AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Mr. Sky , the webmaster of mrsky.nl, joined AbuseIPDB in February 2020 and has reported 667 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇨🇦 159.203.42.55	12 Oct 2026	Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IP ... show more Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-12T04:29:08.744Z Last seen: 2026-10-12T04:29:08.744Z Reference: STI-20261012-062908-159-203-42-55 show less	SQL Injection Web App Attack
🇳🇱 193.47.62.168	12 Oct 2026	WordPress exploitation attempts detected against a public web server. 36 suspicious requests 12 cri ... show more WordPress exploitation attempts detected against a public web server. 36 suspicious requests 12 critical requests Observed requests: GET /wp-login.php GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings GET /wp-includes/js/wp-emoji-release.min.js GET /wp-content/mysql.sql Risk level: CRITICAL Reference: STI-20261012-044308-193-47-62-168 show less	Web App Attack
🇺🇸 23.100.83.23	11 Oct 2026	WordPress exploitation attempts detected against a public web server. 7 suspicious requests 2 criti ... show more WordPress exploitation attempts detected against a public web server. 7 suspicious requests 2 critical requests Observed requests: GET /zwso.php GET /xwpg.php GET /xivoefjr.php GET /ws.php GET /wp-content/themes/index.php Risk level: CRITICAL Reference: STI-20261012-004305-23-100-83-23 show less	Hacking Web App Attack
🇳🇱 2.26.231.154	11 Oct 2026	Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked ... show more Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-11T21:14:56.141Z Last seen: 2026-10-11T21:14:56.141Z Reference: STI-20261011-231456-2-26-231-154 show less	Hacking Web App Attack
🇧🇪 34.79.59.9	11 Oct 2026	WordPress exploitation attempts detected against a public web server. 23 suspicious requests 9 crit ... show more WordPress exploitation attempts detected against a public web server. 23 suspicious requests 9 critical requests Observed requests: GET /assets/index-CL-Ur1FB.js HTTP/2.0 GET /wp-content/debug.log HTTP/2.0 GET /wp-config.php.bak HTTP/2.0 GET /vendor/composer/installed.json HTTP/2.0 GET /settings.json HTTP/2.0 Risk level: CRITICAL Reference: STI-20261011-201334-34-79-59-9 show less	Web App Attack
🇵🇱 45.138.12.185	11 Oct 2026	WordPress exploitation attempts detected against a public web server. 115 suspicious requests 79 cr ... show more WordPress exploitation attempts detected against a public web server. 115 suspicious requests 79 critical requests Observed requests: GET /wp-config.php GET /web/.env GET /terraform.tfvars GET /telescope GET /.streamlit/secrets.toml Risk level: CRITICAL Reference: STI-20261011-171323-45-138-12-185 show less	Hacking Web App Attack
🇩🇪 93.152.221.20	11 Oct 2026	Git repository probing detected against a public web server. 15 suspicious requests 9 critical requ ... show more Git repository probing detected against a public web server. 15 suspicious requests 9 critical requests Observed requests: GET /wp-config.php GET /server.js GET /phpinfo.php GET /info.php GET /.git/config Risk level: VERY_HIGH Reference: STI-20261011-164125-93-152-221-20 show less	Web App Attack
🇵🇱 45.138.12.27	11 Oct 2026	WordPress exploitation attempts detected against a public web server. 99 suspicious requests 76 cri ... show more WordPress exploitation attempts detected against a public web server. 99 suspicious requests 76 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /workspace/.env GET /work/.env GET /web/.env Risk level: CRITICAL Reference: STI-20261011-154311-45-138-12-27 show less	Bad Web Bot
🇧🇪 34.156.249.47	11 Oct 2026	WordPress exploitation attempts detected against a public web server. 99 suspicious requests 76 cri ... show more WordPress exploitation attempts detected against a public web server. 99 suspicious requests 76 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261011-134307-34-156-249-47 show less	Bad Web Bot
🇧🇪 35.210.99.171	11 Oct 2026	WordPress exploitation attempts detected against a public web server. 72 suspicious requests 4 crit ... show more WordPress exploitation attempts detected against a public web server. 72 suspicious requests 4 critical requests Observed requests: GET /www/phpinfo.php GET /wp-admin/phpinfo.php GET /webroot/index.php/_environment GET /webmail/phpinfo.php Risk level: VERY_HIGH Reference: STI-20261011-134308-35-210-99-171 show less	Web App Attack
🇺🇸 194.42.196.44	11 Oct 2026	Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/ ... show more Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SPECIFIC_APPS Joomla Improper Access Control to Webservice Endpoints (CVE-2023-23752) Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-11T03:49:31.794Z Last seen: 2026-10-11T03:49:31.794Z Reference: STI-20261011-054931-194-42-196-44 show less	Hacking Web App Attack
🇸🇬 134.185.80.140	11 Oct 2026	Sensitive file and configuration probing detected against a public web server. 50 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 50 suspicious requests 36 critical requests Observed requests: GET /.well-known/security.txt GET /web/.env GET /.streamlit/secrets.toml GET /src/.env GET /site.webmanifest Risk level: CRITICAL Reference: STI-20261011-051246-134-185-80-140 show less	Web App Attack
🇯🇵 20.210.166.54	11 Oct 2026	Automated web application probing detected against a public web server. 6 suspicious requests 2 cri ... show more Automated web application probing detected against a public web server. 6 suspicious requests 2 critical requests Observed requests: GET /zpore1.php GET /z70.php GET /z60.php?p= GET /xyz.php GET /xor.php Risk level: VERY_HIGH Reference: STI-20261011-034236-20-210-166-54 show less	Web App Attack
