AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User PrivateLiu joined AbuseIPDB in June 2026 and has reported 4,393 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 20.98.163.31	29 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 zgrab/0.x show less	Bad Web Bot Web App Attack
🇬🇧 138.68.143.68	29 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 200, 400. Methods: GET. UA: Mozilla/5.0 zgrab/0.x show less	Bad Web Bot Web App Attack
🇳🇱 45.74.28.166	29 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 200, 400. Methods: GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Bad Web Bot Web App Attack
🇳🇱 195.178.110.247	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /google-service-account.json. Statuses: 301, 400. Methods: GET. UA: N/A show less	Bad Web Bot Web App Attack
🇺🇸 43.166.226.186	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇺🇸 66.132.172.200	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /phpinfo.php. Statuses: 404. Methods: GET. UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Web App Attack
🇨🇳 116.10.202.60	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 200, 400. Methods: GET, HEAD. UA: N/A show less	Bad Web Bot Web App Attack
🇷🇴 72.5.43.42	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule6. Region: non-CN. Botnet C2 marker probing: random 4-char paths ... show more [AbuseIPDB auto-report] Rules: Rule6. Region: non-CN. Botnet C2 marker probing: random 4-char paths (/abc8, /abc6, /abc7) matching C2 communication patterns. Sample paths: /abc6, /, /7f13c0a9d8644f3ca0a563b6b56e49d7, /abc7, /api/metrics/run, /abc8. Statuses: 301. Methods: GET. UA: N/A show less	Bad Web Bot Exploited Host
🇺🇸 43.159.152.187	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇨🇳 121.40.46.184	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /, /evox/about, /HNAP1, /nmaplowercheck1793202866, /sdk. Statuses: 301, 400, 404. Methods: GET, POST. UA: N/A show less	Bad Web Bot Web App Attack
🇺🇸 66.132.195.50	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: PRI, \X16\X0 ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: PRI, \X16\X03\X01\X05\XBA\X01\X00\X05\XB6\X03\X03G\XF5\XE1:; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /sitemap.xml, i\xEA!\x7F{`\x9E\x1A\xDCcQ\|\xAF\xCF\xFC\xC0]\xCC\x84f\x93\xC1^t%\x87\xEF, /, *. Statuses: 301, 400. Methods: GET, PRI, \X16\X03\X01\X05\XBA\X01\X00\X05\XB6\X03\X03G\XF5\XE1:. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇨🇳 114.66.2.208	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 301, 400. Methods: GET. UA: N/A show less	Bad Web Bot Web App Attack
🇺🇸 134.122.117.178	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: SSTP_DUPLEX_ ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: SSTP_DUPLEX_POST; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Statuses: 400. Methods: SSTP_DUPLEX_POST. UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇸🇬 43.134.91.35	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇫🇷 62.210.142.172	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule2, Rule5. Region: non-CN. Broad path scanning: 16 x 404/403 respo ... show more [AbuseIPDB auto-report] Rules: Rule2, Rule5. Region: non-CN. Broad path scanning: 16 x 404/403 responses in short window indicating automated scanner; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /login, /admin/index.html, /login.jsp, /manage/account/login, /index.html, /login/, /+CSCOE+/logon.html, /login.html, /, /cgi-bin/login.cgi, /login.htm. Statuses: 200, 301, 404. Methods: GET. UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) show less	Port Scan Web App Attack
🇨🇳 39.100.82.100	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /evox/about, /HNAP1, /, /nmaplowercheck1793175053, /sdk. Statuses: 301, 400, 404. Methods: GET, POST. UA: N/A show less	Bad Web Bot Web App Attack
🇺🇸 207.90.244.17	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.well-known/security.txt, /sitemap.xml, /, /favicon.ico. Statuses: 301. Methods: GET. UA: N/A show less	Web App Attack
🇺🇸 43.130.16.140	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 400. Methods: GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Bad Web Bot Web App Attack
🇨🇭 179.43.150.26	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.env. Statuses: 301, 444. Methods: GET. UA: N/A show less	Web App Attack
🇺🇸 66.132.224.234	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 respo ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: non-CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /robots.txt. Statuses: 200, 400. Methods: GET. UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Bad Web Bot Web App Attack
🇮🇷 89.42.209.26	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /config/database.yml, /.git/config, /config.php, /app/config/parameters.yml, /phpinfo.php, /server-status, /.git/HEAD. Statuses: 301. Methods: GET. UA: N/A show less	Web App Attack
🇨🇳 112.94.252.180	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: CN. Non-standard HTTP methods: ; Unsupported/ma ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: . Statuses: 400. Methods: . UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇩🇪 36.255.97.33	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupporte ... show more [AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: . Statuses: 400. Methods: . UA: N/A show less	Hacking Bad Web Bot Web App Attack
🇨🇳 106.75.37.123	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule2, Rule4, Rule5. Region: CN. Broad path scanning: 38 x 404/403 re ... show more [AbuseIPDB auto-report] Rules: Rule2, Rule4, Rule5. Region: CN. Broad path scanning: 38 x 404/403 responses in short window indicating automated scanner; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: , /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input, /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input, /vendor/phpunit/phpunit/LICENSE/eval-stdin.php, /lib/phpunit/Util/PHP/eval-stdin.php, /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input, /lib/phpunit/phpunit/Util/PHP/eval-stdin.php, /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /vendor/phpunit/Util/PHP/eval-stdin.php, /vendor/phpunit/src/Util/PHP/eval-stdin.php, /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input. Sta show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 199.165.159.65	28 Oct 2026	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.git/config. Statuses: 404. Methods: GET. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.3 show less	Web App Attack