AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User zaschf joined AbuseIPDB in April 2021 and has reported 236 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
180.76.231.116	07 Jun 2021	977 attempts to find a hole in my server, predominantly trying sql and php access.	Hacking Brute-Force
119.27.161.85	02 Jun 2021	hundreds of attempts to find mysql, sysadmin, php, pma etc, accessible pages on my server like /adm ... show more hundreds of attempts to find mysql, sysadmin, php, pma etc, accessible pages on my server like /admin/sysadmin/index.php, /administrator/db/index.php /db/phpMyAdmin-3/index.php /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php show less	Hacking Brute-Force
185.142.236.40	25 Apr 2021	multiple request_uri: /.well-known/security.txt /sitemap.xml	Hacking Web App Attack
142.93.185.140	24 Apr 2021	Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 Multiple ... show more Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 Multiple request_uri: /jenkins/login /manager/html /wp-login.php /_ignition/execute-solution /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /login show less	Hacking Web App Attack
104.223.92.90	24 Apr 2021	request_uri: /level/15/exec/-/sh/run/CR hundreds of attempts per day the execute the above script.	Hacking Web App Attack
45.155.205.27	23 Apr 2021	Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0. ... show more Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 Multuple request_uri: /Autodiscover/Autodiscover.xml /wp-content/plugins/wp-file-manager/readme.txt /index.php /_ignition/execute-solution /solr/admin/info/system /console/ /api/jsonws/invoke /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Hacking Web App Attack
193.46.254.25	19 Apr 2021	Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0 63 unique requ ... show more Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0 63 unique request_uri: "/sip/sitemap/" "/sitemap/asterisk/" "/sitemap.sip/" "/yeastar/" "/yealink/" "/vtech/" "/voip/sip/" "/voip/" "/txt/" "/tiger/" "/tftproot/" "/tftpphone/" "/tftpboot/" "/tftp/" "/spectralink/" "/spa/" "/snom/" "/sipura/" "/sipconf/" "/sip/" "/sip.txt/" "/sip.conf/" "/sip.cfg/" "/sangoma/" "/provisioning/" "/provision/" "/prov/" "/polycom/" "/phone1.cfg/" "/phone/" "/phone.cfg/" "/panasonic/" "/mitel/" "/linksys/" "/gs/" "/grandstream/" "/goautodial/" "/gateway/" "/extensions.conf/" "/etc/asterisk/sip.conf/" "/etc/asterisk/" "/digium/" "/config.txt/" "/conf/" "/conf.cfg/" "/cisco/" "/cfg/" "/backups/" "/atacom/" "/ata/" "/asterisk/" "/asterisk.conf/" "/asterisk.cfg/" "/algo/" "/wkn/" "/bkp/" "/aastra/" "/Telephone/" "/SPA112/" "/Line/" "/firmware/" "/autoprovision/" "/reboot/" show less	Hacking Web App Attack
141.98.10.207	19 Apr 2021	Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0 63 distinct re ... show more Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0 63 distinct requiest_uri: "/sip/sitemap/" "/sitemap/asterisk/" "/sitemap.sip/" "/yeastar/" "/yealink/" "/vtech/" "/voip/sip/" "/voip/" "/txt/" "/tiger/" "/tftproot/" "/tftpphone/" "/spa/" "/spectralink/" "/tftpboot/" "/tftp/" "/snom/" "/sipura/" "/sipconf/" "/sip/" "/sip.txt/" "/sip.conf/" "/sip.cfg/" "/provisioning/" "/sangoma/" "/provision/" "/prov/" "/polycom/" "/panasonic/" "/phone1.cfg/" "/phone/" "/phone.cfg/" "/mitel/" "/linksys/" "/gs/" "/grandstream/" "/goautodial/" "/gateway/" "/extensions.conf/" "/etc/asterisk/sip.conf/" "/etc/asterisk/" "/digium/" "/config.txt/" "/conf/" "/cfg/" "/cisco/" "/conf.cfg/" "/backups/" "/atacom/" "/ata/" "/asterisk/" "/asterisk.conf/" "/asterisk.cfg/" "/algo/" "/wkn/" "/bkp/" "/aastra/" "/Telephone/" "/SPA112/" "/Line/" "/autoprovision/" "/firmware/" "/reboot/" show less	Hacking Web App Attack
106.75.10.51	19 Apr 2021	Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show more Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 178 different request_uri's tried to find holes in js, ccs, php, asp,api, json, etc, etc. show less	Hacking Web App Attack
52.65.15.196	17 Apr 2021	Uses different agents: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) C ... show more Uses different agents: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.62 Safari/537.36 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.517 Safari/537.36 Multiple request_uri: /wp-login.php /wordpress/wp-login.php /blog/wp-login.php /wp/wp-login.php All resulting in 404. show less	Hacking Web App Attack
209.141.45.200	17 Apr 2021	Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 Trying regularl ... show more Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 Trying regularly request_uri: /config/getuser show less	Hacking Web App Attack
222.112.82.229	17 Apr 2021	Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0. ... show more Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Multiple request_uri targeting phpMyAdmin, sqlmanager, mysqladmin, PMA, etc, etc. 123 attempts per minute. show less	Hacking Web App Attack
