AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GFVAAServicesLtd , the webmaster of gfvaa.com, joined AbuseIPDB in March 2020 and has reported 6,098 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 198.199.76.233	03 Aug 2023	"GET / HTTP/1.1"	Brute-Force SSH
🇰🇷 211.185.121.31	03 Aug 2023	"HEAD / HTTP/1.1"	Brute-Force SSH
🇺🇸 216.218.206.67	03 Aug 2023	"GET / HTTP/1.1"	Brute-Force SSH
🇭🇰 123.254.109.161	03 Aug 2023	Bad actor	Hacking Web App Attack
🇮🇳 117.201.228.180	03 Aug 2023	Bad actor	Hacking Web App Attack
🇫🇷 37.44.238.177	01 Aug 2023		Brute-Force
🇺🇸 192.241.212.71	08 Nov 2022	192.241.212.71 - - [08/Nov/2022:13:08:00 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Moz ... show more 192.241.212.71 - - [08/Nov/2022:13:08:00 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.194.251	06 Nov 2022	192.241.194.251 - - [06/Nov/2022:19:23:42 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.194.251 - - [06/Nov/2022:19:23:42 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.201.125	05 Nov 2022	192.241.201.125 - - [06/Nov/2022:03:11:22 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.201.125 - - [06/Nov/2022:03:11:22 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇱🇺 107.189.3.179	05 Nov 2022	107.189.3.179 - - [05/Nov/2022:08:37:05 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 4 ... show more 107.189.3.179 - - [05/Nov/2022:08:37:05 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 401 590 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.210.215	04 Nov 2022	192.241.210.215 - - [05/Nov/2022:03:09:56 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.210.215 - - [05/Nov/2022:03:09:56 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 198.199.95.173	04 Nov 2022	198.199.95.173 - - [05/Nov/2022:03:07:30 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Moz ... show more 198.199.95.173 - - [05/Nov/2022:03:07:30 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇬🇧 92.14.135.177	04 Nov 2022	92.14.135.177 - - [04/Nov/2022:09:16:10 +0000] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" " ... show more 92.14.135.177 - - [04/Nov/2022:09:16:10 +0000] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇺🇸 192.241.204.84	04 Nov 2022	192.241.204.84 - - [04/Nov/2022:09:01:13 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.204.84 - - [04/Nov/2022:09:01:13 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇵🇱 185.16.38.231	04 Nov 2022	185.16.38.231 - - [04/Nov/2022:06:35:46 +0000] "GET /wp-config.php-backup HTTP/1.1" 401 590 "-" "Moz ... show more 185.16.38.231 - - [04/Nov/2022:06:35:46 +0000] "GET /wp-config.php-backup HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.36 OPR/85.0.4341.75" ... show less	Hacking Web App Attack
🇺🇸 139.144.188.184	03 Nov 2022	139.144.188.184 - - [03/Nov/2022:20:27:22 +0000] "GET /info.php HTTP/1.1" 401 188 "-" "Go-http-clien ... show more 139.144.188.184 - - [03/Nov/2022:20:27:22 +0000] "GET /info.php HTTP/1.1" 401 188 "-" "Go-http-client/1.1" ... show less	Hacking Web App Attack
🇺🇸 159.65.241.220	03 Nov 2022	159.65.241.220 - - [03/Nov/2022:19:09:39 +0000] "GET /system_api.php HTTP/1.1" 400 666 "-" "Mozilla/ ... show more 159.65.241.220 - - [03/Nov/2022:19:09:39 +0000] "GET /system_api.php HTTP/1.1" 400 666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Hacking Web App Attack
🇷🇺 78.29.39.125	03 Nov 2022	78.29.39.125 - - [03/Nov/2022:09:56:44 +0000] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozilla/5 ... show more 78.29.39.125 - - [03/Nov/2022:09:56:44 +0000] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 198.199.95.194	03 Nov 2022	198.199.95.194 - - [03/Nov/2022:09:03:14 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 198.199.95.194 - - [03/Nov/2022:09:03:14 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 54.219.202.113	02 Nov 2022	54.219.202.113 - - [02/Nov/2022:04:18:42 +0000] "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" 401 ... show more 54.219.202.113 - - [02/Nov/2022:04:18:42 +0000] "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 13.52.220.220	01 Nov 2022	13.52.220.220 - - [02/Nov/2022:01:41:58 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozi ... show more 13.52.220.220 - - [02/Nov/2022:01:41:58 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ... show less	Hacking Web App Attack
🇨🇳 106.75.98.93	01 Nov 2022	106.75.98.93 - - [01/Nov/2022:13:10:26 +0000] "GET https://www.giffard.co.uk/cgi-bin/.%%32%65/.%%32% ... show more 106.75.98.93 - - [01/Nov/2022:13:10:26 +0000] "GET https://www.giffard.co.uk/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd HTTP/1.1" 400 166 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 198.199.118.88	01 Nov 2022	198.199.118.88 - - [01/Nov/2022:09:01:14 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 198.199.118.88 - - [01/Nov/2022:09:01:14 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.220.110	31 Oct 2022	192.241.220.110 - - [01/Nov/2022:01:04:43 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.220.110 - - [01/Nov/2022:01:04:43 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.216.202	31 Oct 2022	192.241.216.202 - - [31/Oct/2022:08:56:48 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.216.202 - - [31/Oct/2022:08:56:48 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack