AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User barbarella joined AbuseIPDB in March 2021 and has reported 223,789 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇧🇬 212.50.13.222	10 Oct 2026	Multiple (2) times attack on https port 443: Hacking attempt of Wordpress (scan for users/passwords) ... show more Multiple (2) times attack on https port 443: Hacking attempt of Wordpress (scan for users/passwords) (POST /xmlrpc.php) 10:32:40 Hacking attempt of Wordpress (scan for users/passwords) (POST /xmlrpc.php) show less	Hacking Web App Attack
🇺🇸 216.25.124.26	10 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 217.60.97.49	10 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 4.227.177.164	10 Oct 2026	Attack attempt to Red Lion Remote Access (GET /portal/redlion)	Hacking Web App Attack
🇺🇸 9.234.40.163	10 Oct 2026	CVE-2025-31324: SAP NetWeaver Remote Code Execution Vulnerability (GET /developmentserver/metadataup ... show more CVE-2025-31324: SAP NetWeaver Remote Code Execution Vulnerability (GET /developmentserver/metadatauploader) show less	Hacking Web App Attack
🇺🇸 20.14.76.20	10 Oct 2026	searching Apache Druid Security Vulnerabilities Exploit (GET /druid/index.html)	Hacking Web App Attack
🇺🇸 20.46.236.0	10 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇺🇸 20.80.93.141	10 Oct 2026	CVE-2025-31324: SAP NetWeaver Remote Code Execution Vulnerability (GET /developmentserver/metadataup ... show more CVE-2025-31324: SAP NetWeaver Remote Code Execution Vulnerability (GET /developmentserver/metadatauploader) show less	Hacking Web App Attack
🇧🇪 34.22.126.178	10 Oct 2026	Multiple (111) times attack on https port 443: Configuration snooping in .env file (GET /.env.aws) ... show more Multiple (111) times attack on https port 443: Configuration snooping in .env file (GET /.env.aws) 08:12:28 Configuration snooping in .env file (GET /.env-sample) 08:12:28 Configuration snooping with .env file (GET /.docker/laravel/app/.env) 08:12:28 Configuration snooping in .env file (GET /.env.anthropic) 08:12:28 illegal scan for AWS credentials file (GET /.aws/config) 08:12:28 illegal scan for AWS credentials file (GET /.aws/credentials.bak) 08:12:28 Configuration snooping with .env file (GET /.docker/.env) 08:12:28 Configuration snooping (GET /.docker/config.json) 08:12:28 Configuration snooping with .env file (GET /.env) show less	Hacking Web App Attack
🇧🇪 34.62.180.47	10 Oct 2026	Illegal http header (XTYV /)	Hacking Web App Attack
🇧🇪 35.241.177.109	10 Oct 2026	Illegal http header (BWEZ /)	Hacking Web App Attack
🇺🇸 43.130.12.43	10 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 43.153.102.138	10 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 43.165.126.130	10 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇺🇸 43.166.132.142	10 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇺🇸 45.56.79.53	10 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇺🇸 45.79.207.111	10 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 45.79.207.129	10 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 50.116.26.161	10 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 66.132.172.42	10 Oct 2026	searching for Cobalt Strike server beacon (GET /wiki)	Hacking Web App Attack
🇺🇸 71.6.235.40	10 Oct 2026	Multiple (3) times attack on http port 80: Illegal http header rejected by modsecurity (GET /) 06 ... show more Multiple (3) times attack on http port 80: Illegal http header rejected by modsecurity (GET /) 06:23:33 Attack attempt on router (GET /evox/about) 06:23:44 Hacking attempt of Vulnerable Cisco or D-Link Routers (GET /HNAP1) show less	Hacking Web App Attack
🇳🇱 94.154.43.84	10 Oct 2026	Configuration snooping with .env file (GET /.env)	Hacking Web App Attack
🇨🇲 102.244.97.185	10 Oct 2026	Multiple (48) times attack on http port 80: illegal attempt to access local shell (POST /cgi-bin/.%2 ... show more Multiple (48) times attack on http port 80: illegal attempt to access local shell (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) 06:47:48 illegal attempt to access local shell (POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) 06:47:49 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 06:47:50 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 06:47:51 Hacking attempt (POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) 06:47:51 hacking attempt (POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) 06:47:52 Hacking attempt (POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input) 06:47:52 scanning for exposed directories (GET /vendor show less	Hacking Web App Attack
🇫🇷 143.244.57.123	10 Oct 2026	Multiple (78) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-conten ... show more Multiple (78) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-content/uploads/) 06:42:43 Hacking attempt of Wordpress (GET /wp-includes/) 06:42:43 Hacking attempt of Wordpress (GET /wp-includes/css/) 06:42:43 Hacking attempt of Wordpress (GET /wp-includes/ID3/) 06:42:43 Hacking attempt of Wordpress (GET /wp-includes/IXR/) 06:42:43 Hacking attempt of Wordpress (GET /wp-includes/Requests/) 06:42:43 Hacking attempt of Wordpress (GET /wp-includes/SimplePie/) 06:42:43 Hacking attempt of Wordpress (GET /wp-includes/Text/) 06:42:43 unauthorized access to Wordpress files (GET /wp-content/mu-plugins-old/) show less	Hacking Web App Attack
🇨🇭 209.99.188.170	10 Oct 2026	Multiple (8) times attack on https port 443: Configuration snooping (GET /.git/config) 07:32:22 ... show more Multiple (8) times attack on https port 443: Configuration snooping (GET /.git/config) 07:32:22 illegal scan for AWS credentials file (GET /.aws/credentials) 07:32:22 Configuration snooping with .env file (GET /.env) 07:32:22 Configuration snooping in .env file (GET /.env.local) 07:32:22 attack Microsoft ASP.NET configuration file (GET /web.config) 07:32:22 configuration snooping of .json files (GET /appsettings.json) 07:32:22 Configuration snooping (GET /config.php) 07:32:22 Configuration snooping of Docker-Compose (GET /docker-compose.yml) show less	Hacking Web App Attack