kivitendo.de - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

The webmaster of kivitendo.de joined AbuseIPDB in September 2022 and has reported 25,003 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 34.22.45.90	2 hours ago	{"reqId":"K6IYkcwu2xQapr4GIAbJ","level":1,"time":"2026-06-13T22:51:35+00:00","remoteAddr":"34.22.45. ... show more {"reqId":"K6IYkcwu2xQapr4GIAbJ","level":1,"time":"2026-06-13T22:51:35+00:00","remoteAddr":"34.22.45.90","user":"--","app":"core","method":"GET","url":"/app/.git/config","scriptName":"/index.php","message":"Trusted domain error. \"34.22.45.90\" tried to access using \"37.24.44.97\" as host.","userAgent":"Mozilla/5.0 (Linux; Android 9; ONEPLUS A3010) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"IaiSJBZn7ZRStcHd5fCD","level":1,"time":"2026-06-13T22:51:35+00:00","remoteAddr":"34.22.45.90","user":"--","app":"core","method":"GET","url":"/.git/config","scriptName":"/index.php","message":"Trusted domain error. \"34.22.45.90\" tried to access using \"37.24.44.97\" as host.","userAgent":"Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko ) Version/5.1 Mobile/9B176 Safari/7534.48.3","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"yi223UmlOqZ9bUYpOWma","level":1,"time":" ... show less	Brute-Force Web App Attack
🇫🇮 35.228.13.30	2 hours ago	{"reqId":"lcuqvqYQPATeZIVIIHQV","level":1,"time":"2026-06-13T22:25:50+00:00","remoteAddr":"35.228.13 ... show more {"reqId":"lcuqvqYQPATeZIVIIHQV","level":1,"time":"2026-06-13T22:25:50+00:00","remoteAddr":"35.228.13.30","user":"--","app":"core","method":"GET","url":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","scriptName":"/index.php","message":"Trusted domain error. \"35.228.13.30\" tried to access using \"37.24.44.97\" as host.","userAgent":"SEC-SGHX210/1.0 UP.Link/6.3.1.13.0","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"ylbvep2HbXnsqiUpHxjO","level":1,"time":"2026-06-13T22:25:50+00:00","remoteAddr":"35.228.13.30","user":"--","app":"core","method":"GET","url":"/wp-json/gravitysmtp/v1/settings","scriptName":"/index.php","message":"Trusted domain error. \"35.228.13.30\" tried to access using \"37.24.44.97\" as host.","userAgent":"Mozilla/5.0 (PLAYSTATION 3; 2.00)","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"yDoUyaT3LSZk2GjNmyK3","level":1,"time":"2026-06-13T22:25:50+00:00","remoteAddr":"35.228.13.30","user":"--","app":"core","method":"GET","url":"/wp-json/g ... show less	Brute-Force Web App Attack
🇮🇹 34.154.160.52	3 hours ago	{"reqId":"eV7rg50RHi8lS7jGTvPF","level":1,"time":"2026-06-13T21:53:24+00:00","remoteAddr":"34.154.16 ... show more {"reqId":"eV7rg50RHi8lS7jGTvPF","level":1,"time":"2026-06-13T21:53:24+00:00","remoteAddr":"34.154.160.52","user":"--","app":"core","method":"GET","url":"/actuator/heapdump","scriptName":"/index.php","message":"Trusted domain error. \"34.154.160.52\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 6.2; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"pfnKSu6Fucq8Ud2cQLXs","level":1,"time":"2026-06-13T21:53:24+00:00","remoteAddr":"34.154.160.52","user":"--","app":"core","method":"GET","url":"/actuator/configprops","scriptName":"/index.php","message":"Trusted domain error. \"34.154.160.52\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (Linux; Android 9; Pixel 3a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"ObznPe1WEzEix9IJ726r","level":1,"time":"2026-06-13T21:53:24+00:00"," ... show less	Brute-Force Web App Attack
