AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Daniel Baer joined AbuseIPDB in June 2026 and has reported 3,886 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 40.124.123.151	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 7219 events: 1 created_ ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 7219 events: 1 created_at: 2026-09-14T22:04:43Z message: Ip 40.124.123.151 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-09-14 22:04:43.574268179 +0000 UTC target_uri: ["/developmentserver/metadatauploader"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 zgrab/0.x"] show less	Bad Web Bot Web App Attack
🇰🇷 220.127.148.6	14 Sep 2026	2026-09-14T23:27:48.301436+02:00 irc.chewbakka.ch sshd[1632464]: Invalid user user from 220.127.148. ... show more 2026-09-14T23:27:48.301436+02:00 irc.chewbakka.ch sshd[1632464]: Invalid user user from 220.127.148.6 port 58238 2026-09-14T23:35:49.231430+02:00 irc.chewbakka.ch sshd[1634404]: Invalid user testftp from 220.127.148.6 port 60838 ... show less	Brute-Force SSH
🇺🇸 34.186.7.209	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7210 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7210 events: 11 created_at: 2026-09-14T20:11:23Z message: Ip 34.186.7.209 performed 'crowdsecurity/http-probing' (11 events over 1.887118252s) at 2026-09-14 20:11:23.313942751 +0000 UTC target_uri: ["/.git/config","/.env","/.env.local","/.env.production","/.env.staging","/.env.development","/.env.test","/.env.remote","/.env.bak","/.env.backup","/.env.save"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇪🇪 95.85.245.227	14 Sep 2026	2026-09-14T20:47:03.713507+02:00 irc.chewbakka.ch sshd[1596002]: Invalid user admin from 95.85.245.2 ... show more 2026-09-14T20:47:03.713507+02:00 irc.chewbakka.ch sshd[1596002]: Invalid user admin from 95.85.245.227 port 59148 2026-09-14T20:53:07.694146+02:00 irc.chewbakka.ch sshd[1597253]: Invalid user user from 95.85.245.227 port 56002 ... show less	Brute-Force SSH
🇺🇸 38.148.20.75	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-42013 alert_id: 7202 events: 1 creat ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-42013 alert_id: 7202 events: 1 created_at: 2026-09-14T17:34:12Z message: Ip 38.148.20.75 performed 'crowdsecurity/http-cve-2021-42013' (1 events over 0s) at 2026-09-14 17:34:10.86953381 +0000 UTC target_uri: ["/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] method: ["POST"] status: ["400"] user_agent: ["libredtail-http"] show less	Bad Web Bot Web App Attack
🇲🇾 202.165.22.102	14 Sep 2026	2026-09-14T19:32:55.078743+02:00 irc.chewbakka.ch sshd[1578972]: Invalid user droidbot from 202.165. ... show more 2026-09-14T19:32:55.078743+02:00 irc.chewbakka.ch sshd[1578972]: Invalid user droidbot from 202.165.22.102 port 50662 2026-09-14T19:34:06.364879+02:00 irc.chewbakka.ch sshd[1579515]: Invalid user app from 202.165.22.102 port 36418 ... show less	Brute-Force SSH
🇧🇬 80.72.71.113	14 Sep 2026	2026-09-14T18:33:01.016288+02:00 irc.chewbakka.ch sshd[1564810]: Invalid user ubuntu from 80.72.71.1 ... show more 2026-09-14T18:33:01.016288+02:00 irc.chewbakka.ch sshd[1564810]: Invalid user ubuntu from 80.72.71.113 port 3226 2026-09-14T18:52:48.461195+02:00 irc.chewbakka.ch sshd[1569416]: Invalid user temp from 80.72.71.113 port 8732 ... show less	Brute-Force SSH
🇻🇳 45.117.177.47	14 Sep 2026	2026-09-14T18:46:29.145476+02:00 irc.chewbakka.ch sshd[1568085]: Invalid user nifi from 45.117.177.4 ... show more 2026-09-14T18:46:29.145476+02:00 irc.chewbakka.ch sshd[1568085]: Invalid user nifi from 45.117.177.47 port 51010 2026-09-14T18:48:52.407445+02:00 irc.chewbakka.ch sshd[1568801]: Invalid user test from 45.117.177.47 port 35482 ... show less	Brute-Force SSH
