AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Mr. Sky , the webmaster of mrsky.nl, joined AbuseIPDB in February 2020 and has reported 657 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇯🇵 58.3.134.126	21 Oct 2026	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/ ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET EXPLOIT MVPower DVR Shell UCE Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-21T03:06:29.845Z Last seen: 2026-10-21T03:06:29.845Z Reference: STI-20261021-050629-58-3-134-126 show less	Hacking Web App Attack
🇩🇪 93.152.221.156	21 Oct 2026	Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 3 blocked IDS/IP ... show more Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 3 blocked IDS/IPS events. Observed IDS/IPS evidence: - ET WEB_SERVER WEB-PHP phpinfo access Target service: HTTP / TCP port 80 Severity: 7/10 First seen: 2026-08-22T19:45:56.507Z Last seen: 2026-10-21T00:00:57.144Z Reference: STI-20261021-020057-93-152-221-156 show less	Web App Attack
🇸🇪 13.49.66.194	21 Oct 2026	Sensitive file and configuration probing detected against a public web server. 39 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 39 suspicious requests 39 critical requests Observed requests: GET /web/.env GET /src/.env GET /site/.env GET /server/.env Risk level: HIGH Reference: STI-20261021-024426-13-49-66-194 show less	Web App Attack
🇺🇸 136.108.205.8	20 Oct 2026	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 2 blocked IDS/ ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 2 blocked IDS/IPS events. Observed IDS/IPS evidence: - ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-19T12:22:28.448Z Last seen: 2026-10-19T12:33:50.094Z Reference: STI-20261019-142228-136-108-205-8 show less	Hacking Web App Attack
🇧🇪 34.14.99.143	20 Oct 2026	WordPress exploitation attempts detected against a public web server. 91 suspicious requests 68 cri ... show more WordPress exploitation attempts detected against a public web server. 91 suspicious requests 68 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261020-074152-34-14-99-143 show less	Bad Web Bot
🇯🇵 34.97.202.88	20 Oct 2026	Git repository probing detected against a public web server. 26 suspicious requests 26 critical req ... show more Git repository probing detected against a public web server. 26 suspicious requests 26 critical requests Observed requests: GET /.git/config GET /.env.uat GET /.env.test Risk level: HIGH Reference: STI-20261020-021131-34-97-202-88 show less	Web App Attack
🇸🇬 136.110.38.86	19 Oct 2026	Automated web application probing detected against a public web server. 259 suspicious requests 221 ... show more Automated web application probing detected against a public web server. 259 suspicious requests 221 critical requests Observed requests: GET /robots.txt POST /v1/graphql POST /_next Risk level: CRITICAL Reference: STI-20261019-194948-136-110-38-86 show less	Hacking Web App Attack
🇺🇸 136.108.205.8	19 Oct 2026	Automated web application probing detected against a public web server. 5 suspicious requests 5 cri ... show more Automated web application probing detected against a public web server. 5 suspicious requests 5 critical requests Observed requests: POST /_next POST /graphql POST /api/graphql GET /z9x8c7v6b5-debug-trigger-monitor.mrsky.nl Risk level: CRITICAL Reference: STI-20261019-144927-136-108-205-8 show less	Hacking Web App Attack
🇺🇸 163.192.101.166	19 Oct 2026	Sensitive file and configuration probing detected against a public web server. 25 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 25 suspicious requests 18 critical requests Observed requests: GET /workspace/.env.local GET /workspace/.env GET /v1/models GET /start.sh GET /runpod-volume/.env Risk level: CRITICAL Reference: STI-20261019-134919-163-192-101-166 show less	Web App Attack
🇺🇸 136.107.240.111	19 Oct 2026	Automated web application probing detected against a public web server. 313 suspicious requests 273 ... show more Automated web application probing detected against a public web server. 313 suspicious requests 273 critical requests Observed requests: POST /v1/graphql POST /_next POST /graphql POST /api/graphql Risk level: CRITICAL Reference: STI-20261019-131917-136-107-240-111 show less	Hacking Web App Attack
🇮🇩 34.34.217.121	19 Oct 2026	Git repository probing detected against a public web server. 22 suspicious requests 22 critical req ... show more Git repository probing detected against a public web server. 22 suspicious requests 22 critical requests Observed requests: GET /.git/config GET /.env.uat GET /.env.test Risk level: VERY_HIGH Reference: STI-20261019-124903-34-34-217-121 show less	Web App Attack
🇦🇺 20.193.50.139	19 Oct 2026	WordPress exploitation attempts detected against a public web server. 12 suspicious requests 3 crit ... show more WordPress exploitation attempts detected against a public web server. 12 suspicious requests 3 critical requests Observed requests: GET /wp-content/plugins/hellopress/wp_filemanager.php GET /this_is_a_new_hello_world.php GET /sweg.php GET //ss.php GET /samll.php Risk level: CRITICAL Reference: STI-20261019-084848-20-193-50-139 show less	Web App Attack
