User legionMCCXV joined AbuseIPDB in June 2026 and has reported 7,225 IP addresses.
Standing (weight) is good.
ACTIVE USER
WEBMASTER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 172.202.39.151 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇩🇪 167.94.146.55 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇰🇷 112.219.151.50 |
SSH brute-force / unauthorized login attempts.
|
Brute-Force SSH | |
| 🇸🇬 136.85.99.117 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇺🇸 47.85.220.66 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇺🇸 47.85.220.55 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇭🇰 118.26.39.129 |
SSH brute-force / unauthorized login attempts.
|
Brute-Force SSH | |
| 🇪🇸 68.221.130.146 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇩🇪 47.91.77.140 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇯🇵 164.52.24.185 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇬🇧 77.239.124.102 |
SSH brute-force / unauthorized login attempts.
|
Brute-Force SSH | |
| 🇩🇪 167.94.146.58 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇫🇷 91.231.89.68 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇺🇸 35.227.191.84 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇸🇪 4.223.164.152 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇰🇷 14.46.87.209 |
SSH brute-force / unauthorized login attempts.
|
Brute-Force SSH | |
| 🇻🇳 125.212.235.194 |
SSH brute-force / unauthorized login attempts.
|
Brute-Force SSH | |
| 🇰🇷 101.36.114.124 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇺🇸 20.97.182.130 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇺🇸 66.132.195.73 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇳🇱 91.92.242.7 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇧🇪 34.78.142.29 |
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
|
Bad Web Bot | |
| 🇺🇸 206.189.210.201 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇺🇸 20.163.30.209 |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | |
| 🇺🇸 2602:80d:1007::5c |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking |