AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User bcsaba joined AbuseIPDB in October 2020 and has reported 70,669 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇭🇰 165.154.61.12	22 Sep 2026	Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 14:36:51 REDACTED dropbear[105 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 14:36:51 REDACTED dropbear[10519]: Login attempt for nonexistent user 'ps' from 165.154.61.12:17772 show less	Brute-Force SSH
🇩🇪 178.105.74.57	22 Sep 2026	BAD BOT 178.105.74.57 - - [22/Sep/2026:14:17:06 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/ ... show more BAD BOT 178.105.74.57 - - [22/Sep/2026:14:17:06 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/3.12" show less	Web App Attack
🇸🇬 34.21.217.239	22 Sep 2026	Looking for json file on web server 34.21.217.239 - - [22/Sep/2026:14:06:09 +0200] "GET /manifest.js ... show more Looking for json file on web server 34.21.217.239 - - [22/Sep/2026:14:06:09 +0200] "GET /manifest.json HTTP/2.0" 404 775 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Web App Attack
🇭🇰 165.154.61.12	22 Sep 2026	Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 13:12:23 REDACTED dropbear[271 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 13:12:23 REDACTED dropbear[27122]: Login attempt for nonexistent user 'installer' from 165.154.61.12:15022 show less	Brute-Force SSH
🇧🇷 191.36.150.104	22 Sep 2026	Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 13:00:41 REDACTED dropbear[252 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 13:00:41 REDACTED dropbear[25224]: Login attempt for nonexistent user 'user2' from 191.36.150.104:55928 show less	Brute-Force SSH
🇩🇪 178.105.74.57	22 Sep 2026	BAD BOT 178.105.74.57 - - [22/Sep/2026:12:47:54 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/ ... show more BAD BOT 178.105.74.57 - - [22/Sep/2026:12:47:54 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/3.12" show less	Web App Attack
🇩🇪 202.61.233.96	22 Sep 2026	Repeated request on blocked xmlrpc.php. 202.61.233.96 - - [22/Sep/2026:12:38:07 +0200] "POST /xmlrpc ... show more Repeated request on blocked xmlrpc.php. 202.61.233.96 - - [22/Sep/2026:12:38:07 +0200] "POST /xmlrpc.php HTTP/2.0" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇷 34.95.181.240	22 Sep 2026	Probing for .env file: 34.95.181.240 - - [22/Sep/2026:12:37:23 +0200] "GET /.env.example HTTP/1.1" 4 ... show more Probing for .env file: 34.95.181.240 - - [22/Sep/2026:12:37:23 +0200] "GET /.env.example HTTP/1.1" 400 230 "-" "crusader-worker/1.0" show less	Web App Attack
🇺🇸 34.20.136.209	22 Sep 2026	Looking for /actuator/ on web server 34.20.136.209 - - [22/Sep/2026:12:31:16 +0200] "GET /actuator/c ... show more Looking for /actuator/ on web server 34.20.136.209 - - [22/Sep/2026:12:31:16 +0200] "GET /actuator/configprops HTTP/1.1" 400 230 "-" "crusader-worker/1.0" show less	Web App Attack
🇬🇧 193.58.104.91	22 Sep 2026	Joomla spam 193.58.104.91 - - [22/Sep/2026:12:27:19 +0200] "GET /index.php?option=com_easyblog&view= ... show more Joomla spam 193.58.104.91 - - [22/Sep/2026:12:27:19 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED/index.php/kozerdeku" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" show less	Web App Attack
🇬🇧 45.8.255.237	22 Sep 2026	Joomla spam 45.8.255.237 - - [22/Sep/2026:12:26:04 +0200] "GET /index.php?option=com_easyblog&view=d ... show more Joomla spam 45.8.255.237 - - [22/Sep/2026:12:26:04 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED/clld/helyi-felhivasok/uj-felhivasok/1342-kozlemeny-3-2" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15" show less	Web App Attack
🇧🇪 34.77.7.118	22 Sep 2026	Multiple web server 400 error codes from same source ip. 34.77.7.118 - - [22/Sep/2026:12:09:31 +0200 ... show more Multiple web server 400 error codes from same source ip. 34.77.7.118 - - [22/Sep/2026:12:09:31 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Web App Attack Brute-Force
