AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User bcsaba joined AbuseIPDB in October 2020 and has reported 72,387 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 34.153.22.19	04 Oct 2026	Probing for .git: 34.153.22.19 - - [04/Oct/2026:22:42:24 +0200] "GET /.git/config HTTP/1.1" 400 632 ... show more Probing for .git: 34.153.22.19 - - [04/Oct/2026:22:42:24 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇦🇺 35.197.163.137	04 Oct 2026	Probing for .git: 35.197.163.137 - - [04/Oct/2026:22:41:37 +0200] "GET /.git/config HTTP/1.1" 403 54 ... show more Probing for .git: 35.197.163.137 - - [04/Oct/2026:22:41:37 +0200] "GET /.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇳 172.232.105.53	04 Oct 2026	Looking for WP exploit 172.232.105.53 - - [04/Oct/2026:22:36:54 +0200] "GET //wp-content/plugins/fix ... show more Looking for WP exploit 172.232.105.53 - - [04/Oct/2026:22:36:54 +0200] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" show less	Web App Attack
🇩🇪 157.230.108.229	04 Oct 2026	Probing for /backup 157.230.108.229 - - [04/Oct/2026:22:11:30 +0200] "HEAD /backup/ HTTP/2.0" 404 0 ... show more Probing for /backup 157.230.108.229 - - [04/Oct/2026:22:11:30 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://www.REDACTED/backup/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Web App Attack
🇺🇸 172.110.223.179	04 Oct 2026	Multiple firewall blocks events from same source. Oct 4 22:05:12 firewall filterlog[30503]: 1,6,,10 ... show more Multiple firewall blocks events from same source. Oct 4 22:05:12 firewall filterlog[30503]: 1,6,,1000000103,REDACTED,match,block,in,4,0x0,,251,42019,0,none,17,udp,396,172.110.223.179,REDACTED,10027,5033,376 show less	Port Scan
🇳🇱 213.177.179.14	04 Oct 2026	Multiple firewall blocks events from same source. Oct 4 21:56:56 firewall filterlog[30503]: 1,6,,10 ... show more Multiple firewall blocks events from same source. Oct 4 21:56:56 firewall filterlog[30503]: 1,6,,1000000103,REDACTED,match,block,in,4,0x0,,251,26818,0,DF,6,tcp,60,213.177.179.14,REDACTED,3668,32022,0,S,3365544507,,65280,,mss;sackOK;TS;nop;wscale show less	Port Scan
🇳🇱 34.6.78.29	04 Oct 2026	Debug trigger, triggered report 34.6.78.29 - - [04/Oct/2026:21:45:38 +0200] "GET /z9x8c7v6b5-debug-t ... show more Debug trigger, triggered report 34.6.78.29 - - [04/Oct/2026:21:45:38 +0200] "GET /z9x8c7v6b5-debug-trigger-REDACTED HTTP/2.0" 404 778 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" show less	Web App Attack
🇮🇳 122.160.173.97	04 Oct 2026	Dropbear: Bad password attempt. Oct 4 21:41:15 REDACTED dropbear[17087]: Bad password attempt fo ... show more Dropbear: Bad password attempt. Oct 4 21:41:15 REDACTED dropbear[17087]: Bad password attempt for 'root' from 122.160.173.97:3450 show less	Brute-Force SSH
🇺🇸 34.181.199.22	04 Oct 2026	Looking for json file on web server 34.181.199.22 - - [04/Oct/2026:21:37:43 +0200] "GET /dist/manife ... show more Looking for json file on web server 34.181.199.22 - - [04/Oct/2026:21:37:43 +0200] "GET /dist/manifest.json HTTP/2.0" 404 12482 "https://REDACTED/dist/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" show less	Web App Attack
🇬🇧 134.122.103.6	04 Oct 2026	Multiple web server 400 error codes from same source ip. 134.122.103.6 - - [04/Oct/2026:21:20:59 +02 ... show more Multiple web server 400 error codes from same source ip. 134.122.103.6 - - [04/Oct/2026:21:20:59 +0200] "HEAD /de/ HTTP/2.0" 404 0 "https://REDACTED/de/" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" show less	Web App Attack Brute-Force
🇯🇵 115.37.39.235	04 Oct 2026	SQL injection attempt. 115.37.39.235 - - [04/Oct/2026:21:03:01 +0200] "GET /index.php?option=com_con ... show more SQL injection attempt. 115.37.39.235 - - [04/Oct/2026:21:03:01 +0200] "GET /index.php?option=com_content&view=category&layout=blog&id=%27&Itemid=184 HTTP/1.1" 404 790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" show less	Web App Attack SQL Injection
🇺🇸 157.245.129.14	04 Oct 2026	Probing for /backup 157.245.129.14 - - [04/Oct/2026:21:02:41 +0200] "HEAD /backup/ HTTP/2.0" 404 0 " ... show more Probing for /backup 157.245.129.14 - - [04/Oct/2026:21:02:41 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://REDACTED/backup/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" show less	Web App Attack
