AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ctidrv joined AbuseIPDB in May 2026 and has reported 1,786 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇭🇰 20.24.80.73	1 hour ago	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php \| UA: Mozilla ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.24.80.73 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇩🇿 196.20.125.211	7 hours ago	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/92.0.0.0 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇨🇭 34.65.111.159	10 hours ago	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /phpinfo.php \| UA: M ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /phpinfo.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| rDNS: 159.111.65.34.bc.googleusercontent.com \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇨🇦 20.151.10.161	12 hours ago	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /dyt8mjxc3yofbkoriukvg ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /dyt8mjxc3yofbkoriukvgjaCdefault.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇸🇬 104.28.254.46	14 hours ago	Honeypot detection. Threat score: 40/100. Collector: api. \| Request: GET /api/config \| UA: Mozilla/5 ... show more Honeypot detection. Threat score: 40/100. Collector: api. \| Request: GET /api/config \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) \| Reasons: sensitive_endpoint show less	Bad Web Bot Port Scan
🇸🇬 104.28.222.47	14 hours ago	Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /.continue/config.json ... show more Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /.continue/config.json \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15 \| Reasons: suspicious_path, no_sec_fetch, no_cookies show less	Bad Web Bot
🇸🇬 104.28.254.47	14 hours ago	Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /.continue/config.json ... show more Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /.continue/config.json \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) \| Reasons: bot_keyword, suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇸🇬 104.28.222.46	14 hours ago	Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /config.yml \| UA: Mozi ... show more Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /config.yml \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0 \| Reasons: suspicious_path, no_sec_fetch, no_cookies show less	Bad Web Bot
🇺🇸 209.112.91.75	19 hours ago	Honeypot detection. Threat score: 40/100. Collector: api. \| Request: GET /api/config \| UA: Mozilla/5 ... show more Honeypot detection. Threat score: 40/100. Collector: api. \| Request: GET /api/config \| UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) \| Reasons: sensitive_endpoint show less	Bad Web Bot Port Scan
🇨🇦 4.204.224.164	21 hours ago	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /alfa.php \| rDNS: 4. ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /alfa.php \| rDNS: 4.204.224.164 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇮🇳 40.80.93.27	22 hours ago	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php \| UA: Mozilla ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 40.80.93.27 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇺🇸 66.132.172.137	06 Sep 2026	Honeypot detection. Threat score: 50/100. Collector: honeypot. \| Request: GET /favicon.ico \| UA: Moz ... show more Honeypot detection. Threat score: 50/100. Collector: honeypot. \| Request: GET /favicon.ico \| UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) \| rDNS: 137.172.132.66.censys-scanner.com \| Reasons: scanner:censys, no_sec_fetch, no_cookies show less	Bad Web Bot Port Scan
🇱🇹 141.98.11.42	06 Sep 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/colors/e ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/colors/ectoplasm/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| rDNS: bag.woinsta.com \| Reasons: wp_login_probe show less	Bad Web Bot
🇺🇸 147.224.213.157	06 Sep 2026	Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /wp-includes/css/butto ... show more Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /wp-includes/css/buttons.css \| UA: Go-http-client/1.1 \| Reasons: scanner:go_http, suspiciously_short, no_sec_fetch, no_cookies show less	Bad Web Bot Port Scan
🇬🇧 2.99.36.197	06 Sep 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36 \| rDNS: host-2-99-36-197.as13285.net \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇷🇴 185.19.40.62	06 Sep 2026	Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET //xmlrpc.php?rsd \| UA: ... show more Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET //xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_accept_encoding show less	Bad Web Bot
🇯🇵 34.180.74.108	06 Sep 2026	Honeypot detection. Threat score: 65/100. Collector: api. \| Request: GET /actuator/configprops \| UA: ... show more Honeypot detection. Threat score: 65/100. Collector: api. \| Request: GET /actuator/configprops \| UA: crusader-worker/1.0 \| Reasons: admin_endpoint, sensitive_endpoint show less	Bad Web Bot Port Scan
🇮🇳 20.198.7.31	05 Sep 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php \| UA: Mozilla ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.198.7.31 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇨🇦 4.204.224.164	05 Sep 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 4. ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 4.204.224.164 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇺🇸 216.73.216.200	05 Sep 2026	Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /sitemap.xml \| UA: Moz ... show more Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /sitemap.xml \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]) \| Reasons: bot_keyword, no_sec_fetch, no_cookies, high_frequency show less	Bad Web Bot
🇰🇷 20.214.149.209	05 Sep 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/ID3/ind ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/ID3/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.214.149.209 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇭🇰 104.208.72.93	05 Sep 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/ID3/ind ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/ID3/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 104.208.72.93 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇺🇿 84.54.72.35	05 Sep 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 \| rDNS: 35.72.albatros.uz \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇳🇱 34.7.23.59	05 Sep 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /phpinfo.php \| UA: M ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /phpinfo.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| rDNS: 59.23.7.34.bc.googleusercontent.com \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇪🇸 167.17.71.189	05 Sep 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| rDNS: 189-71-17-167.clients.gthost.com \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack