AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Agaman joined AbuseIPDB in November 2019 and has reported 2,078 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇬🇧 91.204.209.22	23 hours ago	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:53 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:53 UTC. Samples: GET /actuator 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. Detected by fail2ban. show less	Web App Attack
🇮🇩 103.123.71.86	23 hours ago	SSH login attempts on SSH. 5 attempts, 2026-11-02 08:54 UTC. Samples: SSH login attempt for an inval ... show more SSH login attempts on SSH. 5 attempts, 2026-11-02 08:54 UTC. Samples: SSH login attempt for an invalid user. Detected by fail2ban. show less	Brute-Force SSH
🇺🇸 34.85.198.232	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:34 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:34 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like. Detected by fail2ban. show less	Web App Attack
🇦🇺 34.87.239.169	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:32 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:32 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇮🇳 34.180.28.29	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:36 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:36 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇸🇪 16.16.251.228	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:20 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:20 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like. Detected by fail2ban. show less	Web App Attack
🇹🇼 34.80.163.42	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:16 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:16 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like. Detected by fail2ban. show less	Web App Attack
🇮🇩 34.101.252.158	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:13 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:13 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇧🇪 34.77.241.117	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:06 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:06 UTC. Samples: GET /.env.anthropic 444; GET /.aws/.env 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. Detected by fail2ban. show less	Web App Attack
🇺🇸 34.133.69.206	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:05 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:05 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇺🇸 34.150.214.190	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:05 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:05 UTC. Samples: GET /.env 444; GET /api/.env 444. UA: Go-http-client/2.0. Detected by fail2ban. show less	Web App Attack
🇸🇬 194.5.82.64	03 Nov 2026	Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 202 ... show more Webshell/backdoor probing + exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 05:05 UTC. Samples: GET /.well-known/acme-challenge/install.php 444; GET /.well-known/acme-challenge/plugins.php 444; GET /.well-known/acme-challenge/license.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0. Detected by fail2ban. show less	Hacking Web App Attack
🇮🇩 34.128.65.110	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:46 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:46 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇹🇼 104.155.201.160	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:34 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:34 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like. Detected by fail2ban. show less	Web App Attack
🇭🇷 91.233.36.50	03 Nov 2026	SSH login attempts on SSH. 5 attempts, 2026-11-03 04:12 UTC. Samples: SSH login attempt for an inval ... show more SSH login attempts on SSH. 5 attempts, 2026-11-03 04:12 UTC. Samples: SSH login attempt for an invalid user. Detected by fail2ban. show less	Brute-Force SSH
🇵🇱 195.3.220.7	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:22 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:22 UTC. Samples: GET /wp-content/plugins/fix/up.php 444. UA: Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (. Detected by fail2ban. show less	Web App Attack
🇧🇪 34.34.154.159	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:14 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:14 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like. Detected by fail2ban. show less	Web App Attack
🇨🇳 120.225.223.165	03 Nov 2026	SSH login attempts on SSH. 10 attempts across 2 of our servers, 2026-11-02 21:13-22:56 UTC. Samples: ... show more SSH login attempts on SSH. 10 attempts across 2 of our servers, 2026-11-02 21:13-22:56 UTC. Samples: SSH login attempt for an invalid user. Detected by fail2ban. show less	Brute-Force SSH
🇦🇺 34.116.100.104	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:03 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:03 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like. Detected by fail2ban. show less	Web App Attack
🇫🇷 146.70.194.220	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:04 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 04:04 UTC. Samples: GET /ALFA_DATA/ 444; GET /vendor/phpunit/phpunit/src/Util/PHP/ 444. Detected by fail2ban. show less	Web App Attack
🇭🇰 154.12.84.16	03 Nov 2026	Webshell/backdoor probing on HTTP(S) port 80/443. 1 request, 2026-11-03 03:42 UTC. Samples: GET /Tem ... show more Webshell/backdoor probing on HTTP(S) port 80/443. 1 request, 2026-11-03 03:42 UTC. Samples: GET /Temps/Home/xc99.php 404. UA: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1). Detected by fail2ban. show less	Hacking Web App Attack
🇩🇪 3.120.151.121	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:28 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:28 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇯🇵 34.146.153.142	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:24 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:24 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇫🇷 146.70.194.222	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:28 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:28 UTC. Samples: GET /ALFA_DATA/ 444; GET /vendor/phpunit/phpunit/src/Util/PHP/ 444. Detected by fail2ban. show less	Web App Attack
🇺🇸 34.59.138.140	03 Nov 2026	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:11 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-03 03:11 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack