AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User bcsaba joined AbuseIPDB in October 2020 and has reported 63,446 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇬🇧 194.74.71.18	15 hours ago	Dropbear: dropbear brute force attempt for nonexistent user. Aug 7 23:34:26 REDACTED dropbear[223 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Aug 7 23:34:26 REDACTED dropbear[22368]: Login attempt for nonexistent user 'susan' from 194.74.71.18:43625 show less	Brute-Force SSH
🇨🇳 119.51.242.229	15 hours ago	Postfix SASL authentication failure. Aug 7 23:20:41 REDACTED postfix/smtpd[9034]: warning: unknow ... show more Postfix SASL authentication failure. Aug 7 23:20:41 REDACTED postfix/smtpd[9034]: warning: unknown[119.51.242.229]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Hacking Brute-Force
🇵🇱 194.180.48.41	16 hours ago	Multiple firewall blocks events from same source. Aug 7 23:09:43 firewall filterlog[13005]: 4,,,100 ... show more Multiple firewall blocks events from same source. Aug 7 23:09:43 firewall filterlog[13005]: 4,,,1000000103,REDACTED,match,block,in,4,0x0,,250,60698,0,none,6,tcp,40,194.180.48.41,REDACTED,55787,62768,0,S,795374431,,1024,, show less	Port Scan
🇪🇪 165.231.164.107	16 hours ago	Joomla spam 165.231.164.107 - - [07/Aug/2026:22:58:37 +0200] "GET /index.php?option=com_easyblog&vie ... show more Joomla spam 165.231.164.107 - - [07/Aug/2026:22:58:37 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED/component/jevents/day.listevents/2024/09/29/50?Itemid=1" "Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0" show less	Web App Attack
🇮🇩 180.251.154.154	16 hours ago	Suricata: Alert - ET INFO User-Agent (python-requests) Inbound to Webserver	Web App Attack
🇸🇬 34.124.135.93	17 hours ago	No AWS here: 34.124.135.93 - - [07/Aug/2026:22:17:03 +0200] "GET /.aws/credentials HTTP/2.0" 403 146 ... show more No AWS here: 34.124.135.93 - - [07/Aug/2026:22:17:03 +0200] "GET /.aws/credentials HTTP/2.0" 403 146 "-" "anthropic-ai" show less	Web App Attack
🇺🇸 34.173.226.100	17 hours ago	Probing for .git: 34.173.226.100 - - [07/Aug/2026:22:06:24 +0200] "GET /.git/config HTTP/1.1" 400 23 ... show more Probing for .git: 34.173.226.100 - - [07/Aug/2026:22:06:24 +0200] "GET /.git/config HTTP/1.1" 400 230 "-" "-" show less	Web App Attack
🇸🇬 136.110.10.37	17 hours ago	Looking for json file on web server 136.110.10.37 - - [07/Aug/2026:22:01:57 +0200] "GET /__/firebase ... show more Looking for json file on web server 136.110.10.37 - - [07/Aug/2026:22:01:57 +0200] "GET /__/firebase/init.json HTTP/2.0" 400 230 "-" "anthropic-ai" show less	Web App Attack
🇸🇬 136.85.68.19	17 hours ago	Looking for json file on web server 136.85.68.19 - - [07/Aug/2026:21:50:01 +0200] "GET /__/firebase/ ... show more Looking for json file on web server 136.85.68.19 - - [07/Aug/2026:21:50:01 +0200] "GET /__/firebase/init.json HTTP/2.0" 400 230 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" show less	Web App Attack
🇺🇸 35.245.180.209	17 hours ago	Probing for /backup 35.245.180.209 - - [07/Aug/2026:21:36:38 +0200] "HEAD /backup/ HTTP/2.0" 404 0 " ... show more Probing for /backup 35.245.180.209 - - [07/Aug/2026:21:36:38 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://REDACTED/backup/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" show less	Web App Attack
🇬🇧 194.74.71.18	17 hours ago	Dropbear: dropbear brute force attempt for nonexistent user. Aug 7 21:35:10 REDACTED dropbear[321 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Aug 7 21:35:10 REDACTED dropbear[32104]: Login attempt for nonexistent user 'leonardo' from 194.74.71.18:57280 show less	Brute-Force SSH
🇻🇪 190.97.237.158	17 hours ago	Suricata: Alert - ET INFO Python aiohttp User-Agent Observed Inbound	Web App Attack
🇺🇸 34.174.124.161	17 hours ago	Probing for /backup 34.174.124.161 - - [07/Aug/2026:21:34:12 +0200] "HEAD /backup/ HTTP/2.0" 404 0 " ... show more Probing for /backup 34.174.124.161 - - [07/Aug/2026:21:34:12 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "https://REDACTED/backup/" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" show less	Web App Attack
