AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GAS joined AbuseIPDB in April 2019 and has reported 213,480 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇩🇪 167.94.146.62	02 Nov 2026	Direct IP access. 167.94.146.62 - - [02/Nov/2026:16:14:41 +0100] "\x16\x03\x01\x05\xba\x01" 400 392 ... show more Direct IP access. 167.94.146.62 - - [02/Nov/2026:16:14:41 +0100] "\x16\x03\x01\x05\xba\x01" 400 392 "-" "-" "-" "-" 167.94.146.62 - - [02/Nov/2026:16:14:41 +0100] "GET / HTTP/1.1" 402 2775 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "REDACTED" "" ... show less	Port Scan Web App Attack
🇺🇸 66.132.172.192	02 Nov 2026	Bad Bot. 66.132.172.192 - - [02/Nov/2026:16:11:27 +0100] "GET /ads.txt HTTP/1.1" 402 4800 "-" "Mozil ... show more Bad Bot. 66.132.172.192 - - [02/Nov/2026:16:11:27 +0100] "GET /ads.txt HTTP/1.1" 402 4800 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "REDACTED" "" ... show less	Bad Web Bot Web App Attack
🇸🇬 101.47.134.75	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 101.47.134.75; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 101.47.134.75; usernames=["root"]; passwords sha1 prefix=["24bf68e3" "a6eb4d9d" "b3a5425f" "ba324ca7" "58a3ed6f" "f460c882" "62eb0db1" "01c11b90" "86dd1cf4" "c50267b9"] show less	Brute-Force SSH
🇳🇱 77.239.124.65	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 77.239.124.65; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 77.239.124.65; usernames=["root" "user" "maud" "linaro" "os_app_file_admin" "johanna"]; passwords sha1 prefix=["271ff349" "7c4a8d09" "fc2d2bd7" "8c64e0c3" "a494e5a3" "f865b536" "dc76e9f0" "8cb2237d" "ce3f2bd1" "ae0e073d"] show less	Brute-Force SSH
🇳🇱 77.239.124.41	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 77.239.124.41; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 77.239.124.41; usernames=["root" "Tronlong" "dummy" "user" "centos" "kiosk" "b2"]; passwords sha1 prefix=["4547e5be" "f7c3bc1d" "829c3804" "f6d05337" "b3a5425f" "a82c93eb" "601f1889" "3c767c41" "40bd0015" "49efef5f"] show less	Brute-Force SSH
🇵🇱 45.138.12.16	02 Nov 2026	Bad Bot. 45.138.12.16 - - [02/Nov/2026:15:17:06 +0100] "GET /server/.git/config HTTP/2.0" 404 3361 " ... show more Bad Bot. 45.138.12.16 - - [02/Nov/2026:15:17:06 +0100] "GET /server/.git/config HTTP/2.0" 404 3361 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36""PL" ... show less	Bad Web Bot Web App Attack
🇮🇷 193.141.127.102	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 193.141.127.102; ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 193.141.127.102; usernames=["ubuntu"]; passwords sha1 prefix=["5132336d" "ad1b5ad2" "871a19cb" "b0584190" "abf1fed8" "80f66317" "c4fd0e4a" "d481b6d9" "da30a1c5" "c4b7f7e2"] show less	Brute-Force SSH
🇵🇰 203.101.177.125	02 Nov 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 203.101.177.12 ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 203.101.177.125; usernames=["root" "admin" "super"]; passwords sha1 prefix=["8df2ae06" "34816210" "5c52cbc0" "7b9f28a2" "7110eda4" "b667bad5" "cf21d858" "011c945f" "3f9f1dae"] show less	Port Scan Brute-Force IoT Targeted
🇭🇰 123.58.215.136	02 Nov 2026	Direct IP access. 123.58.215.136 - - [02/Nov/2026:14:42:55 +0100] "GET / HTTP/1.1" 402 2744 "-" "Moz ... show more Direct IP access. 123.58.215.136 - - [02/Nov/2026:14:42:55 +0100] "GET / HTTP/1.1" 402 2744 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" "REDACTED:80" "" 123.58.215.136 - - [02/Nov/2026:14:42:57 +0100] "GET /favicon.ico HTTP/1.1" 402 2748 "http://REDACTED:80" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" "REDACTED:80" "" ... show less	Port Scan Web App Attack
