AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Mr. Sky , the webmaster of mrsky.nl, joined AbuseIPDB in February 2020 and has reported 680 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇵🇱 45.138.12.58	5 hours ago	WordPress exploitation attempts detected against a public web server. 22 suspicious requests 10 cri ... show more WordPress exploitation attempts detected against a public web server. 22 suspicious requests 10 critical requests Observed requests: GET /assets/index-oucW8uP5.js GET /wp-login.php GET /wp-content/mysql.sql GET /wp-content/debug.log Risk level: CRITICAL Reference: STI-20261108-054956-45-138-12-58 show less	Web App Attack
🇧🇪 35.195.19.202	9 hours ago	WordPress exploitation attempts detected against a public web server. 94 suspicious requests 68 cri ... show more WordPress exploitation attempts detected against a public web server. 94 suspicious requests 68 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /web.config GET /vendor/composer/installed.json Risk level: CRITICAL Reference: STI-20261108-014936-35-195-19-202 show less	Bad Web Bot
🇧🇪 34.38.141.52	15 hours ago	WordPress exploitation attempts detected against a public web server. 94 suspicious requests 68 cri ... show more WordPress exploitation attempts detected against a public web server. 94 suspicious requests 68 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /web.config GET /vendor/composer/installed.json Risk level: CRITICAL Reference: STI-20261107-194916-34-38-141-52 show less	Bad Web Bot
🇨🇭 172.161.40.129	18 hours ago	Automated web application probing detected against a public web server. 15 suspicious requests 2 cr ... show more Automated web application probing detected against a public web server. 15 suspicious requests 2 critical requests Observed requests: GET /css.php GET /cong.php GET /alfa.php GET /404.php GET /zwso.php Risk level: CRITICAL Reference: STI-20261107-164858-172-161-40-129 show less	Hacking Web App Attack
🇳🇱 91.92.40.12	21 hours ago	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 16 blocked IDS ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 16 blocked IDS/IPS events. Observed IDS/IPS evidence: - ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-30T08:39:10.922Z Last seen: 2026-11-07T12:33:02.974Z Reference: STI-20261107-133302-91-92-40-12 show less	Hacking Web App Attack
🇺🇸 34.170.192.34	06 Nov 2026	Git repository probing detected against a public web server. 13 suspicious requests 13 critical req ... show more Git repository probing detected against a public web server. 13 suspicious requests 13 critical requests Observed requests: GET /.git/config GET /.env.test GET /.env.staging Risk level: CRITICAL Reference: STI-20261106-224800-34-170-192-34 show less	Web App Attack
🇸🇬 34.87.57.65	06 Nov 2026	WordPress exploitation attempts detected against a public web server. 46 suspicious requests 39 cri ... show more WordPress exploitation attempts detected against a public web server. 46 suspicious requests 39 critical requests Observed requests: GET /wp-login.php?redirect_to=https%3A%2F%2Fwp.mrsky.nl%2Fwp-admin%2F&reauth=1 GET /wp-admin/ GET /.env POST /graphql POST /api/graphql Risk level: CRITICAL Reference: STI-20261106-204746-34-87-57-65 show less	Hacking Web App Attack
🇳🇱 91.92.40.12	06 Nov 2026	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 14 blocked IDS ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 14 blocked IDS/IPS events. Observed IDS/IPS evidence: - ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-30T08:39:10.922Z Last seen: 2026-11-05T23:57:44.007Z Reference: STI-20261106-005744-91-92-40-12 show less	Hacking Web App Attack
🇺🇸 159.65.40.237	06 Nov 2026	Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IP ... show more Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-11-06T09:33:18.798Z Last seen: 2026-11-06T09:33:18.798Z Reference: STI-20261106-103318-159-65-40-237 show less	SQL Injection Web App Attack
🇺🇸 52.242.194.83	05 Nov 2026	WordPress exploitation attempts detected against a public web server. 8 suspicious requests 2 criti ... show more WordPress exploitation attempts detected against a public web server. 8 suspicious requests 2 critical requests Observed requests: GET /zwso.php GET /xwpg.php GET /ws.php GET /wp-content/themes/index.php GET /wp-content/plugins/hellopress/wp_filemanager.php Risk level: CRITICAL Reference: STI-20261105-191601-52-242-194-83 show less	Hacking Web App Attack
🇳🇱 91.92.40.12	05 Nov 2026	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 11 blocked IDS ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 11 blocked IDS/IPS events. Observed IDS/IPS evidence: - ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-30T08:39:10.922Z Last seen: 2026-11-05T09:17:19.182Z Reference: STI-20261105-101719-91-92-40-12 show less	Hacking Web App Attack
🇺🇸 45.55.81.152	05 Nov 2026	Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IP ... show more Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-11-05T12:02:10.076Z Last seen: 2026-11-05T12:02:10.076Z Reference: STI-20261105-130210-45-55-81-152 show less	SQL Injection Web App Attack
🇧🇪 34.78.238.133	05 Nov 2026	Sensitive file and configuration probing detected against a public web server. 52 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 52 suspicious requests 45 critical requests Observed requests: GET /.env POST /v1/graphql POST /graphql POST /api/graphql GET /z9x8c7v6b5-debug-trigger-wp.mrsky.nl Risk level: CRITICAL Reference: STI-20261105-071457-34-78-238-133 show less	Hacking Web App Attack
