AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User PrivateLiu joined AbuseIPDB in June 2026 and has reported 3,273 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇱 91.92.47.87	20 minutes ago	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.git/config, /debug/vars, /, /.git/HEAD, /.env.production, /.hg/requires, /wp-config.php.bak, /debug/pprof/, /.env.local, /favicon.ico, /_profiler/phpinfo, /.svn/entries. Statuses: 301. Methods: GET. UA: N/A show less	Web App Attack
🇩🇪 43.157.46.118	3 hours ago	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇺🇸 184.105.139.69	3 hours ago	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.git/config. Statuses: 404. Methods: GET. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/101.0.4951.41 show less	Web App Attack
🇺🇸 216.180.246.118	3 hours ago	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01 ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01\X00\XFD\X01\X00\X00\XF9\X03\X03\XD5\X9A\XE3\XEF\XB1\X9F&AT~\XDD\X98\X9E\X82,E\|N\XB7\X12\XA3\XEFF\X00\XC2\X9E\XF3\XED\XB4\XF5\XEC\X85; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: \xC0L\xCD\x12\xA6.N\x08\xF2\x940\xA0Y\x1D\xE5\x00\xB1\xBD\xA8\x92m, /. Statuses: 301, 400. Methods: GET, \X16\X03\X01\X00\XFD\X01\X00\X00\XF9\X03\X03\XD5\X9A\XE3\XEF\XB1\X9F&AT~\XDD\X98\X9E\X82,E\|N\XB7\X12\XA3\XEFF\X00\XC2\X9E\XF3\XED\XB4\XF5\XEC\X85. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇺🇸 20.168.123.59	4 hours ago	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /autodiscover/autodiscover.json?@zdi/Powershell. Statuses: 404. Methods: GET. UA: Mozilla/5.0 zgrab/0.x show less	Web App Attack
🇧🇪 34.62.59.46	4 hours ago	[AbuseIPDB auto-report] Rules: Rule3. Region: non-CN. Non-standard HTTP methods: UDWE. Sample paths: ... show more [AbuseIPDB auto-report] Rules: Rule3. Region: non-CN. Non-standard HTTP methods: UDWE. Sample paths: /. Statuses: 301. Methods: GET, HEAD, OPTIONS, POST, UDWE. UA: N/A show less	Hacking Web App Attack
🇺🇸 66.132.195.36	6 hours ago	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: PRI; Unsuppo ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: PRI; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: *, /. Statuses: 301, 400. Methods: GET, PRI. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇲🇾 47.250.221.153	6 hours ago	[AbuseIPDB auto-report] Rules: Rule2, Rule4, Rule5. Region: non-CN. Broad path scanning: 60 x 404/40 ... show more [AbuseIPDB auto-report] Rules: Rule2, Rule4, Rule5. Region: non-CN. Broad path scanning: 60 x 404/403 responses in short window indicating automated scanner; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: , /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input, /phpunit/src/Util/PHP/eval-stdin.php, /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input, /lib/phpunit/Util/PHP/eval-stdin.php, /phpunit/phpunit/Util/PHP/eval-stdin.php, /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input, /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input, /test/vendor/phpunit/phpunit/src/Util/PHP/ev show less	Port Scan Bad Web Bot Web App Attack
🇹🇭 43.164.3.182	7 hours ago	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇳🇱 45.156.87.209	8 hours ago	[AbuseIPDB auto-report] Rules: Rule3. Region: non-CN. Non-standard HTTP methods: PROPFIND. Sample pa ... show more [AbuseIPDB auto-report] Rules: Rule3. Region: non-CN. Non-standard HTTP methods: PROPFIND. Sample paths: /. Statuses: 444. Methods: PROPFIND. UA: - show less	Hacking Web App Attack
🇭🇰 118.26.36.200	10 hours ago	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /ws, /raw, /socket.io/?EIO=4&transport=websocket, /version, /v1, /, /favicon.ico. Statuses: 200, 301, 400, 404. Methods: GET. UA: NTRIP GNSSInternetRadio show less	Bad Web Bot Web App Attack
