AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User barbarella joined AbuseIPDB in March 2021 and has reported 224,604 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 66.228.62.150	15 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇷🇴 92.118.39.93	15 Oct 2026	Attempted to access git files. (GET /.git/config)	Web App Attack
🇫🇷 109.205.176.10	15 Oct 2026	Configuration snooping with .env file (GET /.env)	Hacking Web App Attack
🇸🇬 129.226.211.81	15 Oct 2026	Multiple (5) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/.% ... show more Multiple (5) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) 11:04:53 illegal attempt to access local shell (POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) 11:05:01 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 11:05:05 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 11:05:06 Hacking attempt (POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) show less	Hacking Web App Attack
🇭🇰 152.32.212.17	15 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇵🇰 165.99.207.153	15 Oct 2026	Multiple (5) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/.% ... show more Multiple (5) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) 08:57:25 illegal attempt to access local shell (POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) 08:57:26 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 08:57:26 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 08:57:27 Hacking attempt (POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) show less	Hacking Web App Attack
🇳🇴 185.12.59.118	15 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇬🇧 200.138.46.143	15 Oct 2026	illegal attempt to access nonexisting folder (GET /api/mcp)	Hacking Web App Attack
🇷🇴 2.57.121.203	15 Oct 2026	Multiple (2) times attack on https port 443: hacking attempt (GET /login_sid.lua) 10:16:42 Illega ... show more Multiple (2) times attack on https port 443: hacking attempt (GET /login_sid.lua) 10:16:42 Illegal http header rejected by modsecurity (GET /) show less	Hacking Web App Attack
🇺🇸 20.40.233.173	15 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇧🇪 34.77.138.9	15 Oct 2026	Multiple (2) times attack on https port 443: Illegal http header (PSOP /) 09:32:21 Illegal http h ... show more Multiple (2) times attack on https port 443: Illegal http header (PSOP /) 09:32:21 Illegal http header rejected by modsecurity (GET /) show less	Hacking Web App Attack
🇺🇸 40.124.113.85	15 Oct 2026	CVE-2025-31324: SAP NetWeaver Remote Code Execution Vulnerability (GET /developmentserver/metadataup ... show more CVE-2025-31324: SAP NetWeaver Remote Code Execution Vulnerability (GET /developmentserver/metadatauploader) show less	Hacking Web App Attack
🇺🇸 43.153.123.3	15 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇰🇷 43.155.157.239	15 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇺🇸 45.79.207.181	15 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇳🇱 45.156.87.184	15 Oct 2026	Illegal http header (GET /)	Hacking Web App Attack
🇳🇱 77.83.39.94	15 Oct 2026	Configuration snooping (GET /.git/config)	Hacking Web App Attack
🇷🇴 92.118.39.93	15 Oct 2026	Configuration snooping (GET /.git/config)	Hacking Web App Attack
🇩🇪 172.105.76.7	15 Oct 2026	Illegal http header (HEAD /)	Hacking Web App Attack
🇫🇷 185.177.72.64	15 Oct 2026	Multiple (3) times attack on http port 80: Configuration snooping in .env file (GET /.env) 10:17: ... show more Multiple (3) times attack on http port 80: Configuration snooping in .env file (GET /.env) 10:17:11 Configuration snooping in .env file (GET /../.env) 10:17:13 Configuration snooping in .env file (GET /assets/.env) show less	Hacking Web App Attack
🇱🇹 45.227.254.52	15 Oct 2026	illegal attempt to access local file system (GET /scripts/agent-redir-ws-0.1.1.js)	Hacking Web App Attack
🇺🇸 143.244.147.123	15 Oct 2026	Illegal http header (POST /)	Hacking Web App Attack
🇺🇸 172.178.80.180	15 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇷🇴 185.100.87.136	15 Oct 2026	Illegal http header rejected by modsecurity (GET /)	Hacking Web App Attack
🇰🇷 20.200.208.154	15 Oct 2026	Multiple (3) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-content ... show more Multiple (3) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-content/plugins/hellopress/wp_filemanager.php) 07:26:21 Hacking attempt of vulnerable PHP Script (GET /this_is_a_new_hello_world.php) 07:26:22 Hacking attempt of vulnerable PHP Script (GET /init-notica.php) show less	Hacking Web App Attack