AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GFVAAServicesLtd , the webmaster of gfvaa.com, joined AbuseIPDB in March 2020 and has reported 6,098 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 192.241.221.78	17 Sep 2022	192.241.221.78 - - [18/Sep/2022:04:35:35 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.221.78 - - [18/Sep/2022:04:35:35 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 208.115.115.103	17 Sep 2022	208.115.115.103 - - [17/Sep/2022:21:05:58 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" ... show more 208.115.115.103 - - [17/Sep/2022:21:05:58 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇺🇸 192.241.218.240	16 Sep 2022	192.241.218.240 - - [17/Sep/2022:04:34:59 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.218.240 - - [17/Sep/2022:04:34:59 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.196.214	16 Sep 2022	192.241.196.214 - - [16/Sep/2022:20:20:29 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.196.214 - - [16/Sep/2022:20:20:29 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇮🇹 2.226.225.240	16 Sep 2022	2.226.225.240 - - [16/Sep/2022:16:43:45 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" " ... show more 2.226.225.240 - - [16/Sep/2022:16:43:45 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇺🇸 192.241.219.173	15 Sep 2022	192.241.219.173 - - [16/Sep/2022:04:34:39 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.219.173 - - [16/Sep/2022:04:34:39 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇬🇧 178.62.119.124	15 Sep 2022	178.62.119.124 - - [15/Sep/2022:16:14:01 +0100] "GET /system_api.php HTTP/1.1" 400 666 "-" "Mozilla/ ... show more 178.62.119.124 - - [15/Sep/2022:16:14:01 +0100] "GET /system_api.php HTTP/1.1" 400 666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 178.62.119.124 - - [15/Sep/2022:16:14:01 +0100] "GET /system_api.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Hacking Web App Attack
🇳🇱 45.148.120.127	14 Sep 2022	2022/09/15 04:43:55 [error] 784#784: 23 user "1KRJfSQj1MTnbGaPiTnuLE5J4FkDcQURe5" was not found in ... show more 2022/09/15 04:43:55 [error] 784#784: 23 user "1KRJfSQj1MTnbGaPiTnuLE5J4FkDcQURe5" was not found in "/etc/nginx/.htpasswd", client: 45.148.120.127, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.171.2.25" 2022/09/15 04:43:55 [error] 784#784: 23 user "1KRJfSQj1MTnbGaPiTnuLE5J4FkDcQURe5" was not found in "/etc/nginx/.htpasswd", client: 45.148.120.127, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.171.2.25" 2022/09/15 04:43:55 [error] 784#784: 24 user "0x124e3cada852b7f5ba72181dc37666fb3d705382" was not found in "/etc/nginx/.htpasswd", client: 45.148.120.127, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.171.2.25" 2022/09/15 04:43:55 [error] 784#784: *24 user "0x124e3cada852b7f5ba72181dc37666fb3d705382" was not found in "/etc/nginx/.htpasswd", client: 45.148.120.127, server: www.giffard.co.uk, request: "POST / HTTP/1.1", host: "86.171.2.25" ... show less	Brute-Force
🇧🇷 181.219.149.148	14 Sep 2022	181.219.149.148 - - [14/Sep/2022:22:52:03 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" ... show more 181.219.149.148 - - [14/Sep/2022:22:52:03 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇺🇸 35.133.6.39	14 Sep 2022	35.133.6.39 - - [14/Sep/2022:22:12:24 +0100] "GET /common/info.cgi HTTP/1.1" 401 188 "-" "Mozilla/5. ... show more 35.133.6.39 - - [14/Sep/2022:22:12:24 +0100] "GET /common/info.cgi HTTP/1.1" 401 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" ... show less	Hacking Web App Attack
🇺🇸 192.241.208.175	14 Sep 2022	192.241.208.175 - - [14/Sep/2022:14:26:35 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.208.175 - - [14/Sep/2022:14:26:35 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.216.26	13 Sep 2022	192.241.216.26 - - [14/Sep/2022:04:33:13 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.216.26 - - [14/Sep/2022:04:33:13 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇰🇷 218.55.63.134	13 Sep 2022	218.55.63.134 - - [13/Sep/2022:19:06:37 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" " ... show more 218.55.63.134 - - [13/Sep/2022:19:06:37 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇮🇹 213.45.162.41	13 Sep 2022	213.45.162.41 - - [13/Sep/2022:14:57:16 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" " ... show more 213.45.162.41 - - [13/Sep/2022:14:57:16 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇺🇸 192.241.194.198	13 Sep 2022	192.241.194.198 - - [13/Sep/2022:12:00:59 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.194.198 - - [13/Sep/2022:12:00:59 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.215.230	12 Sep 2022	192.241.215.230 - - [13/Sep/2022:04:32:45 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.215.230 - - [13/Sep/2022:04:32:45 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.208.63	12 Sep 2022	192.241.208.63 - - [12/Sep/2022:09:12:15 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Moz ... show more 192.241.208.63 - - [12/Sep/2022:09:12:15 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.216.51	11 Sep 2022	192.241.216.51 - - [12/Sep/2022:04:32:31 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.216.51 - - [12/Sep/2022:04:32:31 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 147.182.161.193	11 Sep 2022	147.182.161.193 - - [12/Sep/2022:02:38:31 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" ... show more 147.182.161.193 - - [12/Sep/2022:02:38:31 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇷🇴 5.13.113.50	11 Sep 2022	5.13.113.50 - - [11/Sep/2022:19:55:08 +0100] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozilla/5. ... show more 5.13.113.50 - - [11/Sep/2022:19:55:08 +0100] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" ... show less	Hacking Web App Attack
🇬🇧 92.21.179.157	11 Sep 2022	92.21.179.157 - - [11/Sep/2022:11:06:49 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" " ... show more 92.21.179.157 - - [11/Sep/2022:11:06:49 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇷🇺 152.89.196.211	11 Sep 2022	152.89.196.211 - - [11/Sep/2022:11:03:40 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more 152.89.196.211 - - [11/Sep/2022:11:03:40 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.216.15	10 Sep 2022	192.241.216.15 - - [11/Sep/2022:04:30:29 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.216.15 - - [11/Sep/2022:04:30:29 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇿🇦 197.234.159.72	10 Sep 2022	197.234.159.72 - - [11/Sep/2022:00:26:57 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" ... show more 197.234.159.72 - - [11/Sep/2022:00:26:57 +0100] "POST /spywall/timeConfig.php HTTP/1.1" 400 166 "-" "XTC" ... show less	Hacking Web App Attack
🇩🇪 194.233.164.177	10 Sep 2022	194.233.164.177 - - [10/Sep/2022:23:46:16 +0100] "GET /info.php HTTP/1.1" 401 188 "-" "Go-http-clien ... show more 194.233.164.177 - - [10/Sep/2022:23:46:16 +0100] "GET /info.php HTTP/1.1" 401 188 "-" "Go-http-client/1.1" ... show less	Hacking Web App Attack