AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GAS joined AbuseIPDB in April 2019 and has reported 212,066 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇨🇭 209.99.187.48	16 Oct 2026	Direct IP access. 209.99.187.48 - - [16/Oct/2026:07:54:51 +0200] "\x16\x03\x01\x05\xe2\x01" 400 392 ... show more Direct IP access. 209.99.187.48 - - [16/Oct/2026:07:54:51 +0200] "\x16\x03\x01\x05\xe2\x01" 400 392 "-" "-" "-" "-" 209.99.187.48 - - [16/Oct/2026:07:54:51 +0200] "GET / HTTP/1.1" 402 2774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36" "REDACTED" "" ... show less	Port Scan Web App Attack
🇸🇬 45.78.201.248	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 45.78.201.248; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 45.78.201.248; usernames=["root" "zahid" "user3" "maman" "costel" "user1" "ansible" "marcelo" "world" "claude"]; passwords sha1 prefix=["7ff2f15b" "21bd12dc" "40bd0015" "7c4a8d09" "9ebf43b7" "12dea96f" "356a192b" "7c222fb2" "7c211433" "5baa61e4"] show less	Brute-Force SSH
🇺🇸 216.180.246.63	16 Oct 2026	Direct IP access. 216.180.246.63 - - [16/Oct/2026:07:22:32 +0200] "GET / HTTP/1.0" 402 2712 "-" "Moz ... show more Direct IP access. 216.180.246.63 - - [16/Oct/2026:07:22:32 +0200] "GET / HTTP/1.0" 402 2712 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" "" 216.180.246.63 - - [16/Oct/2026:07:23:07 +0200] "GET / HTTP/1.0" 402 2711 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" "" ... show less	Port Scan Web App Attack
🇧🇼 168.167.228.123	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 168.167.228.123; ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 168.167.228.123; usernames=["etluser" "nagios" "main" "user" "gitlab-runner" "root" "kt" "ubuntu" "ftpuser" "talked"]; passwords sha1 prefix=["e0885c04" "40bd0015" "7c4a8d09" "d46c276d" "b1b3773a" "f3287f93" "3553b226" "f7caa94a" "7110eda4" "a2084a5e"] show less	Brute-Force SSH
🇻🇳 171.254.93.44	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 171.254.93.44; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 171.254.93.44; usernames=["ansible" "strapi" "root" "user3" "sysadmin" "zahid" "buser" "world" "marcelo"]; passwords sha1 prefix=["356a192b" "f2c4ab39" "abc209d2" "40bd0015" "088d393a" "21bd12dc" "7c4a8d09" "7c211433" "1dd97ceb" "7c222fb2"] show less	Brute-Force SSH
🇻🇳 14.225.218.99	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 14.225.218.99; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 14.225.218.99; usernames=["costel" "world" "maman" "strapi" "root" "marcelo" "ansible"]; passwords sha1 prefix=["9ebf43b7" "7c211433" "7c4a8d09" "f2c4ab39" "cade8d9f" "7c222fb2" "356a192b" "bb670bce" "6ef01997" "abc209d2"] show less	Brute-Force SSH
🇧🇪 35.205.82.95	16 Oct 2026	Spamhouse blocked IPs attempts. 2026-10-16T06:54:39.021422+02:00 mail postfix/postscreen[825732]: DN ... show more Spamhouse blocked IPs attempts. 2026-10-16T06:54:39.021422+02:00 mail postfix/postscreen[825732]: DNSBL rank 3 for [35.205.82.95]:29578 2026-10-16T06:54:46.617672+02:00 mail postfix/postscreen[825732]: DNSBL rank 3 for [35.205.82.95]:55442 2026-10-16T06:54:54.139440+02:00 mail postfix/postscreen[825732]: DNSBL rank 3 for [35.205.82.95]:36062 2026-10-16T06:54:59.089349+02:00 mail postfix/postscreen[825732]: DNSBL rank 3 for [35.205.82.95]:36068 2026-10-16T06:55:04.284916+02:00 mail postfix/postscreen[825732]: DNSBL rank 3 for [35.205.82.95]:56746 ... show less	Email Spam
🇺🇸 52.168.141.47	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 52.168.141.47; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 52.168.141.47; usernames=["ubuntu" "root" "h" "duc" "elizabeth" "github" "work"]; passwords sha1 prefix=["4c66642e" "7b23a04f" "264bc076" "27d5482e" "7c4a8d09" "02151db7" "40bd0015" "64b2b6d1" "7c222fb2" "b3c8a9b5"] show less	Brute-Force SSH
