Subnet Shadow Specter - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Subnet Shadow Specter joined AbuseIPDB in October 2020 and has reported 25,240 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 152.39.153.193	13 minutes ago	[Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 152.39.153.193 ... show more [Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 152.39.153.193 claimed a fake identity but failed ASN verification. Automated scraping via spoofed User-Agent `Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content)`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content) [IoA Datetime]: 2026-07-16 11:40:17 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇺🇸 152.39.160.21	30 minutes ago	[Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 152.39.160.21 ... show more [Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 152.39.160.21 claimed a fake identity but failed ASN verification. Automated scraping via spoofed User-Agent `Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content)`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content) [IoA Datetime]: 2026-07-16 11:23:54 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇻🇪 181.208.39.57	33 minutes ago	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 181.208.39.57 claime ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 181.208.39.57 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/89.0.4389.130 Safari/537.36`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/89.0.4389.130 Safari/537.36 [IoA Datetime]: 2026-07-16 11:20:49 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇺🇸 161.129.175.216	1 hour ago	[Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 161.129.175.21 ... show more [Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 161.129.175.216 claimed a fake identity but failed ASN verification. Automated scraping via spoofed User-Agent `Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content)`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content) [IoA Datetime]: 2026-07-16 10:48:37 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇵🇭 27.49.17.30	1 hour ago	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 27.49.17.30 claimed ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 27.49.17.30 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `facebookexternalhit/1.1 Facebot Twitterbot/1.0`. [Action]: IP block initiated; permanent ban applied. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0 [IoA Datetime]: 2026-07-16 10:31:55 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇺🇸 104.223.23.249	2 hours ago	[Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 104.223.23.249 ... show more [Security] [Category: Bot Masquerading] FCrDNS / ASN mismatch detected. [IP Address]: 104.223.23.249 claimed a fake identity but failed ASN verification. Automated scraping via spoofed User-Agent `Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content)`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; TTD-Content; +https://www.thetradedesk.com/general/ttd-content) [IoA Datetime]: 2026-07-16 09:42:09 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇺🇸 76.176.135.7	2 hours ago	[Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automati ... show more [Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automatically blocked and banned. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0. [OS]: Apple. [IP Address]: 76.176.135.7.[RPS] 78+ requests-per-second (RPS) overshoot. [IoA Datetime]: 2026-07-16 05:24:57 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇸🇮 102.220.160.163	2 hours ago	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 102.220.160.163 clai ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 102.220.160.163 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `compatible; Googlebot/2.1`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) [IoA Datetime]: 2026-07-16 09:06:05 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇺🇸 192.159.99.55	2 hours ago	[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Acc ... show more [CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: python-requests/2.25.1 [OS]: Unknown [IP]: 192.159.99.55 [IoA Datetime]: 2026-07-16 06:05:02 UTC. show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack
🇨🇦 96.9.226.28	2 hours ago	[CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting f ... show more [CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP backdoors. [Method]: => GET. [Request]: => /team. Access revoked. [User-Agent]: Mozilla/5.0 (compatible; DomainEmailFinder/1.2). [OS]: Unknown. [IP Address]: 96.9.226.28. [IoA Datetime]: 2026-07-16 05:13:24 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 43.130.150.80	2 hours ago	[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Acc ... show more [CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 [OS]: Unknown [IP]: 43.130.150.80 [IoA Datetime]: 2026-07-16 05:16:14 UTC. show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 49.51.38.193	2 hours ago	[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Acc ... show more [CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 [OS]: Unknown [IP]: 49.51.38.193 [IoA Datetime]: 2026-07-16 05:31:13 UTC. show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 84.201.4.212	2 hours ago	[Security Alert] Automated scanning for resource vulnerabilities via malicious request patterns. IP ... show more [Security Alert] Automated scanning for resource vulnerabilities via malicious request patterns. IP automatically blocked and banned. [Method]: => GET. [Request]: => /appsettings.json. IP blocked. [User-Agent]: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36. [OS]: Windows. [IP Address]: 84.201.4.212. [IoA Datetime]: 2026-07-16 09:02:03 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 173.230.132.235	2 hours ago	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /wp-json/wp/v2/posts?per_page=100. Access revoked. [User-Agent]: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36. [OS]: Unknown. [IP Address]: 173.230.132.235. [IoA Datetime]: 2026-07-16 07:02:09 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 74.207.233.225	2 hours ago	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /wp-json/wp/v2/posts?per_page=100. Access revoked. [User-Agent]: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36. [OS]: Unknown. [IP Address]: 74.207.233.225. [IoA Datetime]: 2026-07-16 05:05:22 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 52.224.247.161	2 hours ago	[Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automati ... show more [Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automatically blocked and banned. [User-Agent]: python-httpx/0.28.1. [OS]: Unknown. [IP Address]: 52.224.247.161. [IoA Datetime]: 2026-07-16 04:49:53 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 205.143.208.245	2 hours ago	[CRITICAL][Security Alert: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 205.143.208.245 ... show more [CRITICAL][Security Alert: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 205.143.208.245 claimed identity of ‘Googlebot/2.1’ but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent ‘Googlebot/2.1’. [Action]: IP block initiated; permanent ban applied. [User-Agent]: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html). [OS]: Unknown. [IoA Datetime]: 2026-07-16 04:43:57 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇬🇧 110.239.223.236	2 hours ago	[Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automati ... show more [Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automatically blocked and banned. [User-Agent]: Go-http-client/1.1. [OS]: Unknown. [IP Address]: 110.239.223.236. [IoA Datetime]: 2026-07-16 04:37:51 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 50.116.45.211	2 hours ago	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /wp-json/wp/v2/posts?per_page=100. Access revoked. [User-Agent]: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36. [OS]: Unknown. [IP Address]: 50.116.45.211. [IoA Datetime]: 2026-07-16 04:13:17 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 172.105.151.149	2 hours ago	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /wp-json/wp/v2/posts?per_page=100. Access revoked. [User-Agent]: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36. [OS]: Unknown. [IP Address]: 172.105.151.149. [IoA Datetime]: 2026-07-16 03:24:39 UTC. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇸🇪 45.88.13.223	2 hours ago	[Suspicious Activity][Security Alert] Known spam/scam signature detected; source IP address has been ... show more [Suspicious Activity][Security Alert] Known spam/scam signature detected; source IP address has been blacklisted. [Method]: POST. [Request]: => /contacts. [User-Agent]: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0. [OS]: Unknown. [IP Address]: 45.88.13.223. [IoA Datetime]: 2026-07-16 03:19:10 UTC. show less	Phishing Web Spam Email Spam Hacking Bad Web Bot Web App Attack
🇸🇪 171.25.193.132	3 hours ago	[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Acc ... show more [CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" [OS]: Unknown [IP]: 171.25.193.132 [IoA Datetime]: 2026-07-16 03:44:50 UTC. show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 43.166.226.186	3 hours ago	[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Acc ... show more [CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 [OS]: iPhone [IP]: 43.166.226.186 [IoA Datetime]: 2026-07-16 08:18:04 UTC. show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 209.147.81.216	3 hours ago	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 209.147.81.216 claim ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 209.147.81.216 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `compatible; Googlebot/2.1`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) [IoA Datetime]: 2026-07-16 08:19:06 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇧🇷 189.69.56.74	3 hours ago	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 189.69.56.74 claimed ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 189.69.56.74 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/83.0.4103.118 Safari/537.36`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/83.0.4103.118 Safari/537.36 [IoA Datetime]: 2026-07-16 08:16:05 UTC. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack