AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Greg joined AbuseIPDB in September 2019 and has reported 471 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇨🇳 81.68.141.198	23 Apr 2021	81.68.141.198 - - \[24/Apr/2021:06:43:16 +0600\] "GET /admin/db/index.php\?lang=en HTTP/1.1" 301 184 ... show more 81.68.141.198 - - \[24/Apr/2021:06:43:16 +0600\] "GET /admin/db/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"81.68.141.198 - - \[24/Apr/2021:06:43:16 +0600\] "GET /admin/web/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"81.68.141.198 - - \[24/Apr/2021:06:43:17 +0600\] "GET /administrator/pma/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"81.68.141.198 - - \[24/Apr/2021:06:43:17 +0600\] "GET /phpmyAdmin/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"81.68.141.198 - - \[24/Apr/2021:06:43:18 +0600\] "GET /sql/sql/index.php\?la ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.77.247	20 Apr 2021	95.56.77.247 - - \[20/Apr/2021:20:07:56 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1 ... show more 95.56.77.247 - - \[20/Apr/2021:20:07:56 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.128 Safari/537.36"95.56.77.247 - - \[20/Apr/2021:20:07:57 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.128 Safari/537.36"95.56.77.247 - - \[20/Apr/2021:20:07:57 +0600\] "GET /themes/default/css.php\?login=default HTTP/1.1" 200 34112 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.128 Safari/537.36"95.56.77.247 - - \[20/Apr/2021:20:07:57 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=1618915 ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.152.250	20 Apr 2021	95.56.152.250 - - \[20/Apr/2021:16:40:38 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/ ... show more 95.56.152.250 - - \[20/Apr/2021:16:40:38 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.128 Safari/537.36"95.56.152.250 - - \[20/Apr/2021:16:40:38 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.128 Safari/537.36"95.56.152.250 - - \[20/Apr/2021:16:40:38 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.128 Safari/537.36"95.56.152.250 - - \[20/Apr/2021:16:40:38 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fca ... show less	Hacking Brute-Force Web App Attack SSH
🇹🇼 211.23.45.31	15 Apr 2021	211.23.45.31 - - \[16/Apr/2021:05:01:25 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 ... show more 211.23.45.31 - - \[16/Apr/2021:05:01:25 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"211.23.45.31 - - \[16/Apr/2021:05:01:26 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"211.23.45.31 - - \[16/Apr/2021:05:01:27 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"211.23.45.31 - - \[16/Apr/2021:05:01:27 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"211.23.45.31 - - \[16/Apr/2021:05:01:27 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51. ... show less	Hacking Brute-Force Web App Attack SSH
🇭🇷 46.229.250.89	15 Apr 2021	46.229.250.89 - - \[15/Apr/2021:23:15:07 +0600\] "GET /pma2020/index.php\?lang=en HTTP/1.1" 301 184 ... show more 46.229.250.89 - - \[15/Apr/2021:23:15:07 +0600\] "GET /pma2020/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"46.229.250.89 - - \[15/Apr/2021:23:15:07 +0600\] "GET /phpMyAdmin2/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"46.229.250.89 - - \[15/Apr/2021:23:15:07 +0600\] "GET /PMA2016/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"46.229.250.89 - - \[15/Apr/2021:23:15:08 +0600\] "GET /db/phpMyAdmin-3/index.php\?lang=en HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"46.229.250.89 - - \[15/Apr/2021:23:15:08 +0600\] "GET /pma2014/index.php\?lang=e ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 176.64.16.69	15 Apr 2021	176.64.16.69 - - \[15/Apr/2021:11:19:11 +0600\] "GET / HTTP/1.1" 200 2987 "-" "Mozilla/5.0 \(Windows ... show more 176.64.16.69 - - \[15/Apr/2021:11:19:11 +0600\] "GET / HTTP/1.1" 200 2987 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.86 YaBrowser/21.3.1.91 Yowser/2.5 Safari/537.36"176.64.16.69 - - \[15/Apr/2021:11:19:11 +0600\] "GET / HTTP/1.1" 200 2987 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.86 YaBrowser/21.3.1.91 Yowser/2.5 Safari/537.36"176.64.16.69 - - \[15/Apr/2021:11:19:11 +0600\] "GET /resources/bootstrap/css/bootstrap.min.css HTTP/1.1" 200 121260 "https://office.dtx.kz/" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.86 YaBrowser/21.3.1.91 Yowser/2.5 Safari/537.36"176.64.16.69 - - \[15/Apr/2021:11:19:11 +0600\] "GET /resources/bootstrap/css/bootstrap-datetimepicker.min.css HTTP/1.1" 200 7771 "https://office.dtx.kz/" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.152.53	02 Apr 2021	95.56.152.53 - - \[02/Apr/2021:16:38:07 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1 ... show more 95.56.152.53 - - \[02/Apr/2021:16:38:07 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.152.53 - - \[02/Apr/2021:16:38:08 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.152.53 - - \[02/Apr/2021:16:38:08 +0600\] "GET /themes/default/css.php\?login=default HTTP/1.1" 200 34112 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.152.53 - - \[02/Apr/2021:16:38:08 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=1617344328 ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.154.212	01 Apr 2021	95.56.154.212 - - \[02/Apr/2021:06:08:45 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/ ... show more 95.56.154.212 - - \[02/Apr/2021:06:08:45 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.154.212 - - \[02/Apr/2021:06:08:48 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.154.212 - - \[02/Apr/2021:06:08:49 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=1617313234280 HTTP/1.1" 200 282766 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.154.212 - - \[02/Apr/2021:06:08:49 +0600\] "GET /resources/jquery/jquery.autos ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.154.54	31 Mar 2021	95.56.154.54 - - \[31/Mar/2021:14:23:43 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1 ... show more 95.56.154.54 - - \[31/Mar/2021:14:23:43 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.154.54 - - \[31/Mar/2021:14:23:44 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.154.54 - - \[31/Mar/2021:14:23:44 +0600\] "GET /themes/default/css.php\?login=default HTTP/1.1" 200 34089 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.154.54 - - \[31/Mar/2021:14:23:44 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=1617138512 ... show less	Hacking Brute-Force Web App Attack SSH
🇨🇳 218.9.54.244	30 Mar 2021	218.9.54.244 - - \[30/Mar/2021:12:33:09 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows ... show more 218.9.54.244 - - \[30/Mar/2021:12:33:09 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\; rv:59.0\) Gecko/20100101 Firefox/59.0"218.9.54.244 - - \[30/Mar/2021:12:33:09 +0600\] "GET /robots.txt HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\; rv:59.0\) Gecko/20100101 Firefox/59.0"218.9.54.244 - - \[30/Mar/2021:12:33:09 +0600\] "POST /Admin8299ab5d/Login.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\; rv:59.0\) Gecko/20100101 Firefox/59.0"218.9.54.244 - - \[30/Mar/2021:12:33:10 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 6.1\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/49.0.2623.105 Safari/537.36"218.9.54.244 - - \[30/Mar/2021:12:33:10 +0600\] "GET /l.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 6.1\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/49.0.2623.105 Safari/537.36"218.9.54.244 - - \[30/Mar/2021:12:33:10 +0600\] "GET /phpinfo.php HTTP/1.1" 301 184 "-" "Moz ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 23.146.241.151	27 Mar 2021	23.146.241.151 - - \[27/Mar/2021:19:38:10 +0600\] "GET /admin/images/graph.php HTTP/1.1" 404 27 "-" ... show more 23.146.241.151 - - \[27/Mar/2021:19:38:10 +0600\] "GET /admin/images/graph.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 6.0\; en-US\) AppleWebKit/533.1 \(KHTML, like Gecko\) Maxthon/3.0.8.2 Safari/533.1"23.146.241.151 - - \[27/Mar/2021:19:38:10 +0600\] "GET /lang/config.Bll.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 5.1\; pl\; rv:1.9.2.3\) Gecko/20100401 Lightningquail/3.6.3"23.146.241.151 - - \[27/Mar/2021:19:38:10 +0600\] "GET /vtigercrm/emo.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows NT 10.0\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/40.0.2214.93 Safari/537.36"23.146.241.151 - - \[27/Mar/2021:19:38:10 +0600\] "GET /vtigercrm/storage/vtiger.txt HTTP/1.1" 404 570 "-" "Mozilla/5.0 \(Windows NT 10.0\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/40.0.2214.93 Safari/537.36"23.146.241.151 - - \[27/Mar/2021:19:38:10 +0600\] "GET /configs.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 6.0\; en-US\) AppleWebKit/533.1 \ ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 23.146.241.151	26 Mar 2021	23.146.241.151 - - \[27/Mar/2021:00:48:40 +0600\] "GET //vtigercrm/Bedo.php HTTP/1.1" 404 27 "-" "Mo ... show more 23.146.241.151 - - \[27/Mar/2021:00:48:40 +0600\] "GET //vtigercrm/Bedo.