇦 102.134.225.96 |
PHPUnit eval-stdin.php RCE exploit chain attempt
|
Web App Attack | |
| 🇹🇼 36.230.62.55 |
PHPUnit eval-stdin.php RCE exploit chain attempt
|
Web App Attack | |
| 🇩🇪 172.104.241.92 |
|
Port Scan Bad Web Bot Web App Attack | |
| 🇳🇱 45.148.10.120 |
.git/config probe on Synapse homeserver and NPM fallback
|
Bad Web Bot Web App Attack | |
| 🇧🇬 79.124.40.174 |
|
Bad Web Bot Web App Attack | |
| 🇩🇪 213.209.159.175 |
Symfony profiler exploitation attempts phpinfo probes .env scanning
|
Bad Web Bot Web App Attack | |
| 🇫🇷 185.177.72.61 |
l9explore/1.2.2 scanner - systematic .env and .git config enumeration
|
Port Scan Bad Web Bot Web App Attack | |
| 🇵🇱 45.138.16.178 |
|
Port Scan Bad Web Bot Web App Attack | |
| 🇩🇪 130.12.181.109 |
SSH brute force scanning from bulletproof hosting (Felcloud/AS60223)
|
Brute-Force | |
| 🇩🇪 130.12.181.108 |
SSH brute force scanning from bulletproof hosting (Felcloud/AS60223)
|
Brute-Force | |
| 🇩🇪 130.12.181.107 |
SSH brute force scanning from bulletproof hosting (Felcloud/AS60223)
|
Brute-Force | |
| 🇩🇪 130.12.181.106 |
SSH brute force scanning from bulletproof hosting (Felcloud/AS60223)
|
Brute-Force | |
| 🇩🇪 130.12.181.105 |
SSH brute force scanning from bulletproof hosting (Felcloud/AS60223)
|
Brute-Force | |
| 🇩🇪 130.12.181.104 |
SSH brute force scanning from bulletproof hosting (Felcloud/AS60223)
|
Brute-Force | |
| 🇩🇪 130.12.181.103 |
SSH brute force scanning from bulletproof hosting (Felcloud/AS60223)
|
Brute-Force |