AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User uagri , the webmaster of eo-vmw-mib-metricsa.ku.de, joined AbuseIPDB in October 2019 and has reported 50 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 151.241.122.33	04 Nov 2026	[04/Nov/2026:11:51:15 +0100] Check for several config files like .env, .env.production, .aws etc. 20 ... show more [04/Nov/2026:11:51:15 +0100] Check for several config files like .env, .env.production, .aws etc. 20 attempts within ca 2 seconds. show less	Hacking
🇨🇳 175.6.181.236	04 Nov 2026	175.6.181.236 - - [04/Nov/2026:00:09:02 +0100] "HEAD /wp/wp-login.php HTTP/1.1" 404 159 "-" "Mozilla ... show more 175.6.181.236 - - [04/Nov/2026:00:09:02 +0100] "HEAD /wp/wp-login.php HTTP/1.1" 404 159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 175.6.181.236 - - [04/Nov/2026:00:09:03 +0100] "HEAD /wp-login.php HTTP/1.1" 404 159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 175.6.181.236 - - [04/Nov/2026:00:09:03 +0100] "HEAD /wordpress/wp-login.php HTTP/1.1" 404 159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 175.6.181.236 - - [04/Nov/2026:00:09:03 +0100] "GET /robots.txt HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 175.6.181.236 - - [04/Nov/2026:00:09:04 +0100] "GET /sitemap.xml HTTP/1.1" 404 497 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Web App Attack
🇮🇩 43.133.134.10	04 Nov 2026	43.133.134.10 - - [04/Nov/2026:00:10:27 +0100] "HEAD /wp-login.php HTTP/1.1" 404 4483 "-" "Mozilla/5 ... show more 43.133.134.10 - - [04/Nov/2026:00:10:27 +0100] "HEAD /wp-login.php HTTP/1.1" 404 4483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 43.133.134.10 - - [04/Nov/2026:00:10:27 +0100] "HEAD /wordpress/wp-login.php HTTP/1.1" 404 4483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 43.133.134.10 - - [04/Nov/2026:00:10:27 +0100] "HEAD /wp/wp-login.php HTTP/1.1" 404 4483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 43.133.134.10 - - [04/Nov/2026:00:10:27 +0100] "GET /robots.txt HTTP/1.1" 200 4625 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" show less	Hacking
🇫🇷 37.60.255.130	04 Nov 2026	37.60.255.130 - - [04/Nov/2026:00:33:29 +0100] "GET /robots.txt HTTP/1.1" 500 8266 "-" "Mozilla/5.0 ... show more 37.60.255.130 - - [04/Nov/2026:00:33:29 +0100] "GET /robots.txt HTTP/1.1" 500 8266 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 37.60.255.130 - - [04/Nov/2026:00:33:29 +0100] "HEAD /wp-login.php HTTP/1.1" 500 3169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 37.60.255.130 - - [04/Nov/2026:00:33:29 +0100] "HEAD /wordpress/wp-login.php HTTP/1.1" 500 3169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 37.60.255.130 - - [04/Nov/2026:00:33:29 +0100] "HEAD /wp/wp-login.php HTTP/1.1" 500 3169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... and many more show less	Web App Attack
🇺🇸 23.234.94.244	03 Nov 2026	/var/log/apache2/access.log:23.234.94.244 - - [02/Nov/2026:20:01:35 +0100] "GET /.env.local HTTP/1.1 ... show more /var/log/apache2/access.log:23.234.94.244 - - [02/Nov/2026:20:01:35 +0100] "GET /.env.local HTTP/1.1" 404 27834 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" & more Get /.env.old, /.env.dev, laravel/.env etc. show less	Web App Attack Hacking