🇭🇰 34.92.253.71	3 hours ago	{"reqId":"dhSgDREPUBSTcuHXYiUg","level":1,"time":"2026-06-13T21:43:22+00:00","remoteAddr":"34.92.253 ... show more {"reqId":"dhSgDREPUBSTcuHXYiUg","level":1,"time":"2026-06-13T21:43:22+00:00","remoteAddr":"34.92.253.71","user":"--","app":"core","method":"GET","url":"/public/.env","scriptName":"/index.php","message":"Trusted domain error. \"34.92.253.71\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (Linux; Android 9; SM-G950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"V5eiJqF6EAUU8tGv6SZp","level":1,"time":"2026-06-13T21:43:22+00:00","remoteAddr":"34.92.253.71","user":"--","app":"core","method":"GET","url":"/wp/.env","scriptName":"/index.php","message":"Trusted domain error. \"34.92.253.71\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (X11; Linux i686; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"kvbHlSZwdhhPeCoB1115","level":1,"time":"2026-06-13T21:43:22+00:00","remoteAdd ... show less	Brute-Force Web App Attack
🇸🇬 34.177.84.252	3 hours ago	{"reqId":"LuhrxJyurjh8UbPlFOVb","level":1,"time":"2026-06-13T21:24:23+00:00","remoteAddr":"34.177.84 ... show more {"reqId":"LuhrxJyurjh8UbPlFOVb","level":1,"time":"2026-06-13T21:24:23+00:00","remoteAddr":"34.177.84.252","user":"--","app":"core","method":"GET","url":"/shop/.git/config","scriptName":"/index.php","message":"Trusted domain error. \"34.177.84.252\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (Linux; Android 9; SM-G960U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"lpLWj06rdwARvKTQu5xQ","level":1,"time":"2026-06-13T21:24:23+00:00","remoteAddr":"34.177.84.252","user":"--","app":"core","method":"GET","url":"/wp-content/.git/config","scriptName":"/index.php","message":"Trusted domain error. \"34.177.84.252\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3872.0 Safari/537.36 Edg/78.0.244.0","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"C5D8u ... show less	Brute-Force Web App Attack
🇺🇸 34.186.225.103	3 hours ago	{"reqId":"vTth2gdkUfj9b8WPWSwc","level":1,"time":"2026-06-13T21:17:41+00:00","remoteAddr":"34.186.22 ... show more {"reqId":"vTth2gdkUfj9b8WPWSwc","level":1,"time":"2026-06-13T21:17:41+00:00","remoteAddr":"34.186.225.103","user":"--","app":"core","method":"GET","url":"/wp-json/gravitysmtp/v1/settings","scriptName":"/index.php","message":"Trusted domain error. \"34.186.225.103\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2166.2 Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"5u0aJCYYqQNHn8pzQb1n","level":1,"time":"2026-06-13T21:17:41+00:00","remoteAddr":"34.186.225.103","user":"--","app":"core","method":"GET","url":"/wp-json/wp/v2/settings","scriptName":"/index.php","message":"Trusted domain error. \"34.186.225.103\" tried to access using \"mail.novoclon.com\" as host.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"ETgMdHgPxoMoOQbGiHwr ... show less	Brute-Force Web App Attack
