AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User k12academics , the webmaster of k12academics.com, joined AbuseIPDB in June 2026 and has reported 11 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 217.216.173.15	6 hours ago	AndroxGh0st Laravel .env secrets-scanning exploit attempt, blocked by ModSec WAF.	Web App Attack Hacking
🇧🇪 34.22.146.232	19 hours ago	Credential-harvesting scan: WordPress, AWS .aws/credentials, and AI-CLI config probes, all blocked b ... show more Credential-harvesting scan: WordPress, AWS .aws/credentials, and AI-CLI config probes, all blocked by ModSec WAF. show less	Web App Attack Hacking
🇺🇸 143.198.100.230	07 Nov 2026	Node.js/Next.js RCE (prototype pollution CVE-2025-55182) + child_process shell-injection attempts, b ... show more Node.js/Next.js RCE (prototype pollution CVE-2025-55182) + child_process shell-injection attempts, blocked by ModSec WAF. show less	Web App Attack Hacking
🇪🇬 45.244.64.148	04 Nov 2026	SSH brute-force (invalid users user/admin/user2, ~10 rapid attempts); all rejected at preauth.	SSH Brute-Force
🇩🇪 31.70.107.46	04 Nov 2026	SMTP brute-force on mail server (dovecot auth failures, set_id=office, port 25); locked repeatedly b ... show more SMTP brute-force on mail server (dovecot auth failures, set_id=office, port 25); locked repeatedly by Imunify RBL + Active Response. show less	Brute-Force Email Spam
🇶🇦 34.18.212.130	02 Nov 2026	React/Next.js prototype-pollution RCE exploit attempt (CVE-2025-55182) with child_process payload, b ... show more React/Next.js prototype-pollution RCE exploit attempt (CVE-2025-55182) with child_process payload, blocked by Imunify WAF (modsec rule 77093094). show less	Hacking Web App Attack
🇫🇷 169.58.84.111	01 Nov 2026	AndroxGh0st botnet scanning for exposed Laravel .env secrets, blocked by Imunify WAF (modsec rule 77 ... show more AndroxGh0st botnet scanning for exposed Laravel .env secrets, blocked by Imunify WAF (modsec rule 77317941). Hit server by raw IP, indiscriminate scan. show less	Hacking Web App Attack
🇺🇸 5.161.254.162	01 Nov 2026	Web-app RCE exploit attempts (React/Next.js prototype-pollution CVE-2025-55182) with child_process r ... show more Web-app RCE exploit attempts (React/Next.js prototype-pollution CVE-2025-55182) with child_process recon payloads across multiple subdomains, all blocked by Imunify WAF (modsec rules 77093094 / 77108377). show less	Hacking Web App Attack
🇺🇸 178.156.240.101	01 Nov 2026	Web-app RCE exploit attempts (React/Next.js prototype-pollution CVE-2025-55182) with child_process r ... show more Web-app RCE exploit attempts (React/Next.js prototype-pollution CVE-2025-55182) with child_process recon payloads across multiple subdomains, all blocked by Imunify WAF (modsec rules 77093094 / 77108377). show less	Hacking Web App Attack
🇭🇰 103.210.239.194	31 Oct 2026	SSH brute-force: 15+ rapid invalid-user attempts (admin, ubuntu, debian, user) on port 22, flagged b ... show more SSH brute-force: 15+ rapid invalid-user attempts (admin, ubuntu, debian, user) on port 22, flagged by OSSEC rule 11325 and auto-blocked by Imunify. Key-only SSH, all attempts failed. show less	Brute-Force SSH
🇮🇳 172.198.139.35	30 Oct 2026	cPHulk one-day block on k12 server. confirmed credential-stuffing attacker - manual test	Brute-Force Web App Attack