🇺🇸 159.89.95.201	03 Nov 2026	/var/log/apache2/access.log:159.89.95.201 - - [03/Nov/2026:03:59:58 +0100] "GET /phpMyAdmin-5.1.2/in ... show more /var/log/apache2/access.log:159.89.95.201 - - [03/Nov/2026:03:59:58 +0100] "GET /phpMyAdmin-5.1.2/index.php?lang=en HTTP/1.1" 404 489 "-" "Go Web Pentest Tool" show less	Web App Attack Hacking
🇷🇺 201.34.138.155	02 Nov 2026	/var/log/apache2/access.log:201.34.138.155 - - [02/Nov/2026:07:41:30 +0100] "GET /phpMyAdmin-latest- ... show more /var/log/apache2/access.log:201.34.138.155 - - [02/Nov/2026:07:41:30 +0100] "GET /phpMyAdmin-latest-english/index.php?lang=en HTTP/1.1" 404 489 "-" "Go Web Pentest Tool" show less	Web App Attack
🇺🇸 107.170.58.168	21 Jan 2026	"GET /ab2g HTTP/1.1" 404 6010 "-" "Mozilla/5.0 zgrab/0.x" "GET /ab2h HTTP/1.1" 404 6010 "-" "Mozill ... show more "GET /ab2g HTTP/1.1" 404 6010 "-" "Mozilla/5.0 zgrab/0.x" "GET /ab2h HTTP/1.1" 404 6010 "-" "Mozilla/5.0 zgrab/0.x" "GET /alive.php HTTP/1.1" 404 6010 "-" "Mozilla/5.0 0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 138.246.252.71	01 Sep 2025	[Mon Sep 01 13:06:21.536765 2025] [proxy_fcgi:error] [pid 1499902:tid 140710133081664] [client 138.2 ... show more [Mon Sep 01 13:06:21.536765 2025] [proxy_fcgi:error] [pid 1499902:tid 140710133081664] [client 138.246.252.71:0] AH01071: Got error 'PHP message: ill-formated component "cmd=force_login&cmd=msgbox("foo");window.alert('bar');&lang=de" expected "#^([A-Za-z0-9]\|[\\-\\._~]\|[\\$,;=!&'\$\$\\*\\+]\|%[0-9A-Fa-f][0-9A-Fa-f]\|:\|@\|/\|\\?)+$#"PHP message: PHP Fatal error: Uncaught RuntimeException: Stream is detached in /data/ilias/libs/composer/vendor/guzzlehttp/psr7/src/Stream.php:201\nStack trace:\n#0 ... and many more show less	Web App Attack
🇷🇺 45.140.17.103	27 Nov 2024	[27/Nov/2024:03:45:36 +0100] "GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1" 403 7877 "-" "Mozi ... show more [27/Nov/2024:03:45:36 +0100] "GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1" 403 7877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" [27/Nov/2024:03:45:37 +0100] "GET /logon/LogonPoint/index.html HTTP/1.1" 403 7914 "-" "python-requests/2.22.0" [27/Nov/2024:03:45:37 +0100] "GET /vpn/index.html HTTP/1.1" 403 7877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" [27/Nov/2024:03:45:39 +0100] "GET /remote/login HTTP/1.1" 403 7877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" [27/Nov/2024:03:45:39 +0100] "GET /login HTTP/1.1" 403 7877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" [27/Nov/2024:03:45:39 +0100] "GET /+CSCOE+/logon.html HTTP/1.1" 403 7877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" show less	Web App Attack
🇵🇹 82.155.111.171	14 Nov 2024	[13/Nov/2024:04:53:17 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 403 7810 [13/Nov/2024:04 ... show more [13/Nov/2024:04:53:17 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 403 7810 [13/Nov/2024:04:53:17 +0100] "GET /phpmyadmin2022/index.php?lang=en HTTP/1.1" 403 7810 [13/Nov/2024:04:53:19 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 403 7810 show less	Web App Attack
🇬🇧 78.153.140.224	16 Oct 2024	[16/Oct/2024:13:45:22 +0200] "GET / HTTP/1.0" 400 630 "-" "-"	Hacking
