AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User KitsuneTech , the webmaster of kitsunetech.com, joined AbuseIPDB in September 2020 and has reported 121,610 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇪🇸 158.158.105.63	05 Aug 2026	158.158.105.63 - - [05/Aug/2026:05:30:43 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 158.158.105.63 - - [05/Aug/2026:05:30:43 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 328 "-" "-" ... show less	Web App Attack
🇩🇪 20.170.17.213	05 Aug 2026	20.170.17.213 - - [05/Aug/2026:05:18:34 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.170.17.213 - - [05/Aug/2026:05:18:34 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 320 "-" "-" ... show less	Web App Attack
🇳🇴 20.100.169.152	05 Aug 2026	20.100.169.152 - - [05/Aug/2026:05:05:00 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.100.169.152 - - [05/Aug/2026:05:05:00 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 365 "-" "-" ... show less	Web App Attack
🇮🇹 4.232.147.36	05 Aug 2026	4.232.147.36 - - [05/Aug/2026:04:58:00 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.232.147.36 - - [05/Aug/2026:04:58:00 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 322 "-" "-" ... show less	Web App Attack
🇸🇪 20.91.199.21	05 Aug 2026	20.91.199.21 - - [05/Aug/2026:04:49:48 -0500] "GET /--wp-lgj.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 ... show more 20.91.199.21 - - [05/Aug/2026:04:49:48 -0500] "GET /--wp-lgj.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 4.232.185.206	05 Aug 2026	4.232.185.206 - - [05/Aug/2026:04:33:06 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 4.232.185.206 - - [05/Aug/2026:04:33:06 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 327 "-" "-" ... show less	Web App Attack
🇳🇴 20.100.187.246	05 Aug 2026	20.100.187.246 - - [05/Aug/2026:04:30:40 -0500] "GET /--wp-lgj.php HTTP/1.1" 301 284 "-" "Mozilla/5. ... show more 20.100.187.246 - - [05/Aug/2026:04:30:40 -0500] "GET /--wp-lgj.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 172.213.208.13	05 Aug 2026	172.213.208.13 - - [05/Aug/2026:04:23:17 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.213.208.13 - - [05/Aug/2026:04:23:17 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 320 "-" "-" ... show less	Web App Attack
🇳🇱 195.178.110.102	05 Aug 2026	195.178.110.102 - - [05/Aug/2026:04:16:58 -0500] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=g ... show more 195.178.110.102 - - [05/Aug/2026:04:16:58 -0500] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 301 336 "-" "vuln_scanner/3.1.0 (CVE-2026-4020)" ... show less	Web App Attack
🇨🇭 20.203.148.31	05 Aug 2026	20.203.148.31 - - [05/Aug/2026:04:13:49 -0500] "GET /--wp-lgj.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 ... show more 20.203.148.31 - - [05/Aug/2026:04:13:49 -0500] "GET /--wp-lgj.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 45.134.79.107	05 Aug 2026	45.134.79.107 - - [05/Aug/2026:03:41:51 -0500] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 299 ... show more 45.134.79.107 - - [05/Aug/2026:03:41:51 -0500] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Web App Attack
🇳🇱 190.2.142.78	05 Aug 2026	190.2.142.78 - - [05/Aug/2026:03:25:03 -0500] "HEAD /wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 ( ... show more 190.2.142.78 - - [05/Aug/2026:03:25:03 -0500] "HEAD /wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇲🇾 149.118.158.8	05 Aug 2026	149.118.158.8 - - [05/Aug/2026:03:14:28 -0500] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 301 " ... show more 149.118.158.8 - - [05/Aug/2026:03:14:28 -0500] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 301 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇧🇪 35.195.163.72	05 Aug 2026	2026-08-05T03:11:18.443353-05:00 kitsunetech.com sshd-session[685137]: pam_unix(sshd:auth): authenti ... show more 2026-08-05T03:11:18.443353-05:00 kitsunetech.com sshd-session[685137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.195.163.72 2026-08-05T03:11:20.493754-05:00 kitsunetech.com sshd-session[685137]: Failed password for invalid user admin from 35.195.163.72 port 3174 ssh2 2026-08-05T03:11:24.386254-05:00 kitsunetech.com sshd-session[685137]: error: PAM: User not known to the underlying authentication module for illegal user admin from 35.195.163.72 ... show less	Brute-Force SSH
