AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User PrivateLiu joined AbuseIPDB in June 2026 and has reported 3,632 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇩🇪 206.209.210.3	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.env. Statuses: 301, 444. Methods: GET. UA: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/534.14 (KHTML, like Gecko) Chrome/9.0.60 show less	Web App Attack
🇺🇸 66.132.195.192	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01 ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01\X05\XBA\X01\X00\X05\XB6\X03\X03\XD0\XEC\XB4L\X10, PRI; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /security.txt, /, \xAC\x0E\xB0\xFAV\x02A;\x8D,\xB7\xA9u\x95\x8DW\x0CA\x9D\x15\xA1\xC3\x05\xF3j, . Statuses: 301, 400. Methods: GET, PRI, \X16\X03\X01\X05\XBA\X01\X00\X05\XB6\X03\X03\XD0\XEC\XB4L\X10. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇺🇸 52.180.145.98	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /manager/text/list. Statuses: 301. Methods: GET. UA: N/A show less	Web App Attack
🇩🇪 138.197.185.54	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 200, 400. Methods: GET. UA: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) show less	Bad Web Bot Web App Attack
🇩🇪 209.38.238.197	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /odinhttpcall1791743995, /, /evox/about, /HNAP1, /sdk. Statuses: 200, 400, 404. Methods: GET, POST. UA: N/A show less	Bad Web Bot Web App Attack
🇸🇬 101.47.12.227	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule1, Rule2, Rule5. Region: non-CN. Config/sensitive path probing: a ... show more [AbuseIPDB auto-report] Rules: Rule1, Rule2, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Broad path scanning: 50 x 404/403 responses in short window indicating automated scanner; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /wp-config.php, /info.php, /application.yaml, /.env.staging, /application.properties, /application-prod.yml, /phpinfo.php, /actuator/env, /actuator/configprops/, /.env.local, /.env.dev, /actuator/configprops. Statuses: 200, 404, 444. Methods: GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Sa show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 66.132.172.214	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01 ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: \X16\X03\X01\X05\XBA\X01\X00\X05\XB6\X03\X03\X8B%\XDF\X95U\XE2\X8F\X90(\XE9!\X141P\XBB@\X9C>D\XEEW\XAE\XF5.\XAD\XAD\X8B\XFE0@\XF7\X1C, PRI; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: \x11\xB0\x5C\xE6\xFC\xB5]\xBD9\x8A\xFB\xEF\xE0\xA8, /, *. Statuses: 301, 400. Methods: GET, PRI, \X16\X03\X01\X05\XBA\X01\X00\X05\XB6\X03\X03\X8B%\XDF\X95U\XE2\X8F\X90(\XE9!\X141P\XBB@\X9C>D\XEEW\XAE\XF5.\XAD\XAD\X8B\XFE0@\XF7\X1C. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇮🇩 103.158.121.21	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4, Rule5. Region: non-CN. Unsupported/malformed requests: HTTP 40 ... show more [AbuseIPDB auto-report] Rules: Rule4, Rule5. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /admin/config.php. Statuses: 301, 400. Methods: GET. UA: xfa1 show less	Bad Web Bot Web App Attack
🇨🇳 139.224.0.39	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /start/index.html, /pscc/. Statuses: 301, 400, 404. Methods: HEAD. UA: N/A show less	Bad Web Bot Web App Attack
🇺🇸 216.180.246.51	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: N/A show less	Bad Web Bot Web App Attack
🇨🇳 124.239.152.79	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 200, 400. Methods: GET. UA: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) show less	Bad Web Bot Web App Attack
🇰🇿 185.4.180.177	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /phpMyAdmin/index.php?lang=en, /sql/phpMyAdmin/index.php?lang=en, /phpMyAdmin-4/index.php?lang=en, /sql/sql/index.php?lang=en, /phpMyAdmin-5.1.3/index.php?lang=en, /phpmy-admin/index.php?lang=en, /phpMyAdmin4/index.php?lang=en, /phpmyAdmin/index.php?lang=en, /administrator/web/index.php?lang=en, /sql/phpMyAdmin2/index.php?lang=en, /database/index.php?lang=en, /mysql/pMA/index.php?lang=en. Statuses: 301. Methods: GET. UA: N/A show less	Web App Attack
🇺🇸 43.166.244.192	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇺🇸 9.234.18.247	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 zgrab/0.x show less	Bad Web Bot Web App Attack
🇳🇱 45.153.34.39	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed ... show more [AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.env, /14189dfd18e2828b27ff88c5529669a4, /api/.env, /bb0947845c4765a8e98aaf180fbb149e, /config.php, /.env.example, /backend/.env. Statuses: 301, 404, 444. Methods: GET. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇸🇬 47.237.72.189	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /grpc.reflection.v1alpha.ServerReflection/ServerReflectionInfo. Statuses: 499. Methods: POST. UA: grpcurl/dev-build (no version set) grpc-go/1.48.0 show less	Web App Attack
🇳🇱 45.74.28.224	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 200, 400. Methods: GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Bad Web Bot Web App Attack
🇺🇸 20.84.43.77	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupporte ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: . Statuses: 400. Methods: . UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇺🇸 20.106.52.98	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /autodiscover/autodiscover.json?@zdi/Powershell. Statuses: 404. Methods: GET. UA: Mozilla/5.0 zgrab/0.x show less	Web App Attack
🇧🇪 34.76.206.29	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: RHFW; Unsupp ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: RHFW; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /, /favicon.ico. Statuses: 200, 301, 400, 403. Methods: GET, OPTIONS, POST, RHFW. UA: Mozilla/5.0 (compatible) show less	Hacking Bad Web Bot Web App Attack
🇭🇰 43.154.140.188	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇺🇸 20.46.236.118	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /actuator/health. Statuses: 404. Methods: GET. UA: Mozilla/5.0 zgrab/0.x show less	Web App Attack
🇧🇪 34.79.12.168	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3. Region: non-CN. Non-standard HTTP methods: GQVA. Sample paths: ... show more [AbuseIPDB auto-report] Rules: Rule3. Region: non-CN. Non-standard HTTP methods: GQVA. Sample paths: /favicon.ico, /. Statuses: 301. Methods: GET, GQVA, HEAD, OPTIONS, POST. UA: N/A show less	Hacking Web App Attack
🇺🇸 20.98.139.69	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /manager/html. Statuses: 301. Methods: GET. UA: N/A show less	Web App Attack
🇺🇸 66.132.195.123	11 Oct 2026	[AbuseIPDB auto-report] Rules: Rule6. Region: non-CN. Botnet C2 marker probing: random 4-char paths ... show more [AbuseIPDB auto-report] Rules: Rule6. Region: non-CN. Botnet C2 marker probing: random 4-char paths (/wiki, /wiki) matching C2 communication patterns. Sample paths: /favicon.ico, /, /wiki. Statuses: 200, 301, 404. Methods: GET. UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Bad Web Bot Exploited Host