AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GFVAAServicesLtd , the webmaster of gfvaa.com, joined AbuseIPDB in March 2020 and has reported 6,098 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 192.241.218.58	03 Oct 2022	192.241.218.58 - - [03/Oct/2022:11:16:06 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Moz ... show more 192.241.218.58 - - [03/Oct/2022:11:16:06 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇳🇱 185.213.175.12	02 Oct 2022	2022/10/03 00:50:12 [error] 1945#1945: 11 user "1JTsMyn4yizbEWCDqeuedShvC9CRjj4ByS" was not found i ... show more 2022/10/03 00:50:12 [error] 1945#1945: 11 user "1JTsMyn4yizbEWCDqeuedShvC9CRjj4ByS" was not found in "/etc/nginx/.htpasswd", client: 185.213.175.12, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.158.128.119" 2022/10/03 00:50:12 [error] 1945#1945: 11 user "1JTsMyn4yizbEWCDqeuedShvC9CRjj4ByS" was not found in "/etc/nginx/.htpasswd", client: 185.213.175.12, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.158.128.119" 2022/10/03 00:50:13 [error] 1945#1945: 12 user "0x83c7436af0085fb83b63c0f5870435f277d98dea" was not found in "/etc/nginx/.htpasswd", client: 185.213.175.12, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.158.128.119" 2022/10/03 00:50:13 [error] 1945#1945: *12 user "0x83c7436af0085fb83b63c0f5870435f277d98dea" was not found in "/etc/nginx/.htpasswd", client: 185.213.175.12, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.158.128.119" ... show less	Brute-Force
🇺🇸 192.241.216.34	02 Oct 2022	192.241.216.34 - - [02/Oct/2022:23:17:47 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.216.34 - - [02/Oct/2022:23:17:47 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.212.202	02 Oct 2022	192.241.212.202 - - [02/Oct/2022:21:55:18 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.212.202 - - [02/Oct/2022:21:55:18 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.218.145	02 Oct 2022	192.241.218.145 - - [02/Oct/2022:20:35:06 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.218.145 - - [02/Oct/2022:20:35:06 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.219.128	02 Oct 2022	192.241.219.128 - - [02/Oct/2022:07:08:57 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.219.128 - - [02/Oct/2022:07:08:57 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.213.78	01 Oct 2022	192.241.213.78 - - [02/Oct/2022:03:49:48 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.213.78 - - [02/Oct/2022:03:49:48 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.216.102	01 Oct 2022	192.241.216.102 - - [02/Oct/2022:02:47:48 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.216.102 - - [02/Oct/2022:02:47:48 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.219.192	01 Oct 2022	192.241.219.192 - - [02/Oct/2022:00:35:45 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.219.192 - - [02/Oct/2022:00:35:45 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.219.7	01 Oct 2022	192.241.219.7 - - [01/Oct/2022:19:33:21 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2 ... show more 192.241.219.7 - - [01/Oct/2022:19:33:21 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.217.208	01 Oct 2022	192.241.217.208 - - [01/Oct/2022:18:27:57 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.217.208 - - [01/Oct/2022:18:27:57 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 35.87.170.131	01 Oct 2022	35.87.170.131 - - [01/Oct/2022:16:05:58 +0100] "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" 401 ... show more 35.87.170.131 - - [01/Oct/2022:16:05:58 +0100] "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 44.234.65.60	01 Oct 2022	44.234.65.60 - - [01/Oct/2022:10:49:01 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozil ... show more 44.234.65.60 - - [01/Oct/2022:10:49:01 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.216.126	01 Oct 2022	192.241.216.126 - - [01/Oct/2022:07:33:50 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.216.126 - - [01/Oct/2022:07:33:50 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.213.183	01 Oct 2022	192.241.213.183 - - [01/Oct/2022:06:13:42 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.213.183 - - [01/Oct/2022:06:13:42 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.207.166	30 Sep 2022	192.241.207.166 - - [01/Oct/2022:04:54:48 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.207.166 - - [01/Oct/2022:04:54:48 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.218.142	30 Sep 2022	192.241.218.142 - - [01/Oct/2022:03:57:51 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.218.142 - - [01/Oct/2022:03:57:51 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇬🇧 178.79.186.199	30 Sep 2022	178.79.186.199 - - [30/Sep/2022:20:11:20 +0100] "GET /info.php HTTP/1.1" 401 188 "-" "Go-http-client ... show more 178.79.186.199 - - [30/Sep/2022:20:11:20 +0100] "GET /info.php HTTP/1.1" 401 188 "-" "Go-http-client/1.1" ... show less	Hacking Web App Attack
🇺🇸 50.18.144.79	30 Sep 2022	50.18.144.79 - - [30/Sep/2022:17:51:58 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozil ... show more 50.18.144.79 - - [30/Sep/2022:17:51:58 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.208.212	30 Sep 2022	192.241.208.212 - - [30/Sep/2022:05:04:31 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.208.212 - - [30/Sep/2022:05:04:31 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 23.148.145.231	29 Sep 2022	23.148.145.231 - - [29/Sep/2022:15:22:45 +0100] "GET /agent/timeclock.php HTTP/1.1" 401 590 "-" "Moz ... show more 23.148.145.231 - - [29/Sep/2022:15:22:45 +0100] "GET /agent/timeclock.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" ... show less	Hacking Web App Attack
🇸🇬 128.199.206.234	29 Sep 2022	128.199.206.234 - - [29/Sep/2022:06:28:15 +0100] "GET /system_api.php HTTP/1.1" 400 666 "-" "Mozilla ... show more 128.199.206.234 - - [29/Sep/2022:06:28:15 +0100] "GET /system_api.php HTTP/1.1" 400 666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.221.99	29 Sep 2022	192.241.221.99 - - [29/Sep/2022:05:03:42 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.221.99 - - [29/Sep/2022:05:03:42 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.206.119	28 Sep 2022	192.241.206.119 - - [28/Sep/2022:05:02:00 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.206.119 - - [28/Sep/2022:05:02:00 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 66.206.0.154	27 Sep 2022	66.206.0.154 - - [27/Sep/2022:22:22:47 +0100] "GET /owa/auth/logon.aspx HTTP/2.0" 401 188 "-" "okhtt ... show more 66.206.0.154 - - [27/Sep/2022:22:22:47 +0100] "GET /owa/auth/logon.aspx HTTP/2.0" 401 188 "-" "okhttp/4.10.0" ... show less	Hacking Web App Attack