🇺🇸 136.144.43.8	05 Aug 2026	136.144.43.8 - - [05/Aug/2026:02:53:33 -0500] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 299 "- ... show more 136.144.43.8 - - [05/Aug/2026:02:53:33 -0500] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 299 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇸🇪 4.223.73.90	05 Aug 2026	4.223.73.90 - - [05/Aug/2026:02:52:21 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.223.73.90 - - [05/Aug/2026:02:52:21 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 320 "-" "-" ... show less	Web App Attack
🇷🇺 89.169.133.20	05 Aug 2026	2026-08-05T02:29:33.544472-05:00 kitsunetech.com sshd-session[683995]: pam_unix(sshd:auth): authenti ... show more 2026-08-05T02:29:33.544472-05:00 kitsunetech.com sshd-session[683995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.169.133.20 2026-08-05T02:29:35.024052-05:00 kitsunetech.com sshd-session[683995]: Failed password for invalid user admin from 89.169.133.20 port 41378 ssh2 2026-08-05T02:29:39.273106-05:00 kitsunetech.com sshd-session[683997]: Invalid user ubnt from 89.169.133.20 port 41390 ... show less	Brute-Force SSH
🇳🇴 20.100.172.153	05 Aug 2026	20.100.172.153 - - [05/Aug/2026:00:30:19 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.100.172.153 - - [05/Aug/2026:00:30:19 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 328 "-" "-" ... show less	Web App Attack
🇺🇸 20.9.4.9	05 Aug 2026	20.9.4.9 - - [05/Aug/2026:00:15:38 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 296 "-" "Mozi ... show more 20.9.4.9 - - [05/Aug/2026:00:15:38 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇸🇪 4.225.203.22	05 Aug 2026	4.225.203.22 - - [04/Aug/2026:23:21:34 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.225.203.22 - - [04/Aug/2026:23:21:34 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 320 "-" "-" ... show less	Web App Attack
🇧🇷 200.239.146.253	05 Aug 2026	200.239.146.253 - - [04/Aug/2026:22:41:19 -0500] "POST /xmlrpc.php HTTP/1.1" 301 282 "-" "Mozilla/5. ... show more 200.239.146.253 - - [04/Aug/2026:22:41:19 -0500] "POST /xmlrpc.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/63.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇴 20.251.48.208	05 Aug 2026	20.251.48.208 - - [04/Aug/2026:21:09:38 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.251.48.208 - - [04/Aug/2026:21:09:38 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 328 "-" "-" ... show less	Web App Attack
🇸🇪 20.91.213.224	05 Aug 2026	20.91.213.224 - - [04/Aug/2026:20:26:48 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.91.213.224 - - [04/Aug/2026:20:26:48 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 322 "-" "-" ... show less	Web App Attack
🇨🇳 117.72.208.102	05 Aug 2026	2026-08-04T20:21:17.145872-05:00 kitsunetech.com sshd-session[676161]: pam_unix(sshd:auth): authenti ... show more 2026-08-04T20:21:17.145872-05:00 kitsunetech.com sshd-session[676161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.208.102 user=root 2026-08-04T20:21:18.858177-05:00 kitsunetech.com sshd-session[676161]: Failed password for invalid user root from 117.72.208.102 port 43902 ssh2 2026-08-04T20:21:21.780299-05:00 kitsunetech.com sshd-session[676165]: User root from 117.72.208.102 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇮🇹 4.232.185.87	05 Aug 2026	4.232.185.87 - - [04/Aug/2026:19:02:12 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.232.185.87 - - [04/Aug/2026:19:02:12 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 325 "-" "-" ... show less	Web App Attack