AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ctidrv joined AbuseIPDB in May 2026 and has reported 3,176 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇳🇱 174.138.5.190	20 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/fonts/c ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-includes/fonts/custom-file-3-1737787260.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:155.0) Gecko/20100101 Firefox/155.0 \| rDNS: 174.138.5.190 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇰🇷 20.194.45.183	20 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.194.45.183 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇦🇪 145.241.126.126	19 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mo ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| rDNS: 145.241.126.126 \| Reasons: wp_login_probe show less	Bad Web Bot
🇩🇪 103.47.145.16	19 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mo ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-login.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15 \| rDNS: 103.47.145.16 \| Reasons: wp_login_probe show less	Bad Web Bot
🇫🇷 146.70.194.222	19 Oct 2026	Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET //xmlrpc.php?rsd \| UA: ... show more Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET //xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_accept_encoding show less	Bad Web Bot
🇮🇳 103.154.37.191	19 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36 \| rDNS: keralavisionisp-dynamic-191.37.154.103.keralavisionisp.com \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇸🇬 167.172.72.123	19 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /images/images/cache ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /images/images/cache.php \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| rDNS: 167.172.72.123 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇺🇸 216.73.217.14	19 Oct 2026	Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /sitemap.xml \| UA: Moz ... show more Honeypot detection. Threat score: 40/100. Collector: honeypot. \| Request: GET /sitemap.xml \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]) \| Reasons: bot_keyword, no_sec_fetch, no_cookies, high_frequency show less	Bad Web Bot
🇦🇺 20.211.27.190	19 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/colors/m ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: GET /wp-admin/css/colors/midnight/filemanager_nopw.php \| rDNS: 20.211.27.190 \| Reasons: wp_login_probe show less	Bad Web Bot
🇩🇯 196.201.193.234	19 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇮🇳 20.193.232.54	19 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 20 ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 20.193.232.54 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇰🇷 52.141.61.40	18 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /yich.php \| Reasons: e ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /yich.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇧🇷 177.92.162.3	18 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/69.0.0.0 Safari/537.36 \| rDNS: sidi-177-92-162-3.siditelecom-isp.com.br \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇩🇪 172.71.148.20	18 Oct 2026	Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: POST /wp-admin/admin-ajax. ... show more Honeypot detection. Threat score: 65/100. Collector: wp_login. \| Request: POST /wp-admin/admin-ajax.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 \| rDNS: 172.71.148.20 \| Reasons: wp_login_probe show less	Bad Web Bot
🇪🇬 156.192.248.105	18 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36 \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇧🇪 35.205.141.38	18 Oct 2026	Honeypot detection. Threat score: 50/100. Collector: api. \| Request: POST /graphql \| UA: Mozilla/5.0 ... show more Honeypot detection. Threat score: 50/100. Collector: api. \| Request: POST /graphql \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 \| Reasons: graphql:introspection show less	Bad Web Bot Port Scan
🇰🇷 20.196.199.78	18 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /yich.php \| Reasons: e ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /yich.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇰🇷 20.194.17.163	18 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /shell.php \| UA: Moz ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /shell.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.194.17.163 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇰🇷 20.194.96.223	17 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /wp-security.php \| Rea ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /wp-security.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇧🇷 189.72.53.22	17 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/79.0.0.0 Safari/537.36 \| rDNS: 189-72-53-22.pltce701.e.brasiltelecom.net.br \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot
🇮🇳 20.198.89.82	17 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /yich.php \| Reasons: e ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /yich.php \| Reasons: empty_ua, no_sec_fetch, no_accept_encoding, high_frequency show less	Bad Web Bot
🇰🇷 20.196.193.222	17 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 20 ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 20.196.193.222 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇰🇷 20.214.147.109	17 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 20 ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /1.php?p= \| rDNS: 20.214.147.109 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇰🇷 20.194.17.163	17 Oct 2026	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /2.php \| UA: Mozilla ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /2.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 20.194.17.163 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇳🇮 190.212.216.91	17 Oct 2026	Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozi ... show more Honeypot detection. Threat score: 45/100. Collector: honeypot. \| Request: GET /xmlrpc.php \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/79.0.0.0 Safari/537.36 \| rDNS: 91-216-212-190.enitel.net.ni \| Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding show less	Bad Web Bot