🇩🇪 62.216.76.3	16 Oct 2024	[16/Oct/2024:06:36:30 0200]"GET/privacy-policy/javascript:void(0);?report_category=3884&note=Guten T ... show more [16/Oct/2024:06:36:30 0200]"GET/privacy-policy/javascript:void(0);?report_category=3884&note=Guten Tag, mein Name ist Michael Josten und ich schreibe Ihnen direkt über das Formular auf Ihrer Webseite.Weil ich mich bei meiner Recherche vorhin, bei Ihnen gefragt habe, ob wir uns denn möglicherweise gegenseitig weiterhelfen könnten. Wir sind eine Gruppe von vier Studenten mit Fachkenntnissen in den Bereichen Marketing, Informatik und. Denn wir sind dabei uns ein Portfolio an richtig starken Erfolgsprojekten aufzubauen. Und gleichzeitig arbeiten wir für Sie und schließen, wie eine Art Add-on, ein paar der möglicherweise noch versteckten Lücken in Ihrem aktuellen Online-Prozess für Sie. So habe ich bereits für Sie ein komplettes Social Media Creative ausgearbeitet und fertiggestellt, welches eine großartige Ergänzung zu Ihrem aktuellen Online-Prozess darstellen könnte. show less	Web Spam
🇺🇸 47.251.93.227	16 Oct 2024	[16/Oct/2024:07:16:57 +0200] "GET /dns-query?dns=0AUBAAABAAAAAAAAB2V4YW1wbGUDY29tAAABAAE HTTP/1.1" 4 ... show more [16/Oct/2024:07:16:57 +0200] "GET /dns-query?dns=0AUBAAABAAAAAAAAB2V4YW1wbGUDY29tAAABAAE HTTP/1.1" 403 7822 "-" "Go-http-client/1.1" [16/Oct/2024:07:16:57 +0200] "POST /dns-query HTTP/1.1" 403 516 "-" "Go-http-client/1.1" [16/Oct/2024:07:16:57 +0200] "GET /dns-query?name=example.com&type=A HTTP/1.1" 403 516 "-" "Go-http-client/1.1" show less	Hacking
🇮🇩 101.255.92.197	16 Oct 2024	[16/Oct/2024:09:15:31 +0200] "GET /phppma/index.php?lang=en HTTP/1.1" 403 7810 "http://141.78.6.127/ ... show more [16/Oct/2024:09:15:31 +0200] "GET /phppma/index.php?lang=en HTTP/1.1" 403 7810 "http://141.78.6.127/phppma/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" [16/Oct/2024:09:15:32 +0200] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 403 7810 "http://141.78.6.127/sql/phpmy-admin/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" [16/Oct/2024:09:15:36 +0200] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 403 7810 "http://141.78.6.127/phpMyAdmin/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" [16/Oct/2024:09:15:39 +0200] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 403 7810 "http://141.78.6.127/sql/sqlweb/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML show less	Hacking Web App Attack
🇭🇰 8.217.10.15	10 Oct 2024	[09/Oct/2024:15:24:14 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3d ... show more [09/Oct/2024:15:24:14 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 7822 "-" "Custom-AsyncHttpClient" [09/Oct/2024:15:24:15 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 516 "-" "Custom-AsyncHttpClient" [09/Oct/2024:15:24:15 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 403 516 "-" "Custom-AsyncHttpClient" [09/Oct/2024:15:24:16 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 516 "-" "Custom-AsyncHttpClient" show less	Hacking Web App Attack
🇺🇸 34.239.174.110	10 Oct 2024	[09/Oct/2024:20:40:52 +0200] "GET / HTTP/1.1" 400 6265 "-" "-" [09/Oct/2024:20:40:53 +0200] "GET / ... show more [09/Oct/2024:20:40:52 +0200] "GET / HTTP/1.1" 400 6265 "-" "-" [09/Oct/2024:20:40:53 +0200] "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 400 6251 "-" "Lkx-Apache2449TraversalPlugin/0.0.1 (+https://leakix.net/, +https://twitter.com/HaboubiAnis)" [09/Oct/2024:20:40:53 +0200] "GET /.DS_Store HTTP/1.1" 404 6219 "-" "Go-http-client/1.1" show less	Hacking Web App Attack
