AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User barbarella joined AbuseIPDB in March 2021 and has reported 220,260 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 45.130.83.100	23 Sep 2026	Hacking attempt (GET /administrator/)	Hacking Web App Attack
🇰🇷 52.231.30.175	23 Sep 2026	Multiple (151) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-conte ... show more Multiple (151) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-content/plugins/hellopress/wp_filemanager.php) 19:22:18 Hacking attempt of vulnerable PHP Script (GET /this_is_a_new_hello_world.php) 19:22:18 Hacking attempt of vulnerable PHP Script (GET /1ac.php) 19:22:19 Hacking attempt of vulnerable PHP Script (GET /ffhma.php) 19:22:19 Hacking attempt of vulnerable PHP Script (GET /40341.php) 19:22:20 Hacking attempt of vulnerable PHP Script (GET /wp-log.php) 19:22:20 Hacking attempt of vulnerable PHP Script (GET /sehryhv.php) 19:22:21 Hacking attempt of vulnerable PHP Script (GET /Cdefault.php) 19:22:21 Hacking attempt of vulnerable PHP Script (GET /01.php) show less	Hacking Web App Attack
🇮🇳 64.227.164.147	23 Sep 2026	SSTP tunnelling attempt (SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/)	Hacking Web App Attack
🇺🇸 66.249.75.164	23 Sep 2026	searching for Cobalt Strike server beacon (GET /blog)	Hacking Web App Attack
🇵🇱 77.91.122.10	23 Sep 2026	hacking attempt (GET /login)	Hacking Web App Attack
🇩🇪 80.171.103.57	23 Sep 2026	Login attempt to Wordpress Blog (GET /wp-login.php?action=1%27%20AND%201=1%20UNION%20SELECT%20NULL-- ... show more Login attempt to Wordpress Blog (GET /wp-login.php?action=1%27%20AND%201=1%20UNION%20SELECT%20NULL--%20-) show less	Hacking Web App Attack
🇩🇪 89.247.174.123	23 Sep 2026	Multiple (116) times attack on https port 443: Login attempt to Wordpress Blog (GET /wp-login.php?ac ... show more Multiple (116) times attack on https port 443: Login attempt to Wordpress Blog (GET /wp-login.php?action=1%27%20AND%201=1%20UNION%20SELECT%20NULL--%20-) 14:05:04 Login attempt to Wordpress Blog (GET /wp-login.php?action=%27%29%2F%2FAND%2F%2F%28%27pFQYpt%27%3D%27PfqYPT%27%27) 14:05:05 Login attempt to Wordpress Blog (GET /wp-login.php?action=lostpassword%27%20ORDER%20BY%201--%20-) 14:05:05 Login attempt to Wordpress Blog (GET /wp-login.php?action=lostpassword%20AND%20EXTRACTVALUE%289918%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%289918%3D9918%2C1%29%29%29%29%2C0x7e%29%29--%20-) 14:05:06 Login attempt to Wordpress Blog (GET /wp-login.php?action=lostpassword%20ORDER%20BY%201--%20-) 14:05:07 Login attempt to Wordpress Blog (GET /wp-login.php?action=lostpassword%27%20UNION%20ALL%20SELECT%20%27ubfwyzslfnctzqkuyaguytlxoiywtxml%27--%20z35uvt) 14:05:08 Login attempt to Wordpress Blog (GET /wp-login.php?action=%27%29%20AND%20%28%27clpgql%27%3D%27clpgql%27AND%20EXTRACTVALUE%289918%2CCONCAT%280x7e show less	Hacking Web App Attack
🇩🇪 91.65.147.62	23 Sep 2026	Login attempt to Wordpress Blog (GET /wp-login.php?action=1%27%20AND%201=1%20UNION%20SELECT%20NULL-- ... show more Login attempt to Wordpress Blog (GET /wp-login.php?action=1%27%20AND%201=1%20UNION%20SELECT%20NULL--%20-) show less	Hacking Web App Attack
🇩🇪 92.206.61.85	23 Sep 2026	Login attempt to Wordpress Blog (GET /wp-login.php?action=1%27%20AND%201=1%20UNION%20SELECT%20NULL-- ... show more Login attempt to Wordpress Blog (GET /wp-login.php?action=1%27%20AND%201=1%20UNION%20SELECT%20NULL--%20-) show less	Hacking Web App Attack
🇹🇷 94.154.43.164	23 Sep 2026	Configuration snooping in .env file (GET /.env)	Hacking Web App Attack
🇺🇸 104.152.52.243	23 Sep 2026	SSTP tunnelling attempt (SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/)	Hacking Web App Attack
