AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User pentesting.se joined AbuseIPDB in August 2026 and has reported 30 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇳🇱 45.148.10.62	06 Aug 2026	Aggressive automated scanning for exposed credentials/backups: /.env, /wp-config.php.old across site ... show more Aggressive automated scanning for exposed credentials/backups: /.env, /wp-config.php.old across sites on our hosting. show less	Web App Attack Bad Web Bot
🇳🇱 45.148.10.67	06 Aug 2026	Aggressive automated scanning for exposed source control / info-leak: /.git/config, /xampp/phpinfo.p ... show more Aggressive automated scanning for exposed source control / info-leak: /.git/config, /xampp/phpinfo.php across sites on our hosting. show less	Web App Attack Bad Web Bot
🇳🇱 45.148.10.125	06 Aug 2026	Aggressive automated scanning (l9explore/LeakIX) for exposed secrets: mass GET probing /.env and cre ... show more Aggressive automated scanning (l9explore/LeakIX) for exposed secrets: mass GET probing /.env and credential files across our hosting. show less	Web App Attack Bad Web Bot
🇳🇱 45.148.10.95	06 Aug 2026	Aggressive automated scanning for exposed source control: ~25000 GET probing /.git/config and git tr ... show more Aggressive automated scanning for exposed source control: ~25000 GET probing /.git/config and git tree paths across sites on our hosting. show less	Web App Attack Bad Web Bot
🇳🇱 45.148.10.201	06 Aug 2026	WordPress 'wp2shell' core-RCE exploitation. ~300 POST /index.php?rest_route=/batch/v1 (HTTP 207) com ... show more WordPress 'wp2shell' core-RCE exploitation. ~300 POST /index.php?rest_route=/batch/v1 (HTTP 207) combined with ~340 wp-login.php brute-force requests. show less	Web App Attack Hacking Brute-Force
🇩🇪 93.152.224.221	06 Aug 2026	WordPress attack. ~95 POST /?rest_route=/batch/v1 ('wp2shell' core RCE) plus WP recon (/wp-includes/ ... show more WordPress attack. ~95 POST /?rest_route=/batch/v1 ('wp2shell' core RCE) plus WP recon (/wp-includes/version.php, /wp-json/), using a spoofed 'authorized self-check auditor' User-Agent (NOT authorized by us). show less	Web App Attack Hacking
🇳🇱 93.123.109.163	06 Aug 2026	Automated WordPress attack. ~525 POST /index.php?rest_route=/batch/v1 ('wp2shell' core RCE) with log ... show more Automated WordPress attack. ~525 POST /index.php?rest_route=/batch/v1 ('wp2shell' core RCE) with login probing (/api/v1/login) and malformed TLS/port-scan traffic. show less	Web App Attack Hacking
🇮🇩 163.7.12.7	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~70 POST /?rest_route=/batch/v1.	Web App Attack Hacking
🇱🇹 62.60.130.235	06 Aug 2026	WordPress 'wp2shell' core-RCE exploitation. ~50 POST batch-endpoint (HTTP 207) plus wp-login.php pro ... show more WordPress 'wp2shell' core-RCE exploitation. ~50 POST batch-endpoint (HTTP 207) plus wp-login.php probing. show less	Web App Attack Hacking Brute-Force
🇱🇹 62.60.130.230	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~80 POST to /?rest_route=/batch/v1 & /wp-json/ ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~80 POST to /?rest_route=/batch/v1 & /wp-json/batch/v1 (HTTP 207). show less	Web App Attack Hacking
🇺🇸 103.168.67.253	06 Aug 2026	WordPress 'wp2shell' core-RCE exploitation. ~100 POST /index.php?rest_route=/batch/v1 (HTTP 207) plu ... show more WordPress 'wp2shell' core-RCE exploitation. ~100 POST /index.php?rest_route=/batch/v1 (HTTP 207) plus wp-login.php probing, 2026-07-30..31. show less	Web App Attack Hacking Brute-Force
🇳🇱 195.178.110.105	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~110 POST to /?rest_route=/batch/v1 & /wp-json ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~110 POST to /?rest_route=/batch/v1 & /wp-json/batch/v1 (HTTP 207) using a spoofed 'vuln_scanner' User-Agent (not authorized). show less	Web App Attack Hacking