🇶🇦 34.18.128.217	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7198 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7198 events: 11 created_at: 2026-09-14T16:27:53Z message: Ip 34.18.128.217 performed 'crowdsecurity/http-probing' (11 events over 1.430633149s) at 2026-09-14 16:27:53.528229978 +0000 UTC target_uri: ["/.git/config","/.env","/.env.local","/.env.production","/.env.staging","/.env.development","/.env.test","/.env.remote","/.env.bak","/.env.backup","/.env.save"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇳🇱 167.99.220.207	14 Sep 2026	2026-09-14T18:22:44.102200+02:00 irc.chewbakka.ch sshd[1562430]: Invalid user safestake from 167.99. ... show more 2026-09-14T18:22:44.102200+02:00 irc.chewbakka.ch sshd[1562430]: Invalid user safestake from 167.99.220.207 port 57314 2026-09-14T18:25:25.339504+02:00 irc.chewbakka.ch sshd[1563225]: Invalid user rocketpool from 167.99.220.207 port 49910 ... show less	Brute-Force SSH
🇳🇱 159.223.228.49	14 Sep 2026	2026-09-14T18:21:35.560370+02:00 irc.chewbakka.ch sshd[1562260]: Invalid user banana from 159.223.22 ... show more 2026-09-14T18:21:35.560370+02:00 irc.chewbakka.ch sshd[1562260]: Invalid user banana from 159.223.228.49 port 46402 2026-09-14T18:24:03.008564+02:00 irc.chewbakka.ch sshd[1562970]: Invalid user apple from 159.223.228.49 port 55062 ... show less	Brute-Force SSH
🇻🇳 103.75.183.43	14 Sep 2026	2026-09-14T16:51:11.749339+02:00 irc.chewbakka.ch sshd[1303138]: Invalid user lu from 103.75.183.43 ... show more 2026-09-14T16:51:11.749339+02:00 irc.chewbakka.ch sshd[1303138]: Invalid user lu from 103.75.183.43 port 44716 2026-09-14T16:54:00.920924+02:00 irc.chewbakka.ch sshd[1303927]: Invalid user dev from 103.75.183.43 port 44892 ... show less	Brute-Force SSH
🇸🇬 140.245.102.28	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7179 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7179 events: 11 created_at: 2026-09-14T10:09:18Z message: Ip 140.245.102.28 performed 'crowdsecurity/http-probing' (11 events over 1.952116261s) at 2026-09-14 10:09:18.490282707 +0000 UTC target_uri: ["/.env.bak","/.env","/.env.production","/config.json","/.env.production.local","/.env.local","/config.php.bak","/config.yml","/config.yaml","/phpinfo.php","/.git/config"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇸🇬 134.185.95.195	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-sensitive-files alert_id: 7180 events: 5 crea ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-sensitive-files alert_id: 7180 events: 5 created_at: 2026-09-14T10:09:30Z message: Ip 134.185.95.195 performed 'crowdsecurity/http-sensitive-files' (5 events over 878.743541ms) at 2026-09-14 10:09:30.730214365 +0000 UTC target_uri: ["/.env.bak","/.env","/.env.local","/.env.production.local","/config.php.bak"] method: ["GET"] status: ["301","404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇻🇳 163.227.161.160	14 Sep 2026	2026-09-14T10:12:12.131863+02:00 irc.chewbakka.ch sshd[1056273]: Invalid user damian from 163.227.16 ... show more 2026-09-14T10:12:12.131863+02:00 irc.chewbakka.ch sshd[1056273]: Invalid user damian from 163.227.161.160 port 35646 2026-09-14T10:14:58.350660+02:00 irc.chewbakka.ch sshd[1057013]: Invalid user traefik from 163.227.161.160 port 60088 ... show less	Brute-Force SSH
🇺🇸 8.235.48.216	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7159 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7159 events: 11 created_at: 2026-09-14T01:52:12Z message: Ip 8.235.48.216 performed 'crowdsecurity/http-probing' (11 events over 3.16670197s) at 2026-09-14 01:52:12.390026657 +0000 UTC target_uri: ["/","/.git/config","/.env","/.env.local","/.env.production","/.env.staging","/.env.development","/.env.test","/.env.remote","/.env.bak","/.env.backup"] method: ["POST","GET"] status: ["403","404"] user_agent: ["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇺🇸 40.124.114.240	14 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 7154 events: 1 created_ ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 7154 events: 1 created_at: 2026-09-14T00:50:24Z message: Ip 40.124.114.240 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-09-14 00:50:24.600295128 +0000 UTC target_uri: ["/developmentserver/metadatauploader"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 zgrab/0.x"] show less	Bad Web Bot Web App Attack