🇺🇸 136.86.133.68	23 Sep 2026	Multiple (130) times attack on https port 443: configuration snooping of .json files (GET /assets/ma ... show more Multiple (130) times attack on https port 443: configuration snooping of .json files (GET /assets/manifest.json) 19:31:23 configuration snooping of .json files (GET /dist/manifest.json) 19:31:23 configuration snooping of .json files (GET /static/manifest.json) 19:31:23 configuration snooping of .json files (GET /webpack-stats.json) 19:31:23 configuration snooping of .json files (GET /asset-manifest.json) 19:31:23 Illegal http header (POST /) 19:31:23 Configuration snooping with modified .env.* file (GET /.env.save) 19:31:23 Configuration snooping in .env file (GET /@fs/app/.env?raw??) 19:31:23 Configuration snooping with modified .env.* file (GET /.env.prod) show less	Hacking Web App Attack
🇮🇩 147.139.173.35	23 Sep 2026	Multiple (48) times attack on https port 443: unauthorized access to cgi-bin scripts (POST /cgi-bin/ ... show more Multiple (48) times attack on https port 443: unauthorized access to cgi-bin scripts (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) 16:29:51 unauthorized access to cgi-bin scripts (POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) 16:29:53 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 16:29:54 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 16:29:54 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) 16:29:54 hacking attempt (POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) 16:29:55 Hacking attempt (POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input) 16:29:55 una show less	Hacking Web App Attack
🇫🇷 169.40.142.172	23 Sep 2026	Multiple (2) times attack on https port 443: Metabase vulnerability CVE-2023-38646 (GET /api/session ... show more Multiple (2) times attack on https port 443: Metabase vulnerability CVE-2023-38646 (GET /api/session/properties) 17:05:32 Metabase vulnerability CVE-2023-38646 (GET /api/session/properties) show less	Hacking Web App Attack
🇬🇧 193.32.209.252	23 Sep 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇺🇸 20.65.202.236	23 Sep 2026	Tried to access BI platform (GET /ReportServer)	Hacking Web App Attack
🇰🇿 31.132.90.3	23 Sep 2026	illegal attempt to access local shell (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more illegal attempt to access local shell (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) show less	Hacking Web App Attack
🇧🇪 35.187.95.46	23 Sep 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇺🇸 43.135.145.117	23 Sep 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇷🇺 45.91.64.7	23 Sep 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇳🇱 45.148.10.40	23 Sep 2026	Multiple (17) times attack on https port 443: unauthorized access to Wordpress REST Api (POST /wp-js ... show more Multiple (17) times attack on https port 443: unauthorized access to Wordpress REST Api (POST /wp-json/batch/v1/) 10:04:41 unauthorized access to Wordpress REST Api (POST /wp-json/batch/v1/) 10:04:41 unauthorized access to Wordpress REST Api (POST /wp-json/batch/v1/) 10:04:41 unauthorized access to Wordpress REST Api (POST /wp-json/batch/v1/) 10:04:41 unauthorized access to Wordpress REST Api (POST /wp-json/batch/v1/) 10:04:42 unauthorized access to Wordpress REST Api (POST /wp-json/batch/v1/) 10:04:42 unauthorized access to Wordpress REST Api (POST /wp-json/batch/v1/) 10:04:42 Hacking attempt (GET /wp/v2/posts/999999) 10:04:42 Hacking attempt (GET /wp/v2/pages) show less	Hacking Web App Attack
🇳🇱 45.153.34.39	23 Sep 2026	Configuration snooping with .env file (GET /.env)	Hacking Web App Attack
🇺🇸 52.248.43.42	23 Sep 2026	Microsoft Exchange Server vulnerability ZDI-CAN-18333 attack (GET /autodiscover/autodiscover.json?@z ... show more Microsoft Exchange Server vulnerability ZDI-CAN-18333 attack (GET /autodiscover/autodiscover.json?@zdi/Powershell) show less	Hacking Web App Attack
🇬🇧 138.68.189.160	23 Sep 2026	Illegal http header (POST /)	Hacking Web App Attack
🇺🇸 162.243.173.22	23 Sep 2026	Multiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) 10 ... show more Multiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) 10:08:04 Configuration snooping with .env file (GET /.env) show less	Hacking Web App Attack