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows NT 10.0\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/40.0.2214.93 Safari/537.36"23.146.241.151 - - \[27/Mar/2021:00:48:40 +0600\] "GET //vtigercrm/graph.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 5.1\; pl\; rv:1.9.2.3\) Gecko/20100401 Lightningquail/3.6.3"23.146.241.151 - - \[27/Mar/2021:00:48:41 +0600\] "GET //vtigercrm/phpversions.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 5.1\; pl\; rv:1.9.2.3\) Gecko/20100401 Lightningquail/3.6.3"23.146.241.151 - - \[27/Mar/2021:00:48:41 +0600\] "GET //vtigercrm/alex.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(compatible\; MSIE 8.0\; Windows NT 6.1\; Trident/4.0\; GTB7.4\; InfoPath.2\; SV1\; .NET CLR 3.3.69573\; WOW64\; en-US\)"23.146.241.151 - - \[27/Mar/2021:00:48:43 +0600\] "GET //vtigercrm/emo.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 6.0\; en-US\) AppleWebKit ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.153.141	26 Mar 2021	95.56.153.141 - - \[26/Mar/2021:23:44:08 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/ ... show more 95.56.153.141 - - \[26/Mar/2021:23:44:08 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.153.141 - - \[26/Mar/2021:23:44:08 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.153.141 - - \[26/Mar/2021:23:44:08 +0600\] "GET /themes/default/css.php\?login=default HTTP/1.1" 200 34112 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.153.141 - - \[26/Mar/2021:23:44:08 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=161677 ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 172.104.196.97	21 Mar 2021	172.104.196.97 - - \[21/Mar/2021:10:05:07 +0600\] "GET /api/v1/swagger.json HTTP/1.1" 404 47 "-" "Mo ... show more 172.104.196.97 - - \[21/Mar/2021:10:05:07 +0600\] "GET /api/v1/swagger.json HTTP/1.1" 404 47 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:08 +0600\] "GET /api/v2/swagger.json HTTP/1.1" 404 47 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:09 +0600\] "GET /swagger/v1/swagger.json HTTP/1.1" 404 142 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:09 +0600\] "GET /swagger/api-docs HTTP/1.1" 404 142 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:10 +0600\] "GET /v2/api-docs HTTP/1.1" 404 142 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:11 +0600\] "GET /swagger.yaml HTTP/1.1" 404 142 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:12 +0600\] "GET /api/swagger.json HTTP/1.1" 404 47 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:14 +0600\] "GET /api/docs HTTP/1.1" 404 47 "-" "Mozilla/5.0 zgrab/0.x"172.104.196.97 - - \[21/Mar/2021:10:05:15 +0600\] "GET /static/a ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.78.69	18 Mar 2021	95.56.78.69 - - \[18/Mar/2021:22:03:14 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1. ... show more 95.56.78.69 - - \[18/Mar/2021:22:03:14 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.78.69 - - \[18/Mar/2021:22:03:15 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.78.69 - - \[18/Mar/2021:22:03:15 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=1616041712692 HTTP/1.1" 200 282766 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.90 Safari/537.36"95.56.78.69 - - \[18/Mar/2021:22:03:15 +0600\] "GET /resources/jquery/jquery.autosize.inpu ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.76.130	15 Mar 2021	95.56.76.130 - - \[15/Mar/2021:21:56:49 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1 ... show more 95.56.76.130 - - \[15/Mar/2021:21:56:49 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.82 Safari/537.36"95.56.76.130 - - \[15/Mar/2021:21:56:49 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.82 Safari/537.36"95.56.76.130 - - \[15/Mar/2021:21:56:53 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=1615818156005 HTTP/1.1" 200 282766 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.82 Safari/537.36"95.56.76.130 - - \[15/Mar/2021:21:56:53 +0600\] "GET /resources/jquery/jquery.autosize. ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 82.200.219.54	14 Mar 2021	82.200.219.54 - - \[14/Mar/2021:13:50:24 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/ ... show more 82.200.219.54 - - \[14/Mar/2021:13:50:24 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.82 Safari/537.36"82.200.219.54 - - \[14/Mar/2021:13:50:24 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.82 Safari/537.36"82.200.219.54 - - \[14/Mar/2021:13:50:24 +0600\] "GET /themes/default/css.php\?login=default HTTP/1.1" 200 34112 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/89.0.4389.82 Safari/537.36"82.200.219.54 - - \[14/Mar/2021:13:50:25 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=161569 ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.57.128.28	11 Mar 2021	95.57.128.28 - - \[11/Mar/2021:21:00:15 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1 ... show more 95.57.128.28 - - \[11/Mar/2021:21:00:15 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 200 1409 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/88.0.4324.190 Safari/537.36"95.57.128.28 - - \[11/Mar/2021:21:00:15 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 200 1409 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/88.0.4324.190 Safari/537.36"95.57.128.28 - - \[11/Mar/2021:21:00:15 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 200 1409 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/88.0.4324.190 Safari/537.36"95.57.128.28 - - \[11/Mar/2021:21:00:16 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 200 1409 "http ... show less	Hacking Brute-Force Web App Attack SSH
🇳🇱 37.49.230.217	11 Mar 2021	37.49.230.217 - - \[11/Mar/2021:21:00:50 +0600\] "GET /p1KaLmIg2kB7fZp5 HTTP/1.1" 404 200 "-" "Mozil ... show more 37.49.230.217 - - \[11/Mar/2021:21:00:50 +0600\] "GET /p1KaLmIg2kB7fZp5 HTTP/1.1" 404 200 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/83.0.4103.61 Safari/537.36"37.49.230.217 - - \[11/Mar/2021:21:00:50 +0600\] "GET /K31aPGJK HTTP/1.1" 404 200 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/83.0.4103.61 Safari/537.36"37.49.230.217 - - \[11/Mar/2021:21:00:50 +0600\] "GET /.well-known/openid-configuration HTTP/1.1" 404 200 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/83.0.4103.61 Safari/537.36"37.49.230.217 - - \[11/Mar/2021:21:00:51 +0600\] "POST /graphql HTTP/1.1" 404 200 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/83.0.4103.61 Safari/537.36"37.49.230.217 - - \[11/Mar/2021:21:00:51 +0600\] "GET /bal HTTP/1.1" 404 200 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWeb ... show less	Hacking Brute-Force Web App Attack SSH
🇨🇳 171.14.149.111	05 Mar 2021	171.14.149.111 - - \[05/Mar/2021:12:20:57 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5 ... show more 171.14.149.111 - - \[05/Mar/2021:12:20:57 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"171.14.149.111 - - \[05/Mar/2021:12:20:58 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"171.14.149.111 - - \[05/Mar/2021:12:20:58 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"171.14.149.111 - - \[05/Mar/2021:12:20:58 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/51.0.2704.103 Safari/537.36"171.14.149.111 - - \[05/Mar/2021:12:20:58 +0600\] "GET /phpmyadmin/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) ... show less	Hacking Brute-Force Web App Attack SSH
🇵🇸 188.225.253.200	02 Mar 2021	188.225.253.200 - - \[03/Mar/2021:00:28:07 +0600\] "GET /phpMyAdmin-2.6.0-alpha2/ HTTP/1.1" 404 142 ... show more 188.225.253.200 - - \[03/Mar/2021:00:28:07 +0600\] "GET /phpMyAdmin-2.6.0-alpha2/ HTTP/1.1" 404 142 "https://93.171.153.130/" "Mozilla/5.0 \(Windows NT 5.1\; rv:9.0.1\) Gecko/20100101 Firefox/9.0.1"188.225.253.200 - - \[03/Mar/2021:00:28:11 +0600\] "GET /phpMyAdmin-2.6.0-pl1/ HTTP/1.1" 404 142 "http://93.171.153.130/" "Mozilla/5.0 \(Windows NT 5.1\; rv:9.0.1\) Gecko/20100101 Firefox/9.0.1"188.225.253.200 - - \[03/Mar/2021:00:28:13 +0600\] "GET /phpMyAdmin-2.6.0-pl2/ HTTP/1.1" 404 142 "http://93.171.153.130/" "Mozilla/5.0 \(Windows NT 5.1\; rv:9.0.1\) Gecko/20100101 Firefox/9.0.1"188.225.253.200 - - \[03/Mar/2021:00:28:30 +0600\] "GET /phpMyAdmin-2.6.1-pl3/ HTTP/1.1" 404 142 "http://93.171.153.130/" "Mozilla/5.0 \(Windows NT 5.1\; rv:9.0.1\) Gecko/20100101 Firefox/9.0.1"188.225.253.200 - - \[03/Mar/2021:00:28:35 +0600\] "GET /phpMyAdmin-2.6.1/ HTTP/1.1" 404 142 "https://93.171.153.130/" "Mozilla/5.0 \(Windows NT 5.1\; rv:9.0.1\) Gecko/20100101 Firefox/9.0.1"188.225.253.200 - - \[03/Mar/ ... show less	Hacking Brute-Force Web App Attack SSH
