AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GAS joined AbuseIPDB in April 2019 and has reported 211,641 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇭🇰 217.60.248.173	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 217.60.248.173; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 217.60.248.173; usernames=["root" "ramesh" "nginx" "work" "test" "server" "ubuntu" "test02" "factorio"]; passwords sha1 prefix=["cd08c199" "9c084474" "7c4a8d09" "c707068a" "01b307ac" "a94a8fe5" "9bc34549" "889ab7d0" "40bd0015"] show less	Brute-Force SSH
🇯🇵 8.216.7.116	12 Oct 2026	Direct IP access. 8.216.7.116 - - [12/Oct/2026:22:44:47 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" "- ... show more Direct IP access. 8.216.7.116 - - [12/Oct/2026:22:44:47 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" "-" 8.216.7.116 - - [12/Oct/2026:22:44:48 +0200] "GET / HTTP/1.1" 402 1227 "-" "curl/7.74.0" "REDACTED:80" "" ... show less	Port Scan Web App Attack
🇻🇳 115.74.7.119	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 115.74.7.119; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 115.74.7.119; usernames=["root" "superadmin" "epro" "smart"]; passwords sha1 prefix=["d84b335c" "059fdea0" "15540b12" "f8ab2d7a" "15808483" "7110eda4" "17a6c503" "f4f7229a" "07640c59" "3842acbb"] show less	Brute-Force SSH
🇨🇴 191.97.12.90	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 191.97.12.90; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 191.97.12.90; usernames=["root" "ubuntu" "dev" "superadmin" "deployer" "epro"]; passwords sha1 prefix=["3842acbb" "6fead90a" "ec122f54" "8c425ffb" "8cb2237d" "7110eda4" "f4f7229a" "cbfdac60" "17a6c503" "059fdea0"] show less	Brute-Force SSH
🇳🇱 138.226.239.79	12 Oct 2026	Direct IP access. 138.226.239.79 - - [12/Oct/2026:22:34:06 +0200] "GET /RDWeb HTTP/1.1" 402 4916 "ht ... show more Direct IP access. 138.226.239.79 - - [12/Oct/2026:22:34:06 +0200] "GET /RDWeb HTTP/1.1" 402 4916 "https://REDACTED:443/RDWeb" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "REDACTED:443" "" 138.226.239.79 - - [12/Oct/2026:22:34:08 +0200] "GET /RDWeb/ HTTP/1.1" 402 4931 "https://REDACTED:443/RDWeb/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "REDACTED:443" "" ... show less	Port Scan Web App Attack
🇳🇱 45.148.10.240	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 45.148.10.240; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 45.148.10.240; usernames=["ubuntu" "sutai" "root" "solana" "sol" "validator" "blockrazor"]; passwords sha1 prefix=["61d5167d" "7c4a8d09" "3350e149" "485621c2"] show less	Brute-Force SSH
🇩🇪 185.73.23.162	12 Oct 2026	Direct IP access. 185.73.23.162 - - [12/Oct/2026:22:23:25 +0200] "GET / HTTP/1.1" 402 4914 "-" "Soft ... show more Direct IP access. 185.73.23.162 - - [12/Oct/2026:22:23:25 +0200] "GET / HTTP/1.1" 402 4914 "-" "Software Security Research/1.0 (+https://goose.softsec.ruhr-uni-bochum.de)" "www.elev8trading.now" "" 185.73.23.162 - - [12/Oct/2026:22:24:43 +0200] "GET /de/home.html HTTP/1.1" 402 4936 "-" "Software Security Research/1.0 (+https://goose.softsec.ruhr-uni-bochum.de)" "www.lebara.de" "" ... show less	Port Scan Web App Attack
🇻🇳 116.110.148.120	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 116.110.148.120; ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 116.110.148.120; usernames=["admin" "ubnt" "config" "installer" "root" "system"]; passwords sha1 prefix=["23d42f5f" "b5e701c9" "dfba7aad" "39aeb928" "7505d64a" "2fc42d37" "5baa61e4" "9a782114" "dc76e9f0" "e7613c1a"] show less	Brute-Force SSH
