AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ctidrv joined AbuseIPDB in May 2026 and has reported 3,143 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇸🇬 157.230.254.241	27 Oct 2026	Honeypot detection. Threat score: 50/100. Collector: honeypot. \| Request: GET /license.txt \| UA: pyt ... show more Honeypot detection. Threat score: 50/100. Collector: honeypot. \| Request: GET /license.txt \| UA: python-requests/2.27.1 \| Reasons: scanner:python_req, no_sec_fetch, no_cookies show less	Bad Web Bot Port Scan
🇩🇪 46.101.98.153	27 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mo ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mozilla/5.0 \| rDNS: 46.101.98.153 \| Reasons: wp_login_probe show less	Bad Web Bot
🇧🇩 103.177.124.183	27 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/66.0.0.0 Safari/537.36 \| rDNS: 103.177.124.183.race.net.bd \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇨🇦 20.151.218.88	27 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/about.ph ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/about.php \| rDNS: 20.151.218.88 \| Reasons: wp_login_probe show less	Bad Web Bot
🇰🇷 20.194.6.187	27 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/ \| UA: Mozil ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.194.6.187 \| Reasons: wp_login_probe show less	Bad Web Bot
🇰🇷 20.194.6.187	26 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.194.6.187 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇷🇺 95.71.119.219	26 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: wp_login. \| Request: POST /wp-admin/admin-ajax. ... show more Honeypot detection. Threat score: 90/100. Collector: wp_login. \| Request: POST /wp-admin/admin-ajax.php \| Credentials captured: user=admin \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| rDNS: 95.71.119.219 \| Reasons: wp_login_probe, wp_credentials_submitted, common_wp_username show less	Brute-Force Bad Web Bot
🇹🇳 102.157.172.13	26 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| Attacks detected: rfi, open_redirect \| Reasons: attack:rfi, attack:open_redirect show less	Web App Attack
🇸🇦 90.148.215.7	26 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/g ... show more Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/getHead?url=https://saunacom.com \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| rDNS: 90.148.215.7.dynamic.saudi.net.sa \| Attacks detected: rfi, open_redirect \| Reasons: attack:rfi, attack:open_redirect show less	Web App Attack
🇦🇷 138.59.143.90	26 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/em ... show more Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsaunacom.com&format=json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| Attacks detected: rfi, open_redirect \| Reasons: attack:rfi, attack:open_redirect show less	Web App Attack
🇺🇸 73.165.88.110	26 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/g ... show more Honeypot detection. Threat score: 65/100. Collector: honeypot. \| Request: GET /wp-json/rankmath/v1/getHead?url=https://saunacom.com \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| rDNS: c-73-165-88-110.hsd1.de.comcast.net \| Attacks detected: rfi, open_redirect \| Reasons: attack:rfi, attack:open_redirect show less	Web App Attack
🇦🇺 168.144.161.18	26 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/install.php ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/install.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 \| rDNS: 168.144.161.18 \| Reasons: wp_login_probe show less	Bad Web Bot
🇹🇭 110.78.231.19	26 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇰🇷 20.194.45.183	26 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.194.45.183 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇬🇹 190.148.49.248	26 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇸🇬 168.107.78.68	26 Oct 2026	Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /wp-includes/css/butto ... show more Honeypot detection. Threat score: 60/100. Collector: honeypot. \| Request: GET /wp-includes/css/buttons.css \| UA: Go-http-client/1.1 \| Reasons: scanner:go_http, suspiciously_short, no_sec_fetch, no_cookies show less	Bad Web Bot Port Scan
🇨🇦 20.151.218.88	26 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /class-walker-footer-d ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /class-walker-footer-dev.php?p= \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇰🇷 52.231.25.234	25 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 52.231.25.234 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇰🇷 20.194.6.187	25 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.194.6.187 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇭🇰 20.239.201.109	25 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/ \| UA: Mozil ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.239.201.109 \| Reasons: wp_login_probe show less	Bad Web Bot
🇨🇦 143.110.213.72	25 Oct 2026	Honeypot detection. Threat score: 50/100. Collector: api. \| Request: POST /graphql \| UA: Mozilla/5.0 ... show more Honeypot detection. Threat score: 50/100. Collector: api. \| Request: POST /graphql \| UA: Mozilla/5.0 (l9scan/2.0.2323e2339313e2633313e2437313; +https://leakix.net) \| Reasons: graphql:introspection show less	Bad Web Bot Port Scan
🇦🇺 20.92.72.133	25 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.92.72.133 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇭🇰 20.239.201.109	24 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.239.201.109 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇯🇵 36.13.51.31	24 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36 \| rDNS: KD036013051031.ppp-bb.dion.ne.jp \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇩🇪 172.68.192.201	24 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mo ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 \| rDNS: 172.68.192.201 \| Reasons: wp_login_probe show less	Bad Web Bot