🇩🇪 164.30.17.82	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 164.30.17.82; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 164.30.17.82; usernames=["root"]; passwords sha1 prefix=["0cd2b5b1" "171a0290" "562a4f92" "372e65f6" "56b72775" "4bf4f38f" "b8f73b1d" "b0c3d22c" "4484cbf5" "7d3589c4"] show less	Brute-Force SSH
🇺🇿 195.158.6.38	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 195.158.6.38; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 195.158.6.38; usernames=["root"]; passwords sha1 prefix=["24bf68e3" "b3a5425f" "ba324ca7" "58a3ed6f" "f460c882" "62eb0db1" "01c11b90" "ca84d134" "7505d64a" "b3aca92c"] show less	Brute-Force SSH
🇮🇩 103.253.245.102	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 103.253.245.102; ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 103.253.245.102; usernames=["amran" "root" "orangepi" "deploy" "git" "asd" "james" "system"]; passwords sha1 prefix=["b097c2ee" "6505ecb8" "561dce27" "49897be8" "5a400558" "ec711785" "3135351d" "7110eda4" "7c4a8d09" "6350f8dd"] show less	Brute-Force SSH
🇷🇴 2.57.122.238	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 2.57.122.238; use ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 2.57.122.238; usernames=["sol" "solana" "ethdocker" "eth-docker" "eth_docker" "raydium" "firedancer" "node"]; passwords sha1 prefix=["fbb93bb9" "0c4d91b1" "c41dc3e2" "0ac9c6b2" "c91ff93d" "a8432df4" "35637cd2" "f8e966d1" "7110eda4" "7c4a8d09"] show less	Brute-Force SSH
🇩🇪 185.73.23.161	16 Oct 2026	Direct IP access. 185.73.23.161 - - [16/Oct/2026:05:13:44 +0200] "GET / HTTP/1.1" 402 4908 "-" "Soft ... show more Direct IP access. 185.73.23.161 - - [16/Oct/2026:05:13:44 +0200] "GET / HTTP/1.1" 402 4908 "-" "Software Security Research/1.0 (+https://finn.softsec.ruhr-uni-bochum.de)" "www.novella2000.it" "" 185.73.23.161 - - [16/Oct/2026:05:15:11 +0200] "GET / HTTP/1.1" 402 4906 "-" "Software Security Research/1.0 (+https://finn.softsec.ruhr-uni-bochum.de)" "www.eklavvya.com" "" ... show less	Port Scan Web App Attack
🇵🇰 139.135.60.50	16 Oct 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 139.135.60.50; ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 139.135.60.50; usernames=["admin" "root" "telnet" "ubnt"]; passwords sha1 prefix=["7110eda4" "6db69219" "22e9f568" "34816210" "1411678a" "b5e701c9" "21d17f0c" "70352f41" "404865ca" "7c4a8d09"] show less	Port Scan Brute-Force IoT Targeted
🇺🇸 216.218.206.66	16 Oct 2026	Direct IP access. 216.218.206.66 - - [16/Oct/2026:04:37:53 +0200] "GET / HTTP/1.1" 402 2741 "-" "Moz ... show more Direct IP access. 216.218.206.66 - - [16/Oct/2026:04:37:53 +0200] "GET / HTTP/1.1" 402 2741 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.56" "REDACTED" "" 216.218.206.66 - - [16/Oct/2026:04:41:44 +0200] "GET /favicon.ico HTTP/1.1" 402 2756 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15" "REDACTED" "" ... show less	Port Scan Web App Attack
🇳🇱 77.239.124.40	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 77.239.124.40; us ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 77.239.124.40; usernames=["root" "ubuntu" "qwe" "radxa" "brad" "tom" "user" "nanjing"]; passwords sha1 prefix=["58d89924" "b8ee6a97" "056eafe7" "03826807" "874c4155" "f4aed81b" "9233b6f5" "90fa18f7" "68c9fc4c" "8d11eea0"] show less	Brute-Force SSH
🇧🇪 35.187.177.226	16 Oct 2026	Direct IP access. 35.187.177.226 - - [16/Oct/2026:04:11:34 +0200] "\x16\x03" 400 392 "-" "-" "-" "-" ... show more Direct IP access. 35.187.177.226 - - [16/Oct/2026:04:11:34 +0200] "\x16\x03" 400 392 "-" "-" "-" "-" 35.187.177.226 - - [16/Oct/2026:04:11:34 +0200] "GET / HTTP/1.1" 402 2731 "-" "Mozilla/5.0 (compatible; nmap-http-info)" "REDACTED" "" ... show less	Port Scan Web App Attack