🇺🇸 20.29.41.126	12 hours ago	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupporte ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: , /. Statuses: 200, 400. Methods: , GET. UA: Mozilla/5.0 zgrab/0.x show less	Hacking Bad Web Bot Web App Attack
🇫🇷 185.177.72.64	12 hours ago	[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed ... show more [AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /swsnl6yx96t18y, /, /.env. Statuses: 200, 404, 444. Methods: GET. UA: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .N show less	Bad Web Bot Web App Attack
🇩🇪 46.101.219.208	13 hours ago	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.git/config. Statuses: 301, 404. Methods: GET. UA: N/A show less	Web App Attack
🇫🇮 147.185.133.249	15 hours ago	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupporte ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: . Statuses: 400. Methods: . UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇳🇱 45.74.28.248	15 hours ago	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 200, 400. Methods: GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Bad Web Bot Web App Attack
🇺🇸 18.116.101.220	15 hours ago	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01 ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01\X01\X00\X01\X00\X00\XFC\X03\X03@\XD4\XE5\X07\X8E\X8F\XBAQ\XDB\XC3\XC8\XDA\XBCJ\X9B\XCF\XEC\XCE\XAA9\XB0\XEE\XB0L5=\XA1C\XB8\X0C\XA1\XE2; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /robots.txt, /, T\xEC\x8C\x9DRS\x1AI\xC1p\xF5\xBAu\|\x9A\xC7^!\xB7\x01\xC46p\x82\x04\xD9\x86. Statuses: 200, 301, 400. Methods: GET, \X16\X03\X01\X01\X00\X01\X00\X00\XFC\X03\X03@\XD4\XE5\X07\X8E\X8F\XBAQ\XDB\XC3\XC8\XDA\XBCJ\X9B\XCF\XEC\XCE\XAA9\XB0\XEE\XB0L5=\XA1C\XB8\X0C\XA1\XE2. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇭🇰 199.45.155.54	16 hours ago	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.well-known/security.txt. Statuses: 404. Methods: GET. UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Web App Attack
🇳🇱 185.213.174.141	16 hours ago	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /cgi-bin/luci/. Statuses: 301, 404. Methods: GET. UA: N/A show less	Web App Attack
🇯🇵 43.167.245.18	17 hours ago	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇸🇬 47.84.122.196	18 hours ago	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /cdn-cgi/trace. Statuses: 400. Methods: GET. UA: python-requests/2.34.2 show less	Bad Web Bot Web App Attack
🇨🇳 14.220.181.151	19 hours ago	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /cdn-cgi/trace. Statuses: 400. Methods: GET. UA: Python/3.9 aiohttp/3.13.2 show less	Bad Web Bot Web App Attack
🇺🇸 20.40.233.107	20 hours ago	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupporte ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: , /. Statuses: 400. Methods: , GET. UA: Mozilla/5.0 zgrab/0.x show less	Hacking Bad Web Bot Web App Attack
🇺🇸 195.184.76.159	20 hours ago	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X03 ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X03\X02`\X01\X00\X02\X5C\X03\X032\X00\XEE\XB1\XBDF(\X89\XFE\|\X06\X9D\XFE\XA6; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: \x91:p\xC1\xA4\xCB\x04\x81b\xEEB\x22\x93/\xB8\xC2\x1F. Statuses: 400. Methods: \X16\X03\X03\X02`\X01\X00\X02\X5C\X03\X032\X00\XEE\XB1\XBDF(\X89\XFE\|\X06\X9D\XFE\XA6. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇺🇸 40.124.186.184	20 hours ago	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application. Statuses: 404. Methods: GET. UA: Mozilla/5.0 zgrab/0.x show less	Web App Attack