🇬🇧 78.153.140.224	10 Oct 2024	[09/Oct/2024:20:57:21 +0200] "GET / HTTP/1.0" 400 630 "-" "-" [09/Oct/2024:20:57:21 +0200] "GET /st ... show more [09/Oct/2024:20:57:21 +0200] "GET / HTTP/1.0" 400 630 "-" "-" [09/Oct/2024:20:57:21 +0200] "GET /staging/.env HTTP/1.1" 403 7163 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.4) Gecko/20070602 Firefox/2.0.0.4" show less	Hacking Web App Attack
🇸🇬 8.222.175.173	10 Oct 2024	8.222.175.173 - - [10/Oct/2024:02:50:00 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 8.222.175.173 - - [10/Oct/2024:02:50:00 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 7814 "-" "Custom-AsyncHttpClient" 8.222.175.173 - - [10/Oct/2024:02:50:01 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 7814 "-" "Custom-AsyncHttpClient" 8.222.175.173 - - [10/Oct/2024:02:50:02 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 7822 "-" "Custom-AsyncHttpClient" show less	Hacking Web App Attack
🇻🇳 103.82.24.154	10 Oct 2024	103.82.24.154 - - [10/Oct/2024:06:12:03 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 103.82.24.154 - - [10/Oct/2024:06:12:03 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 7814 "-" "Custom-AsyncHttpClient" 103.82.24.154 - - [10/Oct/2024:06:12:07 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 7814 "-" "Custom-AsyncHttpClient" show less	Hacking Web App Attack
🇩🇪 20.218.140.110	09 Oct 2024	20.218.140.110 - - [09/Oct/2024:12:31:58 +0200] "GET / HTTP/1.0" 400 630 "-" "-" 20.218.140.110 - - ... show more 20.218.140.110 - - [09/Oct/2024:12:31:58 +0200] "GET / HTTP/1.0" 400 630 "-" "-" 20.218.140.110 - - [09/Oct/2024:12:22:42 +0200] "GET https://login.microsoftonline.com/common/oauth2/v2.0/authorize HTTP/1.1" 302 558 "-" "-" show less	Web App Attack
🇳🇱 172.233.57.39	09 Oct 2024	/var/log/apache2/access-vmw-espocrm.log:172.233.57.39 - - [09/Oct/2024:12:20:26 +0200] "GET /nmaplow ... show more /var/log/apache2/access-vmw-espocrm.log:172.233.57.39 - - [09/Oct/2024:12:20:26 +0200] "GET /nmaplowercheck1728469225 HTTP/1.1" 403 7841 "-" "curl/7.54.0" /var/log/apache2/access-vmw-espocrm.log:172.233.57.39 - - [09/Oct/2024:12:20:26 +0200] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 400 7870 "-" "-" /var/log/apache2/access-vmw-espocrm.log:172.233.57.39 - - [09/Oct/2024:12:20:26 +0200] "POST /sdk HTTP/1.1" 403 7841 "-" "curl/7.54.0" show less	Web App Attack
🇺🇸 47.251.93.227	09 Oct 2024	47.251.93.227 - - [09/Oct/2024:07:12:07 +0200] "GET /dns-query?dns=zn0BAAABAAAAAAAAB2V4YW1wbGUDY29tA ... show more 47.251.93.227 - - [09/Oct/2024:07:12:07 +0200] "GET /dns-query?dns=zn0BAAABAAAAAAAAB2V4YW1wbGUDY29tAAABAAE HTTP/1.1" 403 7822 "-" "Go-http-client/1.1" 47.251.93.227 - - [09/Oct/2024:07:12:08 +0200] "POST /dns-query HTTP/1.1" 403 516 "-" "Go-http-client/1.1" 47.251.93.227 - - [09/Oct/2024:07:12:08 +0200] "GET /dns-query?name=example.com&type=A HTTP/1.1" 403 516 "-" show less	Hacking
🇩🇪 138.246.252.68	08 Oct 2024	138.246.252.68 - - [02/Oct/2024:06:48:42 +0200] "\x16\x03\x01\x03\xa5\x01" 400 494 "-" "-"	Web App Attack
🇨🇳 42.4.212.4	08 Oct 2024	42.4.212.4 - - [08/Oct/2024:06:51:35 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32 ... show more 42.4.212.4 - - [08/Oct/2024:06:51:35 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "Custom-AsyncHttpClient" show less	Web App Attack