🇵🇰 202.70.139.236	16 Oct 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 202.70.139.236 ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 202.70.139.236; usernames=["admin" "root" "supervisor" "Admin"]; passwords sha1 prefix=["d033e22a" "cab524d4" "70352f41" "a1ea31f8" "8cb2237d" "b69413e4" "b3796004" "12dea96f" "4e7afebc"] show less	Port Scan Brute-Force IoT Targeted
🇳🇱 109.160.32.145	16 Oct 2026	SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 109.160.32.145; u ... show more SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 109.160.32.145; usernames=["omsagent" "s-config-10" "kernvm" "mohamad" "ssali" "huashan1gongyi" "wujian" "cctv" "whbadmin" "user84"]; passwords sha1 prefix=["71941a77" "8c101798" "5e03a58d" "38b743f4" "e83249bd" "557468e3" "0f58d5a5" "7d416c0f" "7616bb87" "b2727909"] show less	Brute-Force SSH
🇳🇬 102.212.40.229	16 Oct 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 102.212.40.229 ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 102.212.40.229; usernames=["admin" "root" "Admin" "netscreen" "localadmin" "draytek"]; passwords sha1 prefix=["7110eda4" "8cb2237d" "82579efd" "39ef9aae" "63ccc2bf" "1411678a" "99457fc5" "5baa61e4"] show less	Port Scan Brute-Force IoT Targeted
🇵🇰 124.29.224.93	16 Oct 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 124.29.224.93; ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 124.29.224.93; usernames=["root" "admin" "telnet" "nmgcuadmin" "e8ehome" "support"]; passwords sha1 prefix=["9d4e1e23" "9164ed6f" "5cb6a0d0" "7505d64a" "7c4a8d09" "22e9f568" "7475b52b" "72fee339" "97b5b32e" "5bdcd3c0"] show less	Port Scan Brute-Force IoT Targeted
🇩🇪 185.73.23.162	16 Oct 2026	Direct IP access. 185.73.23.162 - - [16/Oct/2026:02:45:21 +0200] "GET / HTTP/1.1" 402 4970 "-" "Soft ... show more Direct IP access. 185.73.23.162 - - [16/Oct/2026:02:45:21 +0200] "GET / HTTP/1.1" 402 4970 "-" "Software Security Research/1.0 (+https://goose.softsec.ruhr-uni-bochum.de)" "www.ok.co.uk" "" 185.73.23.162 - - [16/Oct/2026:02:48:16 +0200] "GET / HTTP/1.1" 402 4940 "-" "Software Security Research/1.0 (+https://goose.softsec.ruhr-uni-bochum.de)" "onvoard.com" "" ... show less	Port Scan Web App Attack
🇰🇷 59.11.42.221	15 Oct 2026	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 59.11.42.221; ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 59.11.42.221; usernames=["admin" "root" "\"??$" "\xcc\xd1\xd1\xca"]; passwords sha1 prefix=["d033e22a" "7b005f48" "5226d96a" "dcbe8b18" "630db2ce" "27687acc" "d6040c5f" "7c783449" "7c4a8d09" "15fb4c63"] show less	Port Scan Brute-Force IoT Targeted
🇫🇮 147.185.133.241	15 Oct 2026	Direct IP access. 147.185.133.241 - - [16/Oct/2026:00:57:36 +0200] "\x16\x03\x01" 400 392 "-" "-" "- ... show more Direct IP access. 147.185.133.241 - - [16/Oct/2026:00:57:36 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" "-" 147.185.133.241 - - [16/Oct/2026:00:57:36 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" "-" ... show less	Port Scan Web App Attack
🇷🇺 31.184.195.246	15 Oct 2026	Spamhouse blocked IPs attempts. 2026-10-16T00:55:59.036488+02:00 mail postfix/postscreen[773624]: DN ... show more Spamhouse blocked IPs attempts. 2026-10-16T00:55:59.036488+02:00 mail postfix/postscreen[773624]: DNSBL rank 3 for [31.184.195.246]:55292 2026-10-16T00:55:59.036502+02:00 mail postfix/postscreen[773624]: DNSBL rank 3 for [31.184.195.246]:36090 2026-10-16T00:55:59.036512+02:00 mail postfix/postscreen[773624]: DNSBL rank 3 for [31.184.195.246]:55302 2026-10-16T00:55:59.036522+02:00 mail postfix/postscreen[773624]: DNSBL rank 3 for [31.184.195.246]:55316 2026-10-16T00:55:59.036531+02:00 mail postfix/postscreen[773624]: DNSBL rank 3 for [31.184.195.246]:55326 ... show less	Email Spam