🇰🇷 14.34.249.175	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 14.34.249.175; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 14.34.249.175; usernames=["admin" "user" "root" "orangepi" "support"]; passwords sha1 prefix=["d033e22a" "12dea96f" "7110eda4" "dc76e9f0" "511993d3" "49897be8" "5bdcd3c0" "f865b536" "5baa61e4"] show less	Brute-Force SSH
🇵🇱 85.11.120.12	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 85.11.120.12; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 85.11.120.12; usernames=["root" "gpt2" "anthropic" "zhangjin" "knli" "password"]; passwords sha1 prefix=["4f6f7c77" "3c1ff132" "fed4bb6b" "28d8dc2f" "7c4a8d09" "71eeb531" "b3cfcf25" "a266680b" "25d8e96e" "5baa61e4"] show less	Brute-Force SSH
🇮🇩 36.92.166.242	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 36.92.166.242; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 36.92.166.242; usernames=["system" "embedding" "chtgpt" "dgxuser" "heyingchun" "es" "root" "internet"]; passwords sha1 prefix=["f2bc7bff" "35e454e6" "5210e535" "a450b553" "7c4a8d09" "4c1ca892" "38464bf0" "cda21095" "67f2e937" "20eabe5d"] show less	Brute-Force SSH
🇪🇪 2.57.222.138	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 2.57.222.138; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 2.57.222.138; usernames=["manager" "root" "centos" "aria" "ztl" "zhengjiayin" "user" "jhwen" "fuel"]; passwords sha1 prefix=["2a8bcdeb" "c7cb4419" "f7c3bc1d" "d2b8bc96" "005b8908" "7c4a8d09" "7531ae91" "621876da" "43505540"] show less	Brute-Force SSH
🇮🇩 117.102.87.140	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 117.102.87.140; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 117.102.87.140; usernames=["runxuan" "jambaai" "dataai" "generative" "root" "suchang" "dudu" "zjzhu"]; passwords sha1 prefix=["b8a44ec1" "48912347" "e62db4c5" "eebd4584" "185d1576" "c28ebec4" "c9db1649" "c0887d57" "7c4a8d09" "5f079981"] show less	Brute-Force SSH
🇱🇻 80.232.159.237	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 80.232.159.237; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 80.232.159.237; usernames=["Jialei" "aiuser" "ollama" "watsonai" "heming" "zhouql" "root" "zfzhang"]; passwords sha1 prefix=["7c4a8d09" "c0e17261" "cac4e204" "3a8c76ef" "28f40d81" "a3d85eea" "82e10887" "b1d14c67"] show less	Brute-Force SSH
🇮🇩 103.42.241.11	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 103.42.241.11; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 103.42.241.11; usernames=["nagios" "root" "git" "aistartup" "aicloud" "aitools" "zr" "ps" "qijia"]; passwords sha1 prefix=["fe2d0a7a" "a753c776" "01b307ac" "790ae899" "c40bc466" "e3d3f027" "7c4a8d09" "7110eda4" "a7b9bbb4"] show less	Brute-Force SSH
🇵🇰 110.93.246.119	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 110.93.246.119; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 110.93.246.119; usernames=["root" "lc" "vagrant" "llmengine" "cortex" "qixk" "xuanyixin" "shiliting" "cyh"]; passwords sha1 prefix=["c9671ec2" "1ebb1ae0" "dc07c0aa" "3bf3b92b" "10659a63" "ce37553d" "4960220b" "965570bd" "7c4a8d09" "a6de2502"] show less	Brute-Force SSH