🇮🇳 117.99.219.171	04 Oct 2026	Postfix SASL authentication failure. 2026-10-04T20:51:41.250948+02:00 REDACTED postfix/smtpd[17679 ... show more Postfix SASL authentication failure. 2026-10-04T20:51:41.250948+02:00 REDACTED postfix/smtpd[1767966]: warning: unknown[117.99.219.171]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=*REDACTED show less	Hacking Brute-Force
🇺🇸 170.130.178.71	04 Oct 2026	CMS (WordPress or Joomla) login attempt. 170.130.178.71 - - [04/Oct/2026:20:44:13 +0200] "POST /wp-l ... show more CMS (WordPress or Joomla) login attempt. 170.130.178.71 - - [04/Oct/2026:20:44:13 +0200] "POST /wp-login.php HTTP/1.1" 200 3211 "https://www.REDACTED/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" show less	Hacking Brute-Force Web App Attack
🇨🇳 123.119.177.241	04 Oct 2026	Postfix SASL authentication failure. 2026-10-04T20:43:30.336506+02:00 REDACTED postfix/smtpd[17665 ... show more Postfix SASL authentication failure. 2026-10-04T20:43:30.336506+02:00 REDACTED postfix/smtpd[1766534]: warning: unknown[123.119.177.241]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=*REDACTED show less	Hacking Brute-Force
🇩🇪 172.236.214.37	04 Oct 2026	Probing for .env file: 172.236.214.37 - - [04/Oct/2026:20:42:29 +0200] "GET /.env HTTP/1.1" 403 548 ... show more Probing for .env file: 172.236.214.37 - - [04/Oct/2026:20:42:29 +0200] "GET /.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇮🇳 122.160.173.97	04 Oct 2026	Dropbear: Bad password attempt. Oct 4 20:36:04 REDACTED dropbear[4586]: Bad password attempt for ... show more Dropbear: Bad password attempt. Oct 4 20:36:04 REDACTED dropbear[4586]: Bad password attempt for 'root' from 122.160.173.97:7818 show less	Brute-Force SSH
🇸🇬 134.209.110.30	04 Oct 2026	Joomla failed login attempts 134.209.110.30 - - [04/Oct/2026:19:38:35 +0200] "POST /administrator/in ... show more Joomla failed login attempts 134.209.110.30 - - [04/Oct/2026:19:38:35 +0200] "POST /administrator/index.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇳 122.160.173.97	04 Oct 2026	Dropbear: Bad password attempt. Oct 4 19:30:30 REDACTED dropbear[24914]: Bad password attempt fo ... show more Dropbear: Bad password attempt. Oct 4 19:30:30 REDACTED dropbear[24914]: Bad password attempt for 'root' from 122.160.173.97:13327 show less	Brute-Force SSH
🇫🇷 57.130.79.197	04 Oct 2026	Looking for about.php in webroot 57.130.79.197 - - [04/Oct/2026:19:17:45 +0200] "GET /about.php HTTP ... show more Looking for about.php in webroot 57.130.79.197 - - [04/Oct/2026:19:17:45 +0200] "GET /about.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 213.177.179.14	04 Oct 2026	Multiple firewall blocks events from same source. Oct 4 18:34:15 firewall filterlog[30503]: 1,6,,10 ... show more Multiple firewall blocks events from same source. Oct 4 18:34:15 firewall filterlog[30503]: 1,6,,1000000103,REDACTED,match,block,in,4,0x0,,251,7287,0,DF,6,tcp,60,213.177.179.14,REDACTED,25002,111,0,S,682190918,,65280,,mss;sackOK;TS;nop;wscale show less	Port Scan
🇺🇸 18.191.218.225	04 Oct 2026	SQL injection attempt. 18.191.218.225 - - [04/Oct/2026:18:25:39 +0200] "GET /component/jevents/year. ... show more SQL injection attempt. 18.191.218.225 - - [04/Oct/2026:18:25:39 +0200] "GET /component/jevents/year.listevents/2025/01/20/-?Itemid=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1" 403 146 "-" "-" show less	Web App Attack SQL Injection
🇮🇳 122.160.173.97	04 Oct 2026	Dropbear: Bad password attempt. Oct 4 18:25:31 REDACTED dropbear[12784]: Bad password attempt fo ... show more Dropbear: Bad password attempt. Oct 4 18:25:31 REDACTED dropbear[12784]: Bad password attempt for 'root' from 122.160.173.97:11359 show less	Brute-Force SSH
🇫🇷 57.130.79.197	04 Oct 2026	Looking for about.php in webroot 57.130.79.197 - - [04/Oct/2026:18:00:06 +0200] "GET /about.php HTTP ... show more Looking for about.php in webroot 57.130.79.197 - - [04/Oct/2026:18:00:06 +0200] "GET /about.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Web App Attack
🇲🇽 187.190.4.151	04 Oct 2026	CMS (WordPress or Joomla) login attempt. 187.190.4.151 - - [04/Oct/2026:17:58:22 +0200] "POST /wp-lo ... show more CMS (WordPress or Joomla) login attempt. 187.190.4.151 - - [04/Oct/2026:17:58:22 +0200] "POST /wp-login.php HTTP/2.0" 200 4304 "https://REDACTED/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" show less	Hacking Brute-Force Web App Attack