🇺🇸 54.221.168.156	18 hours ago	SQL injection attempt. 54.221.168.156 - - [07/Aug/2026:20:59:34 +0200] "GET /scripts/view.php?option ... show more SQL injection attempt. 54.221.168.156 - - [07/Aug/2026:20:59:34 +0200] "GET /scripts/view.php?option=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&task=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&Itemid=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&oid=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1" 200 31 "-" "-" show less	SQL Injection Web App Attack
🇸🇬 34.124.135.93	18 hours ago	Probing for .git: 34.124.135.93 - - [07/Aug/2026:20:59:26 +0200] "GET /.gitconfig HTTP/2.0" 400 230 ... show more Probing for .git: 34.124.135.93 - - [07/Aug/2026:20:59:26 +0200] "GET /.gitconfig HTTP/2.0" 400 230 "-" "anthropic-ai" show less	Web App Attack
🇪🇪 162.212.168.123	18 hours ago	Joomla spam 162.212.168.123 - - [07/Aug/2026:20:37:00 +0200] "GET /index.php?option=com_easyblog&vie ... show more Joomla spam 162.212.168.123 - - [07/Aug/2026:20:37:00 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" show less	Web App Attack
🇸🇬 136.85.68.19	18 hours ago	No AWS credentials here: 136.85.68.19 - - [07/Aug/2026:20:21:49 +0200] "GET /.aws/credentials HTTP/2 ... show more No AWS credentials here: 136.85.68.19 - - [07/Aug/2026:20:21:49 +0200] "GET /.aws/credentials HTTP/2.0" 400 230 "-" "anthropic-ai" show less	Web App Attack
🇬🇧 194.74.71.18	19 hours ago	Dropbear: dropbear brute force attempt for nonexistent user. Aug 7 20:03:30 REDACTED dropbear[148 ... show more Dropbear: dropbear brute force attempt for nonexistent user. Aug 7 20:03:30 REDACTED dropbear[14892]: Login attempt for nonexistent user 'keith' from 194.74.71.18:37514 show less	Brute-Force SSH
🇸🇬 136.110.10.37	19 hours ago	Looking for json file on web server 136.110.10.37 - - [07/Aug/2026:19:26:27 +0200] "GET /.vite/manif ... show more Looking for json file on web server 136.110.10.37 - - [07/Aug/2026:19:26:27 +0200] "GET /.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" show less	Web App Attack
🇻🇳 14.244.183.71	20 hours ago	Postfix SASL authentication failure. Aug 7 19:18:27 REDACTED postfix/smtpd[15949]: warning: unkno ... show more Postfix SASL authentication failure. Aug 7 19:18:27 REDACTED postfix/smtpd[15949]: warning: unknown[14.244.183.71]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Hacking Brute-Force
🇸🇬 34.126.71.58	20 hours ago	Probing for .git: 34.126.71.58 - - [07/Aug/2026:19:09:43 +0200] "GET /.git/config HTTP/2.0" 403 146 ... show more Probing for .git: 34.126.71.58 - - [07/Aug/2026:19:09:43 +0200] "GET /.git/config HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:*REDACTED" show less	Web App Attack
🇸🇬 136.85.68.19	20 hours ago	Looking for json file on web server 136.85.68.19 - - [07/Aug/2026:19:04:59 +0200] "GET /key.json HTT ... show more Looking for json file on web server 136.85.68.19 - - [07/Aug/2026:19:04:59 +0200] "GET /key.json HTTP/2.0" 400 230 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" show less	Web App Attack
🇺🇸 54.221.168.156	20 hours ago	SQL injection attempt. 54.221.168.156 - - [07/Aug/2026:19:04:16 +0200] "GET /scripts/view.php?option ... show more SQL injection attempt. 54.221.168.156 - - [07/Aug/2026:19:04:16 +0200] "GET /scripts/view.php?option=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&task=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&Itemid=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&oid=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1" 200 31 "-" "-" show less	SQL Injection Web App Attack
🇪🇨 200.76.114.74	20 hours ago	Repeated request on blocked xmlrpc.php. 200.76.114.74 - - [07/Aug/2026:18:54:42 +0200] "POST //xmlrp ... show more Repeated request on blocked xmlrpc.php. 200.76.114.74 - - [07/Aug/2026:18:54:42 +0200] "POST //xmlrpc.php HTTP/1.1" 403 548 "https://REDACTED//xmlrpc.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇷 191.193.133.34	20 hours ago	Repeated request on blocked xmlrpc.php. 191.193.133.34 - - [07/Aug/2026:18:54:38 +0200] "POST //xmlr ... show more Repeated request on blocked xmlrpc.php. 191.193.133.34 - - [07/Aug/2026:18:54:38 +0200] "POST //xmlrpc.php HTTP/1.1" 403 548 "https://REDACTED//xmlrpc.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Web App Attack