103.45.130.217	12 Apr 2021	agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0. ... show more agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 request_uri: "/jenkins/login" "/login" "/axis2/axis2-admin/login" "/manager/html" "/websql/index.php" "/MySQLAdmin/index.php" "/SQL/index.php" "/sqladmin/index.php" "/sql/index.php" "/mysql/mysqlmanager/index.php" "/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php" "/mysql/sqlmanager/index.php" "/mysql/admin/index.php" "/mysql/dbadmin/index.php" "/phppma/index.php" "/phpmy/index.php" "/shopdb/index.php" "/__phpMyAdmin/index.php" "/program/index.php" "/phpMyAdmln/index.php" "/phpMyAdmin_ai/index.php" "/WWW/phpMyAdmin/index.php" "/phpMyAdminhf/index.php" "/sbb/index.php" "/123131/index.php" "/phpMyAdminn/index.php" "/321/index.php" "/phpMyAdmin_111/index.php" "/phpmadmin/index.php" "/download/index.php" "/phpNyAdmin/index.php" "/1/index.php" "/php2MyAdmin/index.php" "/phpiMyAdmin/index.php" Trying 1000s of attempts in just a few minutes. show less	Hacking Web App Attack
77.245.15.162	10 Apr 2021	agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) multiple request_uri: /struts2-rest-show ... show more agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) multiple request_uri: /struts2-rest-showcase/orders.xhtml /index.action /index.do show less	Hacking Web App Attack
3.142.153.150	10 Apr 2021	agent: python-requests/2.25.1 multiple request_uri: /shell.php /upload.php /up.php docs/ /pdf ... show more agent: python-requests/2.25.1 multiple request_uri: /shell.php /upload.php /up.php docs/ /pdf/ /files/ /wso.php /indoxploit.php /indoxploit.php /olux.php /templates/atomic/error.php /templates/atomic/index.php /templates/protostar/error.php /templates/protostar/index.php /templates/beez_20/error.php /templates/beez_20/index.php /templates/beez5/error.php /templates/beez5/index.php /templates/beez3/error.php /templates/beez3/index.php /templates/system/error.php /templates/system/index.php /templates/rhuk_milkyway/index.php /templates/ja_purity/index.php /templates/beez/index.php /administrator/templates/isis/error.php /administrator/templates/isis/index.php /administrator/templates/hathor/error.php /administrator/templates/hathor/index.php /administrator/templates/bluestork/error.php /administrator/templates/bluestork/index.php /shell.php /upload.php /up.php" /V5.php /V3.php /components/com_b2jcontact/izoc.php Random guessing many more different paths!!! show less	Hacking Web App Attack
209.141.45.200	09 Apr 2021	agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 request_uri: /c ... show more agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 request_uri: /config/getuser show less	Hacking Web App Attack
45.155.205.211	08 Apr 2021	Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0. ... show more Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 Multiple request_uri: /_ignition/execute-solution /wp-content/plugins/wp-file-manager/readme.txt /solr/admin/info/system /Autodiscover/Autodiscover.xml /api/jsonws/invoke /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /console/ show less	Hacking Web App Attack
34.215.69.55	07 Apr 2021	agent: Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 S ... show more agent: Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36 multiple request_uri: /wordpress/wp-login.php /blog/wp-login.php /wp/wp-login.php /wp-login.php /phpMyAdmin/index.php /pma/index.php /phpmyadmin/index.php /wp-login.php All resulting in 404 show less	Hacking Web App Attack
35.181.87.238	05 Apr 2021	agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ ... show more agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36 Multiple request_uri: /wp/wp-login.php /wordpress/wp-login.php /blog/wp-login.php /wp-login.php show less	Hacking Web App Attack
121.196.182.176	05 Apr 2021	Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 Multiple ... show more Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 Multiple request_uri: /wp-login.php /manager/html /login /jenkins/login /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /_ignition/execute-solution show less	Hacking Web App Attack
222.186.136.150	04 Apr 2021	agent: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.551 ... show more agent: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.551.0 Safari/534.10 request_uri: /404/index.html show less	Hacking
54.245.193.246	04 Apr 2021	Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show more Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36 multiple request_uri: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /api/getServices /public/.env /storage/.env /vendor/.env /.env show less	Hacking Web App Attack
159.65.145.239	04 Apr 2021	agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 Mutiple r ... show more agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 Mutiple request_uri: /wp-login.php /manager/html /jenkins/login /login /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /_ignition/execute-solution show less	Hacking Web App Attack
103.36.101.161	04 Apr 2021	Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 multiple ... show more Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0 multiple request_uri: /login /jenkins/login /manager/html /wp-login.php /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /_ignition/execute-solution show less	Hacking Web App Attack
125.64.94.140	03 Apr 2021	Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 ... show more Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36 request_uri: /.well-known/security.txt show less	Hacking Web App Attack