🇭🇰 165.154.6.75	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 165.154.6.75; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 165.154.6.75; usernames=["ftptest" "ubuntu" "root" "bp" "bot1" "devuser"]; passwords sha1 prefix=["d0c7ecab" "5c98b205" "20d75fe1" "ae624ab0" "810544f0" "c614794c" "0691a664" "e95de03f" "637d1f5c" "7c4a8d09"] show less	Brute-Force SSH
🇵🇪 190.119.63.98	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 190.119.63.98; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 190.119.63.98; usernames=["db2fenc1" "root" "testuser" "root1" "deploy"]; passwords sha1 prefix=["7c6a61c6" "fab8ecad" "ba1c9255" "86c16a45" "a193df81" "40bd0015" "277ae1d7" "b59fa392" "1d4d4668" "3bc1aa37"] show less	Brute-Force SSH
🇺🇸 170.106.67.167	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 170.106.67.167; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 170.106.67.167; usernames=["redmine" "deploy" "testuser" "root" "admin" "roberta" "under"]; passwords sha1 prefix=["7110eda4" "1d4d4668" "86c16a45" "f8248e12" "7af2d10b" "a57747cc" "3bc1aa37" "e38c87bf" "4c1ca892" "fab8ecad"] show less	Brute-Force SSH
🇺🇸 3.129.187.38	12 Oct 2026	Direct IP access. 3.129.187.38 - - [12/Oct/2026:21:11:32 +0200] "GET / HTTP/1.0" 400 651 "-" "-" "-" ... show more Direct IP access. 3.129.187.38 - - [12/Oct/2026:21:11:32 +0200] "GET / HTTP/1.0" 400 651 "-" "-" "-" "-" 3.129.187.38 - - [12/Oct/2026:21:12:49 +0200] "GET /robots.txt HTTP/2.0" 402 2688 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" "REDACTED" "" ... show less	Port Scan Web App Attack
🇹🇼 198.235.24.121	12 Oct 2026	Direct IP access. 198.235.24.121 - - [12/Oct/2026:20:56:09 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" ... show more Direct IP access. 198.235.24.121 - - [12/Oct/2026:20:56:09 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" "-" 198.235.24.121 - - [12/Oct/2026:20:56:10 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" "-" ... show less	Port Scan Web App Attack
🇺🇸 129.121.100.53	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 129.121.100.53; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 129.121.100.53; usernames=["root" "sunrise" "msf" "md"]; passwords sha1 prefix=["02f2028e" "3cd45ba6" "f14b97d3" "7de69d16" "171a0290" "2b12e1a2" "240c4df7" "ab86dbd4" "21552124" "4423a29c"] show less	Brute-Force SSH
🇫🇮 46.29.26.140	12 Oct 2026	Direct IP access. 46.29.26.140 - - [12/Oct/2026:19:23:32 +0200] "GET /RDWeb HTTP/1.1" 402 4894 "http ... show more Direct IP access. 46.29.26.140 - - [12/Oct/2026:19:23:32 +0200] "GET /RDWeb HTTP/1.1" 402 4894 "https://REDACTED:443/RDWeb" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "REDACTED:443" "" 46.29.26.140 - - [12/Oct/2026:19:23:33 +0200] "GET /RDWeb/ HTTP/1.1" 402 4921 "https://REDACTED:443/RDWeb/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "REDACTED:443" "" ... show less	Port Scan Web App Attack
🇲🇾 47.250.160.88	12 Oct 2026	Direct IP access. 47.250.160.88 - - [12/Oct/2026:18:55:16 +0200] "GET / HTTP/1.1" 402 4834 "-" "curl ... show more Direct IP access. 47.250.160.88 - - [12/Oct/2026:18:55:16 +0200] "GET / HTTP/1.1" 402 4834 "-" "curl/7.64.1" "REDACTED:443" "" 47.250.160.88 - - [12/Oct/2026:18:55:18 +0200] "GET / HTTP/2.0" 402 673 "-" "curl/7.74.0" "REDACTED:443" "" ... show less	Port Scan Web App Attack
🇰🇷 220.124.230.68	12 Oct 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 220.124.230.68	Port Scan Brute-Force IoT Targeted
🇨🇳 14.103.107.26	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 14.103.107.26; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 14.103.107.26; usernames=["root" "github-runner" "rootftp" "dev" "sammy"]; passwords sha1 prefix=["bcdb84da" "5baa61e4" "f1c5687c" "16f18160" "f7090113" "3eae40ad" "e74f3eb7" "d83f04e0" "ba4bc71c" "37fa2653"] show less	Brute-Force SSH
🇨🇳 42.51.41.252	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 42.51.41.252; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 42.51.41.252; usernames=["louis" "amin" "david" "base" "root" "git" "sambauser"]; passwords sha1 prefix=["28f90e0c" "b6cf530e" "49f0632c" "7110eda4" "b9507913" "1065e97e" "aafdc238" "f94a69e9" "b70bc64c" "5baa61e4"] show less	Brute-Force SSH
🇨🇳 203.83.231.93	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 203.83.231.93; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 203.83.231.93; usernames=["database" "root" "nexus" "web" "v" "toor" "jean"]; passwords sha1 prefix=["7110eda4" "20822a14" "ca84d134" "54fd1711" "c0ffaada" "a23c2223" "40bd0015" "5baa61e4" "51f8b1fa"] show less	Brute-Force SSH
🇨🇳 121.228.250.223	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 121.228.250.223; ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 121.228.250.223; usernames=["root" "jean" "admin" "toor" "nexus"]; passwords sha1 prefix=["2e1f787e" "20822a14" "51f8b1fa" "62d5a7ea" "a23c2223" "c0ffaada" "54fd1711" "5baa61e4" "7110eda4" "ddac8208"] show less	Brute-Force SSH
🇨🇳 59.50.190.203	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 59.50.190.203; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 59.50.190.203; usernames=["anil" "nirmal" "root" "odoo12" "odoo9" "michel" "verdaccio"]; passwords sha1 prefix=["3a02579c" "ce7ea791" "63d058c4" "41048064" "1dcc77d4" "695636e2" "694b081b" "2c7f9fd2" "2addcd99" "b14a46e1"] show less	Brute-Force SSH
🇳🇱 185.226.197.42	12 Oct 2026	Direct IP access. 185.226.197.42 - - [12/Oct/2026:18:22:27 +0200] "GET / HTTP/1.1" 402 4843 "-" "Moz ... show more Direct IP access. 185.226.197.42 - - [12/Oct/2026:18:22:27 +0200] "GET / HTTP/1.1" 402 4843 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "REDACTED" "" 185.226.197.42 - - [12/Oct/2026:18:22:29 +0200] "POST /mcp HTTP/2.0" 402 2692 "-" "python-httpx/0.28.1" "REDACTED" "" ... show less	Port Scan Web App Attack
🇮🇳 182.237.13.208	12 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 182.237.13.208; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 182.237.13.208; usernames=["eduard" "kubernetes" "root" "uftp" "bitrix" "frappe" "deploy"]; passwords sha1 prefix=["280a950b" "59fa6115" "510d74b6" "e1b914a9" "5bfe5529" "98f5e674" "52aa7ff3" "7c4a8d09" "f865b536" "39c39aaf"] show less	Brute-Force SSH
🇩🇪 46.101.118.193	12 Oct 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 46.101.118.193 ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 46.101.118.193; usernames=["GET / HTTP/1.0" "OPTIONS / HTTP/1.0" "OPTIONS / RTSP/1.0" "HELP" "\x16\x03\x00\x00S\x01\x00\x00O\x03\x00?G\xd7\xf7\xba,\xee\xea\xb2`~\xf3\x00\xfd\x82{\xb9Ֆ\xc8w\x9b\xe6\xc4\xdb<=\xdbo\xef\x10n\x00\x00(\x00\x16\x00\x13\x00"] show less	Port Scan Brute-Force IoT Targeted