🇪🇸 62.15.163.177	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 62.15.163.177; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 62.15.163.177; usernames=["jliu" "aisec" "aitrainer" "botuser" "visionbot" "zwhsu" "root" "ChenHH" "heming" "huzheng"]; passwords sha1 prefix=["adca8cbd" "e677dc11" "a7685fb4" "717549ff" "8922ab56" "7c4a8d09" "35e95c8d" "03edfc2c" "a035524f"] show less	Brute-Force SSH
🇺🇸 209.94.191.188	02 Nov 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 209.94.191.188; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 209.94.191.188; usernames=["ec2-user" "root" "xupeng" "geminiai" "superset" "bot" "deepbrain" "lgz" "ouyangcong"]; passwords sha1 prefix=["20eabe5d" "6eef6648" "386b9c57" "10f3a23a" "1126eb6a" "542d154c" "f9f14b25" "7ae863f6" "d4c3cb86" "c6583841"] show less	Brute-Force SSH
🇧🇪 35.195.95.133	02 Nov 2026	Direct IP access. 35.195.95.133 - - [02/Nov/2026:12:26:11 +0100] "GET / HTTP/2.0" 402 2668 "-" "Mozi ... show more Direct IP access. 35.195.95.133 - - [02/Nov/2026:12:26:11 +0100] "GET / HTTP/2.0" 402 2668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "service.REDACTED" "" 35.195.95.133 - - [02/Nov/2026:12:26:12 +0100] "GET /robots.txt HTTP/2.0" 402 2519 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "service.REDACTED" "" ... show less	Port Scan Web App Attack
🇲🇽 189.206.12.25	02 Nov 2026	Direct IP access. 189.206.12.25 - - [02/Nov/2026:11:38:53 +0100] "GET / HTTP/1.1" 402 2782 "-" "Mozi ... show more Direct IP access. 189.206.12.25 - - [02/Nov/2026:11:38:53 +0100] "GET / HTTP/1.1" 402 2782 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "REDACTED" "" 189.206.12.25 - - [02/Nov/2026:11:38:54 +0100] "GET /cgi HTTP/1.1" 402 2743 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "REDACTED" "" ... show less	Port Scan Web App Attack
🇺🇸 34.94.138.28	02 Nov 2026	Direct IP access. 34.94.138.28 - - [02/Nov/2026:11:06:54 +0100] "\x16\x03\x01" 400 392 "-" "-" "-" " ... show more Direct IP access. 34.94.138.28 - - [02/Nov/2026:11:06:54 +0100] "\x16\x03\x01" 400 392 "-" "-" "-" "-" 34.94.138.28 - - [02/Nov/2026:11:06:56 +0100] "OPTIONS / HTTP/1.0" 402 2749 "-" "-" "REDACTED" "" ... show less	Port Scan Web App Attack
🇺🇸 152.32.150.117	02 Nov 2026	Direct IP access. 152.32.150.117 - - [02/Nov/2026:10:59:33 +0100] "GET / HTTP/1.0" 400 651 "-" "-" " ... show more Direct IP access. 152.32.150.117 - - [02/Nov/2026:10:59:33 +0100] "GET / HTTP/1.0" 400 651 "-" "-" "-" "-" 152.32.150.117 - - [02/Nov/2026:10:59:44 +0100] "GET / HTTP/1.1" 402 4864 "-" "curl/7.29.0" "REDACTED" "" ... show less	Port Scan Web App Attack
🇵🇰 110.38.12.228	02 Nov 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 110.38.12.228; ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 110.38.12.228; usernames=["admin" "tech" "cuadmin" "root" "Admin" "gdcuadmin" "gpon"]; passwords sha1 prefix=["67bc0024" "c95ee476" "281610f8" "01b307ac" "1411678a" "fe67002b" "35657d42" "b3796004" "cf21d858"] show less	Port Scan Brute-Force IoT Targeted
🇧🇪 35.210.20.53	02 Nov 2026	Direct IP access. 35.210.20.53 - - [02/Nov/2026:09:36:27 +0100] "GET / HTTP/1.1" 402 4893 "-" "Mozil ... show more Direct IP access. 35.210.20.53 - - [02/Nov/2026:09:36:27 +0100] "GET / HTTP/1.1" 402 4893 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "REDACTED:443" "" 35.210.20.53 - - [02/Nov/2026:09:36:30 +0100] "OPTIONS / HTTP/1.1" 402 4857 "-" "Mozilla/5.0 (compatible)" "REDACTED" "" ... show less	Port Scan Web App Attack