AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User itsnixk joined AbuseIPDB in April 2026 and has reported 6,818 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇧🇪 35.241.206.51	4 hours ago	(ftpd) Failed FTP login from 35.241.206.51 (BE/Belgium/51.206.241.35.bc.googleusercontent.com): 1 in ... show more (ftpd) Failed FTP login from 35.241.206.51 (BE/Belgium/51.206.241.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 7 10:11:49 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇧🇪 34.38.190.168	14 hours ago	(ftpd) Failed FTP login from 34.38.190.168 (BE/Belgium/168.190.38.34.bc.googleusercontent.com): 1 in ... show more (ftpd) Failed FTP login from 34.38.190.168 (BE/Belgium/168.190.38.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 6 23:42:21 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇰🇷 101.36.114.222	22 hours ago	(eximsyntax) Exim syntax errors from 101.36.114.222 (KR/South Korea/-): 1 in the last 3600 secs; Por ... show more (eximsyntax) Exim syntax errors from 101.36.114.222 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-09-06 15:47:53 SMTP call from [101.36.114.222] dropped: too many syntax or protocol errors (last command was "À\024???/?5À\022\023\003\023\001\023\002\001??{?\005?\005\001?????", NULL) show less	Port Scan
🇺🇸 66.132.172.137	23 hours ago	(eximsyntax) Exim syntax errors from 66.132.172.137 (US/United States/137.172.132.66.censys-scanner. ... show more (eximsyntax) Exim syntax errors from 66.132.172.137 (US/United States/137.172.132.66.censys-scanner.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-09-06 15:04:25 SMTP call from 137.172.132.66.censys-scanner.com [66.132.172.137] dropped: too many syntax or protocol errors (last command was "?", NULL) show less	Port Scan
🇭🇰 152.32.134.156	23 hours ago	(ftpd) Failed FTP login from 152.32.134.156 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: ; Dir ... show more (ftpd) Failed FTP login from 152.32.134.156 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 6 14:49:47 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇩🇪 213.209.159.84	23 hours ago	(mod_security) mod_security (id:930130) triggered by 213.209.159.84 (DE/Germany/-): 1 in the last 36 ... show more (mod_security) mod_security (id:930130) triggered by 213.209.159.84 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Sep 06 14:47:50.706202 2026] [security2:error] [pid 558275:tid 558303] [remote 213.209.159.84:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "ap21VoBUSushXMUWb7JCOgAAUho"] show less	Port Scan
🇧🇪 34.76.226.40	06 Sep 2026	(ftpd) Failed FTP login from 34.76.226.40 (BE/Belgium/40.226.76.34.bc.googleusercontent.com): 1 in t ... show more (ftpd) Failed FTP login from 34.76.226.40 (BE/Belgium/40.226.76.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 6 14:28:08 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇺🇸 34.29.157.66	06 Sep 2026	(mod_security) mod_security (id:930130) triggered by 34.29.157.66 (US/United States/66.157.29.34.bc. ... show more (mod_security) mod_security (id:930130) triggered by 34.29.157.66 (US/United States/66.157.29.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Sep 06 12:04:42.632725 2026] [security2:error] [pid 3449528:tid 3449596] [remote 34.29.157.66:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "ap2PGmUPbC0n7VsqykVo3AAAHDI"] show less	Port Scan
🇸🇬 118.26.111.94	06 Sep 2026	(eximsyntax) Exim syntax errors from 118.26.111.94 (SG/Singapore/-): 1 in the last 3600 secs; Ports: ... show more (eximsyntax) Exim syntax errors from 118.26.111.94 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-09-06 07:57:42 SMTP call from [118.26.111.94] dropped: too many syntax or protocol errors (last command was "?", NULL) show less	Port Scan
🇳🇱 91.92.40.140	06 Sep 2026	(mod_security) mod_security (id:930130) triggered by 91.92.40.140 (NL/The Netherlands/-): 1 in the l ... show more (mod_security) mod_security (id:930130) triggered by 91.92.40.140 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Sep 06 06:40:20.082259 2026] [security2:error] [pid 1353560:tid 1353737] [remote 91.92.40.140:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/api/.env"] [unique_id "ap1DFAKonPw8mFYDtQt47gAAnRM"] show less	Port Scan
🇺🇸 47.254.44.85	06 Sep 2026	(sshd) Failed SSH login from 47.254.44.85 (US/United States/-): 1 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 47.254.44.85 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 6 04:04:13 web sshd[2415355]: Invalid user from 47.254.44.85 port 18510 show less	Port Scan
🇧🇪 34.140.79.35	06 Sep 2026	(ftpd) Failed FTP login from 34.140.79.35 (BE/Belgium/35.79.140.34.bc.googleusercontent.com): 1 in t ... show more (ftpd) Failed FTP login from 34.140.79.35 (BE/Belgium/35.79.140.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 5 23:44:55 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇺🇸 154.54.100.179	05 Sep 2026	(mod_security) mod_security (id:930130) triggered by 154.54.100.179 (US/United States/-): 1 in the l ... show more (mod_security) mod_security (id:930130) triggered by 154.54.100.179 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Sep 05 10:43:07.052987 2026] [security2:error] [pid 1690107:tid 1690165] [remote 154.54.100.179:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "apwqe-dX-JBrW5n9gBh--wAACSg"] show less	Port Scan
🇯🇴 176.28.133.115	05 Sep 2026	(ftpd) Failed FTP login from 176.28.133.115 (JO/Jordan/-): 1 in the last 3600 secs; Ports: ; Direct ... show more (ftpd) Failed FTP login from 176.28.133.115 (JO/Jordan/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 5 08:20:16 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇺🇸 216.81.200.56	05 Sep 2026	(mod_security) mod_security (id:930130) triggered by 216.81.200.56 (US/United States/ip56.btslab.lig ... show more (mod_security) mod_security (id:930130) triggered by 216.81.200.56 (US/United States/ip56.btslab.lightedge.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Sep 05 06:25:20.857298 2026] [security2:error] [pid 3146672:tid 3146804] [remote 216.81.200.56:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "apvuEGhFbVklvdUKnjzi5wAAGgQ"] show less	Port Scan
🇩🇪 45.152.161.192	05 Sep 2026	(mod_security) mod_security (id:930130) triggered by 45.152.161.192 (DE/Germany/-): 1 in the last 36 ... show more (mod_security) mod_security (id:930130) triggered by 45.152.161.192 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Sep 05 01:36:13.151830 2026] [security2:error] [pid 3146674:tid 3146850] [remote 45.152.161.192:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/pathscan-b622b2e66ec1-nope.env"] [unique_id "apuqTex6ZmKkBgCkXe7EwwAAuA4"] show less	Port Scan
🇺🇸 194.187.179.93	05 Sep 2026	(sshd) Failed SSH login from 194.187.179.93 (US/United States/-): 1 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 194.187.179.93 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 5 01:00:30 web sshd[3372157]: Invalid user from 194.187.179.93 port 11720 show less	Port Scan
🇧🇪 34.34.131.177	05 Sep 2026	(ftpd) Failed FTP login from 34.34.131.177 (BE/Belgium/177.131.34.34.bc.googleusercontent.com): 1 in ... show more (ftpd) Failed FTP login from 34.34.131.177 (BE/Belgium/177.131.34.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 5 00:07:46 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇳🇱 34.178.120.58	04 Sep 2026	(mod_security) mod_security (id:930130) triggered by 34.178.120.58 (NL/The Netherlands/58.120.178.34 ... show more (mod_security) mod_security (id:930130) triggered by 34.178.120.58 (NL/The Netherlands/58.120.178.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Sep 04 17:07:28.475205 2026] [security2:error] [pid 548505:tid 548583] [remote 34.178.120.58:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "apszEJrfJgdLE-ZCow17WgAAYDY"] show less	Port Scan
🇳🇱 138.226.239.233	04 Sep 2026	(sshd) Failed SSH login from 138.226.239.233 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: ... show more (sshd) Failed SSH login from 138.226.239.233 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 4 10:41:33 web sshd[3638536]: Invalid user telecomadmin from 138.226.239.233 port 27536 show less	Port Scan
🇷🇴 80.94.95.115	04 Sep 2026	(sshd) Failed SSH login from 80.94.95.115 (HU/Hungary/-): 1 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 80.94.95.115 (HU/Hungary/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 4 10:21:13 web sshd[3545928]: Invalid user support from 80.94.95.115 port 21266 show less	Port Scan
🇳🇱 94.154.43.146	04 Sep 2026	(mod_security) mod_security (id:930130) triggered by 94.154.43.146 (NL/The Netherlands/-): 1 in the ... show more (mod_security) mod_security (id:930130) triggered by 94.154.43.146 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Sep 04 06:33:40.342100 2026] [security2:error] [pid 761150:tid 761446] [remote 94.154.43.146:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.env"] [unique_id "apqehLm0mqGH4kWovpAJ9AABRxI"] show less	Port Scan
🇧🇪 34.156.188.51	04 Sep 2026	(ftpd) Failed FTP login from 34.156.188.51 (BE/Belgium/51.188.156.34.bc.googleusercontent.com): 1 in ... show more (ftpd) Failed FTP login from 34.156.188.51 (BE/Belgium/51.188.156.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 4 01:33:12 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan
🇺🇸 20.168.10.236	04 Sep 2026	(eximsyntax) Exim syntax errors from 20.168.10.236 (US/United States/azpdwsb6afwv.stretchoid.com): 1 ... show more (eximsyntax) Exim syntax errors from 20.168.10.236 (US/United States/azpdwsb6afwv.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-09-04 00:47:41 SMTP call from azpdwsb6afwv.stretchoid.com [20.168.10.236] dropped: too many syntax or protocol errors (last command was "?", NULL) show less	Port Scan
🇧🇪 34.77.166.77	04 Sep 2026	(ftpd) Failed FTP login from 34.77.166.77 (BE/Belgium/77.166.77.34.bc.googleusercontent.com): 1 in t ... show more (ftpd) Failed FTP login from 34.77.166.77 (BE/Belgium/77.166.77.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 3 20:48:42 web pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous] show less	Port Scan