🇭🇰 165.154.61.12	22 Sep 2026	Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 11:48:00 REDACTED dropbear[113 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 11:48:00 REDACTED dropbear[11387]: Login attempt for nonexistent user 'dbuser' from 165.154.61.12:45112 show less	Brute-Force SSH
🇲🇦 196.74.168.41	22 Sep 2026	Probing for .env file: 196.74.168.41 - - [22/Sep/2026:11:39:55 +0200] "GET /.env HTTP/1.1" 403 146 " ... show more Probing for .env file: 196.74.168.41 - - [22/Sep/2026:11:39:55 +0200] "GET /.env HTTP/1.1" 403 146 "-" "-" show less	Web App Attack
🇩🇪 178.105.74.57	22 Sep 2026	BAD BOT 178.105.74.57 - - [22/Sep/2026:11:36:35 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/ ... show more BAD BOT 178.105.74.57 - - [22/Sep/2026:11:36:35 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/3.12" show less	Web App Attack
🇮🇩 72.62.124.240	22 Sep 2026	Sppagebuilder abuse: 72.62.124.240 - - [22/Sep/2026:11:15:59 +0200] "POST /index.php?option=com_sppa ... show more Sppagebuilder abuse: 72.62.124.240 - - [22/Sep/2026:11:15:59 +0200] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 789 "-" "Mozilla/5.0 (X11; Linux x86_64) SP-Scanner" show less	Web App Attack
🇬🇧 193.58.104.42	22 Sep 2026	Joomla spam 193.58.104.42 - - [22/Sep/2026:11:05:05 +0200] "GET /index.php?option=com_easyblog&view= ... show more Joomla spam 193.58.104.42 - - [22/Sep/2026:11:05:05 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED/clld/helyi-felhivasok/uj-felhivasok/1342-kozlemeny-3-2" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0" show less	Web App Attack
🇧🇷 191.36.150.104	22 Sep 2026	Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 11:04:51 REDACTED dropbear[282 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 11:04:51 REDACTED dropbear[2825]: Login attempt for nonexistent user 'testuser' from 191.36.150.104:54812 show less	Brute-Force SSH
🇸🇬 34.21.208.252	22 Sep 2026	Debug trigger, triggered report 34.21.208.252 - - [22/Sep/2026:11:01:48 +0200] "GET /z9x8c7v6b5-debu ... show more Debug trigger, triggered report 34.21.208.252 - - [22/Sep/2026:11:01:48 +0200] "GET /z9x8c7v6b5-debug-trigger-REDACTED HTTP/2.0" 404 27374 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" show less	Web App Attack
🇬🇧 193.58.104.91	22 Sep 2026	Joomla spam 193.58.104.91 - - [22/Sep/2026:10:46:01 +0200] "GET /index.php?option=com_easyblog&view= ... show more Joomla spam 193.58.104.91 - - [22/Sep/2026:10:46:01 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED/clld/helyi-felhivasok/uj-felhivasok/1342-kozlemeny-3-2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Web App Attack
🇸🇬 35.240.168.19	22 Sep 2026	Going for WP CVE-2026-63030 35.240.168.19 - - [22/Sep/2026:10:43:50 +0200] "POST /?rest_route=/batch ... show more Going for WP CVE-2026-63030 35.240.168.19 - - [22/Sep/2026:10:43:50 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 178.105.74.57	22 Sep 2026	BAD BOT 178.105.74.57 - - [22/Sep/2026:10:25:01 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/ ... show more BAD BOT 178.105.74.57 - - [22/Sep/2026:10:25:01 +0200] "POST / HTTP/1.1" 403 146 "-" "Python-urllib/3.12" show less	Web App Attack
🇭🇰 165.154.61.12	22 Sep 2026	Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 10:23:32 REDACTED dropbear[276 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Sep 22 10:23:32 REDACTED dropbear[27697]: Login attempt for nonexistent user 'andy' from 165.154.61.12:41690 show less	Brute-Force SSH
🇦🇪 94.59.215.10	22 Sep 2026	CMS (WordPress or Joomla) login attempt. 94.59.215.10 - - [22/Sep/2026:10:18:11 +0200] "POST /wp-log ... show more CMS (WordPress or Joomla) login attempt. 94.59.215.10 - - [22/Sep/2026:10:18:11 +0200] "POST /wp-login.php HTTP/2.0" 200 4268 "https://REDACTED/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Hacking Brute-Force Web App Attack
🇺🇸 164.68.140.211	22 Sep 2026	Suricata: Alert - GPL DNS named version attempt	Web App Attack