🇭🇰 118.193.39.103	13 Sep 2026	2026-09-14T01:27:18.428463+02:00 irc.chewbakka.ch sshd[818284]: Invalid user media from 118.193.39.1 ... show more 2026-09-14T01:27:18.428463+02:00 irc.chewbakka.ch sshd[818284]: Invalid user media from 118.193.39.103 port 51208 2026-09-14T01:33:08.919842+02:00 irc.chewbakka.ch sshd[819636]: Invalid user hieu from 118.193.39.103 port 33788 ... show less	Brute-Force SSH
🇵🇪 38.250.184.17	13 Sep 2026	2026-09-14T01:29:48.987918+02:00 irc.chewbakka.ch sshd[818748]: Invalid user mcserver from 38.250.18 ... show more 2026-09-14T01:29:48.987918+02:00 irc.chewbakka.ch sshd[818748]: Invalid user mcserver from 38.250.184.17 port 43834 2026-09-14T01:32:25.514159+02:00 irc.chewbakka.ch sshd[819474]: Invalid user temp_user from 38.250.184.17 port 59703 ... show less	Brute-Force SSH
🇮🇩 103.46.186.148	13 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-41773 alert_id: 7145 events: 1 creat ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-41773 alert_id: 7145 events: 1 created_at: 2026-09-13T22:11:20Z message: Ip 103.46.186.148 performed 'crowdsecurity/http-cve-2021-41773' (1 events over 0s) at 2026-09-13 22:11:20.524925098 +0000 UTC target_uri: ["/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] method: ["POST"] status: ["400"] user_agent: ["libredtail-http"] show less	Bad Web Bot Web App Attack
🇺🇸 85.239.151.82	13 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7141 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 7141 events: 11 created_at: 2026-09-13T21:13:20Z message: Ip 85.239.151.82 performed 'crowdsecurity/http-probing' (11 events over 3.988814347s) at 2026-09-13 21:13:20.497388744 +0000 UTC target_uri: ["/css../.git/config","/content../.git/config","/img../.git/config","/static../.git/config","/events../.git/config","/.git/index","/lib../.git/config","/assets../.git/config","/js../.git/config","/images../.git/config","/media../.git/config"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇷🇺 91.195.100.156	13 Sep 2026	2026-09-13T21:53:22.131390+02:00 irc.chewbakka.ch sshd[752754]: Invalid user yuval from 91.195.100.1 ... show more 2026-09-13T21:53:22.131390+02:00 irc.chewbakka.ch sshd[752754]: Invalid user yuval from 91.195.100.156 port 35714 2026-09-13T21:58:31.140381+02:00 irc.chewbakka.ch sshd[753894]: Invalid user jj from 91.195.100.156 port 49006 ... show less	Brute-Force SSH
🇮🇳 20.192.31.50	13 Sep 2026	2026-09-13T21:40:28.238043+02:00 irc.chewbakka.ch sshd[749706]: Invalid user costel from 20.192.31.5 ... show more 2026-09-13T21:40:28.238043+02:00 irc.chewbakka.ch sshd[749706]: Invalid user costel from 20.192.31.50 port 44928 2026-09-13T21:48:50.437350+02:00 irc.chewbakka.ch sshd[751686]: Invalid user ftpuser from 20.192.31.50 port 44698 ... show less	Brute-Force SSH
🇺🇸 64.225.30.2	13 Sep 2026	2026-09-13T21:43:59.441520+02:00 irc.chewbakka.ch sshd[750579]: Invalid user alexis from 64.225.30.2 ... show more 2026-09-13T21:43:59.441520+02:00 irc.chewbakka.ch sshd[750579]: Invalid user alexis from 64.225.30.2 port 41938 2026-09-13T21:44:57.099885+02:00 irc.chewbakka.ch sshd[750723]: Invalid user tests from 64.225.30.2 port 38308 ... show less	Brute-Force SSH
🇪🇪 95.85.245.227	13 Sep 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-42013 alert_id: 7127 events: 1 creat ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-42013 alert_id: 7127 events: 1 created_at: 2026-09-13T17:16:26Z message: Ip 95.85.245.227 performed 'crowdsecurity/http-cve-2021-42013' (1 events over 0s) at 2026-09-13 17:16:26.038749687 +0000 UTC target_uri: ["/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] method: ["POST"] status: ["400"] user_agent: ["libredtail-http"] show less	Bad Web Bot Web App Attack