David Shafer - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User David Shafer joined AbuseIPDB in February 2022 and has reported 7,193 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇨🇳 120.48.3.136	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 22222 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 22222 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 162.216.150.116	3 minutes ago	Honeypot hit: SSH handshake/banner (32 bytes of payload); 59910 [1] TCP Reported by: https://github. ... show more Honeypot hit: SSH handshake/banner (32 bytes of payload); 59910 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇸🇬 47.84.105.75	3 minutes ago	Honeypot hit: Unauthorized traffic (243 bytes of payload); 12572 [3] TCP Reported by: https://github ... show more Honeypot hit: Unauthorized traffic (243 bytes of payload); 12572 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 162.216.149.129	3 minutes ago	Honeypot hit: HTTP/1.1 request on 10040 GET / User-Agent: Hello from Palo Alto Networks, find out m ... show more Honeypot hit: HTTP/1.1 request on 10040 GET / User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity Accept-Encoding: gzip; 10040 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 205.210.31.47	3 minutes ago	Honeypot hit: Unauthorized traffic (372 bytes of payload); 9443 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (372 bytes of payload); 9443 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇳 111.4.83.181	3 minutes ago	Honeypot hit: Unauthorized traffic (19 bytes of payload); 33389 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (19 bytes of payload); 33389 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 147.185.132.116	3 minutes ago	Honeypot hit: SSH handshake/banner (32 bytes of payload); 30220 [1] TCP Reported by: https://github. ... show more Honeypot hit: SSH handshake/banner (32 bytes of payload); 30220 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇬🇧 87.236.176.250	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 1935 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 1935 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 162.216.150.152	3 minutes ago	Honeypot hit: Large payload (1483 bytes); 49128 [2] TCP Reported by: https://github.com/sefinek/T-Po ... show more Honeypot hit: Large payload (1483 bytes); 49128 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇨🇳 223.199.189.98	3 minutes ago	Honeypot hit: Unauthorized traffic (16 bytes of payload); 5938 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 5938 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 66.132.186.179	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 23994 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 23994 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 185.247.137.225	3 minutes ago	Honeypot hit: Unauthorized traffic (271 bytes of payload); 1935 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (271 bytes of payload); 1935 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇳 43.248.108.6	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 5938 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 5938 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 71.187.101.184	3 minutes ago	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/ ... show more Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan Hacking
🇮🇩 103.179.254.247	3 minutes ago	Honeypot hit: HTTP/1.1 request on 52869 POST /picsdesc.xml User-Agent: Go-http-client/1.1 Accept-En ... show more Honeypot hit: HTTP/1.1 request on 52869 POST /picsdesc.xml User-Agent: Go-http-client/1.1 Accept-Encoding: gzip POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /tmp/; rm -rf t`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇨🇳 220.171.34.194	3 minutes ago	Honeypot hit: Large payload (1457 bytes); 5938 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 5938 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇹🇼 198.235.24.112	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 23856 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 23856 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇳 175.30.48.207	3 minutes ago	Honeypot hit: HTTP/1.1 request on 5938 GET / Accept: /; 5938 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 5938 GET / Accept: /; 5938 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇮 147.185.133.136	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 10023 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 10023 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇳 120.27.9.128	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 22222 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 22222 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 159.65.105.204	3 minutes ago	Honeypot hit: Empty payload (likely service probe); 1935 [39] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 1935 [39] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 205.210.31.92	3 minutes ago	Honeypot hit: HTTP/1.1 request on 8991 GET / User-Agent: Hello from Palo Alto Networks, find out mo ... show more Honeypot hit: HTTP/1.1 request on 8991 GET / User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity Accept-Encoding: gzip; 8991 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 47.251.100.123	3 minutes ago	Honeypot hit: Unauthorized traffic (243 bytes of payload); 2069 [3] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (243 bytes of payload); 2069 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 47.251.113.98	3 minutes ago	Honeypot hit: Unauthorized traffic (243 bytes of payload); 9008 [3] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (243 bytes of payload); 9008 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 162.216.149.145	3 minutes ago	Honeypot hit: Large payload (1483 bytes); 49467 [2] TCP Reported by: https://github.com/sefinek/T-Po ... show more Honeypot hit: Large payload (1483 bytes); 49467 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot