ctidrv - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ctidrv joined AbuseIPDB in May 2026 and has reported 692 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇧🇷 20.226.60.151	14 minutes ago	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/ID3/abo ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/ID3/about.php \| rDNS: 20.226.60.151 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Exploited Host Web App Attack
🇵🇱 74.248.33.8	34 minutes ago	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/wp-login ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 74.248.33.8 \| Reasons: wp_login_probe show less	Bad Web Bot
🇸🇬 4.194.24.143	58 minutes ago	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /alfa.php \| UA: Mozi ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /alfa.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 4.194.24.143 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Exploited Host Web App Attack
🇨🇦 20.151.204.183	1 hour ago	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /tx79.php \| Reasons: e ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /tx79.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇺🇸 52.242.193.144	2 hours ago	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xda.php \| Reasons: em ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xda.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇺🇸 165.154.172.111	7 hours ago	Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /favicon.ico \| UA: Go- ... show more Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /favicon.ico \| UA: Go-http-client/1.1 \| Reasons: scanner:go_http, suspiciously_short, no_sec_fetch, no_cookies show less	Port Scan Bad Web Bot
🇩🇪 138.68.86.32	12 hours ago	Honeypot detection. Threat score: 50/100. Collector: api. \| Request: POST /graphql \| UA: Mozilla/5.0 ... show more Honeypot detection. Threat score: 50/100. Collector: api. \| Request: POST /graphql \| UA: Mozilla/5.0 (l9scan/2.0.2323e2339313e2633313e2437313; +https://leakix.net) \| Reasons: graphql:introspection show less	Port Scan Bad Web Bot
🇨🇴 186.113.131.168	15 hours ago	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇨🇭 20.203.219.190	19 hours ago	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /images.php \| Reasons: ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /images.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇺🇸 168.62.180.116	22 Jul 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/images/admin ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/images/admin.php \| rDNS: 168.62.180.116 \| Reasons: wp_login_probe show less	Bad Web Bot
🇺🇸 20.10.203.190	22 Jul 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/images/admin ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/images/admin.php \| rDNS: 20.10.203.190 \| Reasons: wp_login_probe show less	Bad Web Bot
🇳🇱 128.90.161.9	22 Jul 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mo ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15 \| rDNS: undefined.hostname.localhost \| Reasons: wp_login_probe show less	Bad Web Bot
🇧🇷 20.197.192.193	22 Jul 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /afodf.php \| Reasons: ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /afodf.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇳🇬 105.127.11.219	22 Jul 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇺🇸 20.12.183.135	22 Jul 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xltt.php \| Reasons: e ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xltt.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇺🇸 72.167.132.114	22 Jul 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/g ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/getHead?url=https://saunacom.com \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| rDNS: 114.132.167.72.host.secureserver.net \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack
🇨🇦 52.139.36.144	22 Jul 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /x.php \| rDNS: 52.13 ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /x.php \| rDNS: 52.139.36.144 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Exploited Host Web App Attack
🇺🇸 74.208.59.90	22 Jul 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| rDNS: infong-us-cl0116.perfora.net \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack
🇻🇳 103.57.220.209	22 Jul 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack
🇮🇳 117.250.237.194	22 Jul 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Word ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: WordPress.com; https://wordpress.com \| rDNS: static.ill.117.250.237.194.bsnl.co.in \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇸🇬 188.166.241.141	22 Jul 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack
🇨🇦 20.220.225.223	22 Jul 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /2x.php \| Reasons: emp ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /2x.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇪🇸 188.164.197.230	22 Jul 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| rDNS: cobblec.vservers.es \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack
🇻🇳 117.0.21.154	22 Jul 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/g ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/getHead?url=https://saunacom.com \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack
🇫🇷 38.242.157.30	21 Jul 2026	Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 70/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| rDNS: vmi1146453.contaboserver.net \| Attacks detected: rfi, open_redirect \| Reasons: no_cookies, attack:rfi, attack:open_redirect show less	Web App Attack