🇳🇱 93.123.109.53	10 Oct 2026	Automated web application probing detected against a public web server. 193 suspicious requests 151 ... show more Automated web application probing detected against a public web server. 193 suspicious requests 151 critical requests Observed requests: GET /.zshrc GET /.zsh_history GET /www.zip GET /www.tar.gz GET /www/.svn/entries Risk level: CRITICAL Reference: STI-20261011-004231-93-123-109-53 show less	Bad Web Bot
🇧🇪 34.79.51.100	10 Oct 2026	WordPress exploitation attempts detected against a public web server. 97 suspicious requests 73 cri ... show more WordPress exploitation attempts detected against a public web server. 97 suspicious requests 73 critical requests Observed requests: GET /www/config/.env GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /web/config/.env Risk level: CRITICAL Reference: STI-20261010-141223-34-79-51-100 show less	Bad Web Bot
🇵🇰 103.179.240.183	10 Oct 2026	Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IP ... show more Inbound malicious web activity detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER WGET Command Specifying Output in HTTP Headers Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-10T09:50:47.175Z Last seen: 2026-10-10T09:50:47.175Z Reference: STI-20261010-115047-103-179-240-183 show less	Web App Attack
🇮🇳 20.219.135.120	10 Oct 2026	WordPress exploitation attempts detected against a public web server. 8 suspicious requests 2 criti ... show more WordPress exploitation attempts detected against a public web server. 8 suspicious requests 2 critical requests Observed requests: GET /wp-trackback.php GET /wp-the.php GET /wp-links-opml.php GET /w.php GET /wp-content/plugins/hellopress/wp_filemanager.php Risk level: CRITICAL Reference: STI-20261010-091208-20-219-135-120 show less	Hacking Web App Attack
🇮🇳 4.224.122.112	09 Oct 2026	Automated web application probing detected against a public web server. 6 suspicious requests 2 cri ... show more Automated web application probing detected against a public web server. 6 suspicious requests 2 critical requests Observed requests: GET /zoo2.php GET /z70.php GET /z60.php?p= GET /xwpg.php GET /x33.php Risk level: VERY_HIGH Reference: STI-20261009-151139-4-224-122-112 show less	Web App Attack
🇮🇳 20.219.160.77	09 Oct 2026	Automated web application probing detected against a public web server. 6 suspicious requests 2 cri ... show more Automated web application probing detected against a public web server. 6 suspicious requests 2 critical requests Observed requests: GET /z60.php?p= GET /wsd.php GET /wp-wxyy.php GET /wp_.php GET /wp-omo.php Risk level: VERY_HIGH Reference: STI-20261009-081131-20-219-160-77 show less	Web App Attack
🇺🇿 89.126.214.24	09 Oct 2026	Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked ... show more Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS. Observed 1 blocked IDS/IPS event. Observed IDS/IPS evidence: - ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt Target service: HTTP / TCP port 80 Severity: 9/10 First seen: 2026-10-09T04:19:38.241Z Last seen: 2026-10-09T04:19:38.241Z Reference: STI-20261009-061938-89-126-214-24 show less	Hacking Web App Attack
🇯🇵 40.74.77.37	09 Oct 2026	WordPress exploitation attempts detected against a public web server. 6 suspicious requests 3 criti ... show more WordPress exploitation attempts detected against a public web server. 6 suspicious requests 3 critical requests Observed requests: GET /z60.php?p= GET /wsd.php GET /wp-content/plugins/hellopress/wp_filemanager.php GET /wp_blog_footer.php GET /wp-admin/js/index.php Risk level: VERY_HIGH Reference: STI-20261009-054119-40-74-77-37 show less	Web App Attack
🇧🇪 34.53.184.30	08 Oct 2026	WordPress exploitation attempts detected against a public web server. 94 suspicious requests 71 cri ... show more WordPress exploitation attempts detected against a public web server. 94 suspicious requests 71 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261008-231129-34-53-184-30 show less	Bad Web Bot
🇧🇪 35.189.229.134	08 Oct 2026	WordPress exploitation attempts detected against a public web server. 24 suspicious requests 9 crit ... show more WordPress exploitation attempts detected against a public web server. 24 suspicious requests 9 critical requests Observed requests: GET /config.js HTTP/2.0 GET /wp-content/debug.log HTTP/2.0 GET /wp-config.php.bak HTTP/2.0 GET /vendor/composer/installed.json HTTP/2.0 GET /static/media/index-Cx1kKwl6.js.map HTTP/2.0 Risk level: CRITICAL Reference: STI-20261008-221123-35-189-229-134 show less	Web App Attack
🇧🇪 104.199.36.53	08 Oct 2026	WordPress exploitation attempts detected against a public web server. 95 suspicious requests 71 cri ... show more WordPress exploitation attempts detected against a public web server. 95 suspicious requests 71 critical requests Observed requests: GET /wp-content/debug.log GET /wp-config.php.bak GET /web/.env GET /vendor/composer/installed.json GET /v2/.env Risk level: CRITICAL Reference: STI-20261008-214119-104-199-36-53 show less	Bad Web Bot
🇧🇪 35.210.179.201	08 Oct 2026	Sensitive file and configuration probing detected against a public web server. 99 suspicious reques ... show more Sensitive file and configuration probing detected against a public web server. 99 suspicious requests 99 critical requests Observed requests: GET /zend/.env GET /yii/.env GET /www/.env GET /wp/.env Risk level: CRITICAL Reference: STI-20261008-191111-35-210-179-201 show less	Web App Attack