AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Agaman joined AbuseIPDB in November 2019 and has reported 2,184 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇦 213.139.213.36	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 10:20 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 10:20 UTC. Samples: GET /.env.backup 444; GET /.env 444; GET /.env.bak 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/11. Detected by fail2ban. show less	Web App Attack
🇦🇺 34.40.227.174	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 10:05 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 10:05 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇺🇸 34.127.30.239	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:49 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:49 UTC. Samples: GET /.env 444; GET /api/.env 444. UA: Go-http-client/2.0. Detected by fail2ban. show less	Web App Attack
🇩🇪 64.89.163.34	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:38 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:38 UTC. Samples: GET /wp-content/themes/seotheme/db.php 444; GET /wp-content/plugins/fix/up.php 444; POST /ALFA_DATA/alfacgiapi/perl.alfa 444. UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (. Detected by fail2ban. show less	Web App Attack
🇦🇪 20.74.238.220	03 Nov 2026	Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 202 ... show more Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:38 UTC. Samples: GET /wp-content/plugins/hellopress/wp_filemanager.php 444. Detected by fail2ban. show less	Hacking Web App Attack
🇩🇪 20.218.73.251	03 Nov 2026	Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 6 requests acro ... show more Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 6 requests across 2 of our servers, 2026-11-02 18:25-20:57 UTC. Samples: GET /wp-content/plugins/hellopress/wp_filemanager.php 404; GET /wp-content/plugins/hellopress/wp_filemanager.php 444. Detected by fail2ban. show less	Hacking Web App Attack
🇫🇷 185.194.178.36	03 Nov 2026	Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 202 ... show more Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:38 UTC. Samples: GET /.well-known/acme-challenge/install.php 444; GET /.well-known/acme-challenge/plugins.php 444; GET /.well-known/acme-challenge/license.php 444. UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Hacking Web App Attack
🇭🇰 35.241.83.101	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:26 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:26 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇮🇪 109.76.84.135	03 Nov 2026	SSH login attempts on SSH. 5 attempts, 2026-11-03 09:29 UTC. Samples: SSH login attempt for an inval ... show more SSH login attempts on SSH. 5 attempts, 2026-11-03 09:29 UTC. Samples: SSH login attempt for an invalid user. Detected by fail2ban. show less	Brute-Force SSH
🇦🇪 20.74.254.174	03 Nov 2026	Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 202 ... show more Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:28 UTC. Samples: GET /wp-content/plugins/hellopress/wp_filemanager.php 444. Detected by fail2ban. show less	Hacking Web App Attack
🇫🇷 146.70.194.230	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:26 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:26 UTC. Samples: GET /ALFA_DATA/ 444; GET /vendor/phpunit/phpunit/src/Util/PHP/ 444. Detected by fail2ban. show less	Web App Attack
🇦🇺 34.116.119.104	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:11 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:11 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇺🇸 84.233.199.170	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:10 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 09:10 UTC. Samples: GET /.env.bak 444; GET /.env 444; GET /wp-config.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇵🇱 194.180.49.41	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-02 23:08 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-02 23:08 UTC. Samples: GET /.env 444; GET /.env.backup 444. UA: Go-http-client/1.1. Detected by fail2ban. show less	Web App Attack
🇺🇸 136.70.164.36	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-02 09:37 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-02 09:37 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇬🇧 34.39.119.186	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:39 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:39 UTC. Samples: GET /.env 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) Gecko/20070201 Firefox/10.0. Detected by fail2ban. show less	Web App Attack
🇳🇱 34.141.184.111	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:34 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:34 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇳🇱 85.11.167.138	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:41 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:41 UTC. Samples: GET /phpinfo.php 444; GET /test.php 444; GET /info.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0. Detected by fail2ban. show less	Web App Attack
🇦🇺 35.201.22.203	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:28 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:28 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇮🇱 20.217.186.29	03 Nov 2026	Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 10 requests acr ... show more Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 10 requests across 2 of our servers, 2026-11-02 21:27 to 2026-11-03 04:22 UTC. Samples: GET /alfa.php 444; GET /admin.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Hacking Web App Attack
🇧🇪 34.77.26.251	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:16 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:16 UTC. Samples: GET /dist/.vite/manifest.json 444; GET /.vite/manifest.json 444. UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome. Detected by fail2ban. show less	Web App Attack
🇯🇵 34.180.84.40	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:03 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 08:03 UTC. Samples: GET /wp-config.php.old 444. UA: CCBot/2.0 (https://commoncrawl.org/faq/). Detected by fail2ban. show less	Web App Attack
🇬🇧 194.164.90.230	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 07:49 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 07:49 UTC. Samples: GET /.env.bak 444; GET /.env.local 444; GET /.env.production 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇺🇸 34.74.91.92	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-02 08:18 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-02 08:18 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇺🇸 132.196.59.85	03 Nov 2026	Webshell/backdoor probing on HTTP(S) port 80/443. 1 request, 2026-11-02 09:27 UTC. Samples: GET /wp- ... show more Webshell/backdoor probing on HTTP(S) port 80/443. 1 request, 2026-11-02 09:27 UTC. Samples: GET /wp-content/plugins/hellopress/wp_filemanager.php 404. Detected by fail2ban. show less	Hacking Web App Attack