🇧🇪 34.156.56.233	19 Oct 2026	WordPress exploitation attempts detected against a public web server. 93 suspicious requests 70 cri ... show more WordPress exploitation attempts detected against a public web server. 93 suspicious requests 70 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261019-041822-34-156-56-233 show less	Bad Web Bot
🇺🇸 34.50.163.157	19 Oct 2026	Sensitive file and configuration probing detected against a public web server. 90 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 90 suspicious requests 90 critical requests Observed requests: GET /web/.env GET /src/.env GET /site/.env GET /server/.env Risk level: HIGH Reference: STI-20261019-024812-34-50-163-157 show less	Web App Attack
🇸🇬 188.166.247.21	18 Oct 2026	Git repository probing detected against a public web server. 14 suspicious requests 14 critical req ... show more Git repository probing detected against a public web server. 14 suspicious requests 14 critical requests Observed requests: GET /.git/config GET /.env.test GET /.env.staging Risk level: CRITICAL Reference: STI-20261018-234808-188-166-247-21 show less	Web App Attack
🇺🇸 185.201.227.49	18 Oct 2026	Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked ... show more Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-18T20:12:52.586Z Last seen: 2026-10-18T20:12:52.586Z Reference: STI-20261018-221252-185-201-227-49 show less	Hacking Web App Attack
🇺🇿 95.130.227.78	18 Oct 2026	Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked ... show more Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-18T11:18:28.313Z Last seen: 2026-10-18T11:18:28.313Z Reference: STI-20261018-131828-95-130-227-78 show less	Hacking Web App Attack
🇦🇺 52.187.230.78	18 Oct 2026	Automated web application probing detected against a public web server. 6 suspicious requests 2 cri ... show more Automated web application probing detected against a public web server. 6 suspicious requests 2 critical requests Observed requests: GET /zv.update.php GET /zpore1.php GET /zhidagen.php?p= GET /z70.php GET /z60.php?p= Risk level: VERY_HIGH Reference: STI-20261018-074652-52-187-230-78 show less	Web App Attack
🇧🇪 130.211.55.221	17 Oct 2026	WordPress exploitation attempts detected against a public web server. 24 suspicious requests 9 crit ... show more WordPress exploitation attempts detected against a public web server. 24 suspicious requests 9 critical requests Observed requests: GET /config.js HTTP/2.0 GET /zabbix/conf/zabbix.conf.php HTTP/2.0 GET /wp-content/debug.log HTTP/2.0 GET /wp-config.php.bak HTTP/2.0 GET /vendor/composer/installed.json HTTP/2.0 Risk level: CRITICAL Reference: STI-20261017-221709-130-211-55-221 show less	Web App Attack
🇧🇪 35.241.178.74	17 Oct 2026	WordPress exploitation attempts detected against a public web server. 91 suspicious requests 68 cri ... show more WordPress exploitation attempts detected against a public web server. 91 suspicious requests 68 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261017-214707-35-241-178-74 show less	Bad Web Bot
🇧🇪 34.79.12.228	17 Oct 2026	WordPress exploitation attempts detected against a public web server. 81 suspicious requests 59 cri ... show more WordPress exploitation attempts detected against a public web server. 81 suspicious requests 59 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261017-201707-34-79-12-228 show less	Bad Web Bot
🇳🇱 34.178.225.147	17 Oct 2026	WordPress exploitation attempts detected against a public web server. 92 suspicious requests 68 cri ... show more WordPress exploitation attempts detected against a public web server. 92 suspicious requests 68 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261017-201707-34-178-225-147 show less	Bad Web Bot
🇧🇬 79.124.58.82	17 Oct 2026	WordPress exploitation attempts detected against a public web server. 260 suspicious requests 204 c ... show more WordPress exploitation attempts detected against a public web server. 260 suspicious requests 204 critical requests Observed requests: GET /.yarnrc GET /yarn.lock GET /www/.env GET /wp-config.php.save GET /wp-config.php.orig Risk level: CRITICAL Reference: STI-20261017-151649-79-124-58-82 show less	Bad Web Bot
🇯🇵 34.84.162.244	17 Oct 2026	Automated web application probing detected against a public web server. 54 suspicious requests 34 c ... show more Automated web application probing detected against a public web server. 54 suspicious requests 34 critical requests Observed requests: GET /robots.txt POST /v1/graphql POST /_next Risk level: HIGH Reference: STI-20261017-111640-34-84-162-244 show less	Hacking Web App Attack
🇵🇱 45.138.12.68	17 Oct 2026	Sensitive file and configuration probing detected against a public web server. 20 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 20 suspicious requests 13 critical requests Observed requests: GET /.env.openai.local GET /.env.openai GET /.env.llm GET /.env.gpt Risk level: CRITICAL Reference: STI-20261017-094642-45-138-12-68 show less	Web App Attack