🇮🇱 34.165.20.197	05 Nov 2026	Sensitive file and configuration probing detected against a public web server. 130 suspicious reque ... show more Sensitive file and configuration probing detected against a public web server. 130 suspicious requests 130 critical requests Observed requests: GET /zend/.env GET /yii/.env GET /www/.env GET /wp/.env Risk level: CRITICAL Reference: STI-20261105-041438-34-165-20-197 show less	Web App Attack
🇩🇪 34.32.55.104	04 Nov 2026	Git repository probing detected against a public web server. 48 suspicious requests 48 critical req ... show more Git repository probing detected against a public web server. 48 suspicious requests 48 critical requests Observed requests: GET /.git/config GET /.env.uat GET /.env.test Risk level: CRITICAL Reference: STI-20261105-001837-34-32-55-104 show less	Web App Attack
🇺🇸 67.102.183.166	04 Nov 2026	Git repository probing detected against a public web server. 16 suspicious requests 16 critical req ... show more Git repository probing detected against a public web server. 16 suspicious requests 16 critical requests Observed requests: HEAD /api/.env HEAD /web/.env HEAD /laravel/.env HEAD /.git/config HEAD /.env.save Risk level: VERY_HIGH Reference: STI-20261105-000959-67-102-183-166 show less	Web App Attack
🇧🇪 34.156.64.240	04 Nov 2026	WordPress exploitation attempts detected against a public web server. 27 suspicious requests 9 crit ... show more WordPress exploitation attempts detected against a public web server. 27 suspicious requests 9 critical requests Observed requests: GET /config.js HTTP/2.0 GET /wp-content/debug.log HTTP/2.0 GET /wp-config.php.bak HTTP/2.0 GET /web.config HTTP/2.0 GET /vendor/composer/installed.json HTTP/2.0 Risk level: CRITICAL Reference: STI-20261104-234417-34-156-64-240 show less	Web App Attack
🇧🇪 34.62.9.55	04 Nov 2026	WordPress exploitation attempts detected against a public web server. 26 suspicious requests 9 crit ... show more WordPress exploitation attempts detected against a public web server. 26 suspicious requests 9 critical requests Observed requests: GET /assets/index-oucW8uP5.js HTTP/2.0 GET /wp-content/debug.log HTTP/2.0 GET /wp-config.php.bak HTTP/2.0 GET /web.config HTTP/2.0 GET /vendor/composer/installed.json HTTP/2.0 Risk level: CRITICAL Reference: STI-20261104-141338-34-62-9-55 show less	Web App Attack
🇳🇱 91.92.40.12	04 Nov 2026	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 10 blocked IDS ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 10 blocked IDS/IPS events. Observed IDS/IPS evidence: - ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-30T08:39:10.922Z Last seen: 2026-11-03T21:18:24.158Z Reference: STI-20261103-221824-91-92-40-12 show less	Hacking Web App Attack
🇺🇸 136.108.216.24	04 Nov 2026	Automated web application probing detected against a public web server. 497 suspicious requests 413 ... show more Automated web application probing detected against a public web server. 497 suspicious requests 413 critical requests Observed requests: GET /console POST /v1/graphql POST /graphql POST /api/graphql GET /.zshrc Risk level: VERY_HIGH Reference: STI-20261104-111325-136-108-216-24 show less	Hacking Web App Attack
🇳🇱 45.115.26.203	04 Nov 2026	Sensitive file and configuration probing detected against a public web server. 29 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 29 suspicious requests 21 critical requests Observed requests: GET /test.php GET /src/.env GET /server-status GET /.pypirc GET /pi.php Risk level: CRITICAL Reference: STI-20261104-031240-45-115-26-203 show less	Web App Attack
🇳🇱 185.218.86.21	03 Nov 2026	Inbound WordPress exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocke ... show more Inbound WordPress exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-11-03T16:10:52.655Z Last seen: 2026-11-03T16:10:52.655Z Reference: STI-20261103-171052-185-218-86-21 show less	Hacking Web App Attack
🇳🇱 91.92.40.12	03 Nov 2026	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 7 blocked IDS/ ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 7 blocked IDS/IPS events. Observed IDS/IPS evidence: - ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-30T08:39:10.922Z Last seen: 2026-11-03T12:09:23.828Z Reference: STI-20261103-130923-91-92-40-12 show less	Hacking Web App Attack
🇪🇸 34.175.129.146	03 Nov 2026	Sensitive file and configuration probing detected against a public web server. 69 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 69 suspicious requests 69 critical requests Observed requests: GET /www/.env GET /web/.env GET /var/www/html/.env GET /var/www/.env Risk level: CRITICAL Reference: STI-20261103-054122-34-175-129-146 show less	Web App Attack
🇧🇪 207.175.85.46	03 Nov 2026	WordPress exploitation attempts detected against a public web server. 94 suspicious requests 68 cri ... show more WordPress exploitation attempts detected against a public web server. 94 suspicious requests 68 critical requests Observed requests: GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdc GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /web.config Risk level: CRITICAL Reference: STI-20261103-044116-207-175-85-46 show less	Bad Web Bot