🇳🇱 195.178.110.102	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~100 POST to the batch endpoint (HTTP 207).	Web App Attack Hacking
🇳🇱 195.178.110.132	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~170 POST to batch endpoint variants (HTTP 207 ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~170 POST to batch endpoint variants (HTTP 207), 2026-07-27..31. show less	Web App Attack Hacking
🇹🇷 45.8.196.200	06 Aug 2026	WordPress 'wp2shell' core-RCE exploitation (User-Agent 'wp2shell', POST /?rest_route=/batch/v1) plus ... show more WordPress 'wp2shell' core-RCE exploitation (User-Agent 'wp2shell', POST /?rest_route=/batch/v1) plus wp-login.php login probing. show less	Web App Attack Hacking Brute-Force
🇩🇪 85.215.116.63	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~55 POST /?rest_route=/batch/v1 (HTTP 207), Us ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~55 POST /?rest_route=/batch/v1 (HTTP 207), User-Agent 'wp2shell'. show less	Web App Attack Hacking
🇳🇱 91.92.40.173	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~95 POST /?rest_route=/batch/v1 (HTTP 207), Us ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~95 POST /?rest_route=/batch/v1 (HTTP 207), User-Agent 'wp2shell'. show less	Web App Attack Hacking
🇳🇱 91.92.40.172	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~120 POST /?rest_route=/batch/v1 (HTTP 207), U ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~120 POST /?rest_route=/batch/v1 (HTTP 207), User-Agent 'wp2shell'. show less	Web App Attack Hacking
🇺🇸 143.198.160.182	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~930 POST /?rest_route=/batch/v1 & /wp-json/ba ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~930 POST /?rest_route=/batch/v1 & /wp-json/batch/v1, 2026-07-28..29. show less	Web App Attack Hacking
🇺🇸 13.57.32.170	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~600 POST batch-endpoint with path/case-evasio ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~600 POST batch-endpoint with path/case-evasion (/wp-json/Batch/v1, /wp-json//batch/v1). show less	Web App Attack Hacking
🇪🇸 82.223.4.24	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation. ~430 POST to the batch endpoint (HTTP 207), Us ... show more Automated WordPress 'wp2shell' core-RCE exploitation. ~430 POST to the batch endpoint (HTTP 207), User-Agent 'wp2shell', 2026-07-27..08-04. show less	Web App Attack Hacking
🇳🇱 85.11.167.118	06 Aug 2026	Automated WordPress 'wp2shell' core-RCE exploitation (CVE-2026-63030/CVE-2026-60137). Bursts of POST ... show more Automated WordPress 'wp2shell' core-RCE exploitation (CVE-2026-63030/CVE-2026-60137). Bursts of POST /?rest_route=/batch/v1 & /wp-json/batch/v1 (HTTP 207) vs ~10 sites, User-Agent 'wp2shell'. show less	Web App Attack Hacking
🇸🇬 4.193.178.28	06 Aug 2026	WordPress attack. On 2026-07-20 ~03:38 UTC scanned for backdoor/webshell filenames (adminfuns.php, i ... show more WordPress attack. On 2026-07-20 ~03:38 UTC scanned for backdoor/webshell filenames (adminfuns.php, inputs.php, /.well-known/logs233/index.php, edit.php, file.php etc.). Web App Attack / backdoor discovery. show less	Web App Attack
🇩🇪 20.170.17.213	06 Aug 2026	WordPress attack. On 2026-08-04 ~13:18 UTC probed and accessed uploaded PHP webshells (GET /wp-conte ... show more WordPress attack. On 2026-08-04 ~13:18 UTC probed and accessed uploaded PHP webshells (GET /wp-content/plugins/<random>/wp_filemanager.php, /1.php, /we.php, /ccc.php etc.). Web App Attack / webshell access. show less	Web App Attack Hacking
🇵🇱 45.227.253.15	06 Aug 2026	WordPress attack. On 2026-07-21 ~07:04 UTC POSTed to an uploaded webshell (filefuns.php) and to inje ... show more WordPress attack. On 2026-07-21 ~07:04 UTC POSTed to an uploaded webshell (filefuns.php) and to injected SEO-spam doorway loaders. Web App Attack / webshell operation. show less	Web App Attack