🇰🇿 95.56.152.25	25 Feb 2021	95.56.152.25 - - \[26/Feb/2021:02:55:58 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1 ... show more 95.56.152.25 - - \[26/Feb/2021:02:55:58 +0600\] "GET /app/calls_active/calls_active_inc.php\? HTTP/1.1" 302 5 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/88.0.4324.190 Safari/537.36"95.56.152.25 - - \[26/Feb/2021:02:56:01 +0600\] "GET /login.php\?path=%2Fapp%2Fcalls_active%2Fcalls_active_inc.php%3F HTTP/1.1" 200 2907 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/88.0.4324.190 Safari/537.36"95.56.152.25 - - \[26/Feb/2021:02:56:02 +0600\] "GET /resources/jquery/jquery-1.11.1.js\?_=1614263793245 HTTP/1.1" 200 282766 "https://office.dtx.kz/app/calls_active/calls_active.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/88.0.4324.190 Safari/537.36"95.56.152.25 - - \[26/Feb/2021:02:56:03 +0600\] "GET /resources/jquery/jquery.autosi ... show less	Hacking Brute-Force Web App Attack SSH
🇭🇰 80.245.106.99	24 Feb 2021	80.245.106.99 - - \[25/Feb/2021:03:47:50 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows ... show more 80.245.106.99 - - \[25/Feb/2021:03:47:50 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:61.0\) Gecko/20100101 Firefox/61.0"80.245.106.99 - - \[25/Feb/2021:03:47:51 +0600\] "GET /robots.txt HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:61.0\) Gecko/20100101 Firefox/61.0"80.245.106.99 - - \[25/Feb/2021:03:47:51 +0600\] "POST /Admin8299ab5d/Login.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:61.0\) Gecko/20100101 Firefox/61.0"80.245.106.99 - - \[25/Feb/2021:03:47:51 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compatible\; MSIE 6.0\; Windows NT 5.1\)"80.245.106.99 - - \[25/Feb/2021:03:47:52 +0600\] "GET /l.php HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compatible\; MSIE 6.0\; Windows NT 5.1\)"80.245.106.99 - - \[25/Feb/2021:03:47:52 +0600\] "GET /phpinfo.php HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compatible\; MSIE 6.0\; Windows NT 5.1\)"80.245.106.99 - - \[25/Feb/2021:03:47:52 +0600\] "GET /test ... show less	Hacking Brute-Force Web App Attack SSH
🇨🇳 112.124.50.80	24 Feb 2021	112.124.50.80 - - \[25/Feb/2021:03:42:24 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compati ... show more 112.124.50.80 - - \[25/Feb/2021:03:42:24 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compatible\; MSIE 8.0\; Windows NT 5.1\; Trident/4.0\)"112.124.50.80 - - \[25/Feb/2021:03:42:24 +0600\] "GET /l.php HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compatible\; MSIE 8.0\; Windows NT 5.1\; Trident/4.0\)"112.124.50.80 - - \[25/Feb/2021:03:42:24 +0600\] "GET /phpinfo.php HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compatible\; MSIE 8.0\; Windows NT 5.1\; Trident/4.0\)"112.124.50.80 - - \[25/Feb/2021:03:42:25 +0600\] "GET /test.php HTTP/1.1" 301 184 "-" "Mozilla/4.0 \(compatible\; MSIE 8.0\; Windows NT 5.1\; Trident/4.0\)"112.124.50.80 - - \[25/Feb/2021:03:42:25 +0600\] "POST /index.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 5.2\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"112.124.50.80 - - \[25/Feb/2021:03:42:25 +0600\] "POST /bbs.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 5.2\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0 ... show less	Hacking Brute-Force Web App Attack SSH
🇷🇺 5.8.10.202	22 Feb 2021	5.8.10.202 - - \[22/Feb/2021:22:15:35 +0600\] "GET /a.txt HTTP/1.1" 404 142 "http://93.171.153.130:8 ... show more 5.8.10.202 - - \[22/Feb/2021:22:15:35 +0600\] "GET /a.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/a.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/2021:22:15:37 +0600\] "GET /b.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/b.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/2021:22:15:38 +0600\] "GET /c.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/c.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/2021:22:15:39 +0600\] "GET /d.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/d.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/2021:22:15:40 +0600\] "GET /e.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/e.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/2021:22:15:42 +0600\] "GET /f.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/f.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/2021:22:15:44 +0600\] "GET /g.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/g.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/2021:22:15:46 +0600\] "GET /h.txt HTTP/1.1" 404 142 "http://93.171.153.130:80/h.txt" "Mozilla/5.0"5.8.10.202 - - \[22/Feb/ ... show less	Hacking Brute-Force Web App Attack SSH