🇦🇺 170.64.203.247	4 hours ago	[Sat Jun 13 23:00:38.787884 2026] [access_compat:error] [pid 261962:tid 261991] [client 170.64.203.2 ... show more [Sat Jun 13 23:00:38.787884 2026] [access_compat:error] [pid 261962:tid 261991] [client 170.64.203.247:60246] AH01797: client denied by server configuration: /var/www/kivitendo-erp/.git/config [Sat Jun 13 23:00:39.025879 2026] [access_compat:error] [pid 261961:tid 261966] [client 170.64.203.247:60248] AH01797: client denied by server configuration: /var/www/kivitendo-erp/.git/config, referer: http://www.aen-kivi.de/.git/config ... show less	Brute-Force Web App Attack
🇺🇸 35.245.68.239	4 hours ago	[Sat Jun 13 22:20:46.420711 2026] [access_compat:error] [pid 1206137:tid 1206150] [client 35.245.68. ... show more [Sat Jun 13 22:20:46.420711 2026] [access_compat:error] [pid 1206137:tid 1206150] [client 35.245.68.239:51426] AH01797: client denied by server configuration: /var/www/kivitendo-erp/config/.env [Sat Jun 13 22:20:46.425392 2026] [access_compat:error] [pid 1194918:tid 1194964] [client 35.245.68.239:51428] AH01797: client denied by server configuration: /var/www/kivitendo-erp/config/.env.local ... show less	Brute-Force Web App Attack
🇧🇷 34.39.237.108	7 hours ago	[Sat Jun 13 19:17:38.947155 2026] [access_compat:error] [pid 1194919:tid 1194936] [client 34.39.237. ... show more [Sat Jun 13 19:17:38.947155 2026] [access_compat:error] [pid 1194919:tid 1194936] [client 34.39.237.108:33132] AH01797: client denied by server configuration: /var/www/kivitendo-erp/config/.aws [Sat Jun 13 19:17:38.953245 2026] [access_compat:error] [pid 1194919:tid 1194928] [client 34.39.237.108:33154] AH01797: client denied by server configuration: /var/www/kivitendo-erp/config/aws.json ... show less	Brute-Force Web App Attack
🇩🇪 167.94.146.61	17 hours ago	2026-06-13T09:44:43.941723+02:00 steigmann sshd[3715162]: refused connect from 61.146.94.167.censys- ... show more 2026-06-13T09:44:43.941723+02:00 steigmann sshd[3715162]: refused connect from 61.146.94.167.censys-scanner.com (167.94.146.61) 2026-06-13T09:44:46.787327+02:00 steigmann sshd[3715164]: refused connect from 61.146.94.167.censys-scanner.com (167.94.146.61) ... show less	Brute-Force SSH
🇮🇳 34.126.212.69	19 hours ago	[Sat Jun 13 07:52:40.113733 2026] [authz_core:error] [pid 68247:tid 68247] [client 34.126.212.69:523 ... show more [Sat Jun 13 07:52:40.113733 2026] [authz_core:error] [pid 68247:tid 68247] [client 34.126.212.69:52396] AH01630: client denied by server configuration: /var/www/filterbox.de/.htaccess [Sat Jun 13 07:52:40.116374 2026] [authz_core:error] [pid 68248:tid 68248] [client 34.126.212.69:52392] AH01630: client denied by server configuration: /var/www/filterbox.de/.htpasswd ... show less	Brute-Force Web App Attack
🇬🇧 35.203.210.75	21 hours ago	Jun 13 03:40:15 bombe sshd[855050]: refused connect from 35.203.210.75 (35.203.210.75) Jun 13 03:41: ... show more Jun 13 03:40:15 bombe sshd[855050]: refused connect from 35.203.210.75 (35.203.210.75) Jun 13 03:41:14 bombe sshd[855059]: refused connect from 35.203.210.75 (35.203.210.75) ... show less	Brute-Force SSH
🇬🇧 35.203.211.137	12 Jun 2026	2026-06-13T01:32:24.876525+02:00 steigmann sshd[3600283]: refused connect from 137.211.203.35.bc.goo ... show more 2026-06-13T01:32:24.876525+02:00 steigmann sshd[3600283]: refused connect from 137.211.203.35.bc.googleusercontent.com (35.203.211.137) 2026-06-13T01:33:23.934779+02:00 steigmann sshd[3600309]: refused connect from 137.211.203.35.bc.googleusercontent.com (35.203.211.137) ... show less	Brute-Force SSH
🇺🇦 1.2.3.4	12 Jun 2026	...	Brute-Force Web App Attack
🇳🇱 91.92.241.87	12 Jun 2026	Jun 12 05:01:39 weitan postfix/submission/smtpd[5308]: warning: unknown[91.92.241.87]: SASL LOGIN au ... show more Jun 12 05:01:39 weitan postfix/submission/smtpd[5308]: warning: unknown[91.92.241.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 12 05:01:45 weitan postfix/submission/smtpd[5308]: warning: unknown[91.92.241.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇻🇳 123.31.45.232	12 Jun 2026	Jun 12 03:22:56 weitan postfix/submission/smtpd[3874]: warning: unknown[123.31.45.232]: SASL PLAIN a ... show more Jun 12 03:22:56 weitan postfix/submission/smtpd[3874]: warning: unknown[123.31.45.232]: SASL PLAIN authentication failed: Jun 12 04:36:39 weitan postfix/submission/smtpd[4907]: warning: unknown[123.31.45.232]: SASL PLAIN authentication failed: ... show less	Brute-Force
🇵🇰 175.107.204.141	11 Jun 2026	Jun 11 07:07:57 weitan postfix/submission/smtpd[2772463]: warning: unknown[175.107.204.141]: SASL PL ... show more Jun 11 07:07:57 weitan postfix/submission/smtpd[2772463]: warning: unknown[175.107.204.141]: SASL PLAIN authentication failed: Jun 11 07:17:44 weitan postfix/submission/smtpd[2772655]: warning: unknown[175.107.204.141]: SASL PLAIN authentication failed: ... show less	Brute-Force
🇺🇸 135.232.220.248	10 Jun 2026	[Thu Jun 11 00:13:02.936677 2026] [authz_core:error] [pid 56473:tid 56473] [client 135.232.220.248:1 ... show more [Thu Jun 11 00:13:02.936677 2026] [authz_core:error] [pid 56473:tid 56473] [client 135.232.220.248:1574] AH01630: client denied by server configuration: /var/www/filterbox.de/server-status [Thu Jun 11 00:13:13.284770 2026] [authz_core:error] [pid 56176:tid 56176] [client 135.232.220.248:1842] AH01630: client denied by server configuration: /var/www/filterbox.de/.htpasswd ... show less	Brute-Force Web App Attack
🇺🇦 1.2.3.4	10 Jun 2026	...	Brute-Force Web App Attack
🇩🇪 35.198.83.111	10 Jun 2026	[Wed Jun 10 20:16:52.685836 2026] [authz_core:error] [pid 56473:tid 56473] [client 35.198.83.111:387 ... show more [Wed Jun 10 20:16:52.685836 2026] [authz_core:error] [pid 56473:tid 56473] [client 35.198.83.111:38742] AH01630: client denied by server configuration: /var/www/poolueberdachung.de/.htpasswd [Wed Jun 10 20:16:52.692930 2026] [authz_core:error] [pid 56248:tid 56248] [client 35.198.83.111:38752] AH01630: client denied by server configuration: /var/www/poolueberdachung.de/.htaccess ... show less	Brute-Force Web App Attack
🇺🇸 172.183.134.182	10 Jun 2026	[Wed Jun 10 16:26:48.496394 2026] [access_compat:error] [pid 290173:tid 290218] [client 172.183.134. ... show more [Wed Jun 10 16:26:48.496394 2026] [access_compat:error] [pid 290173:tid 290218] [client 172.183.134.182:30784] AH01797: client denied by server configuration: /var/www/kivitendo/.git/HEAD [Wed Jun 10 16:26:48.930190 2026] [access_compat:error] [pid 290172:tid 290207] [client 172.183.134.182:30786] AH01797: client denied by server configuration: /var/www/kivitendo/.git/config ... show less	Brute-Force Web App Attack
🇺🇸 52.173.123.148	10 Jun 2026	[Wed Jun 10 14:57:53.713519 2026] [access_compat:error] [pid 217514:tid 217562] [client 52.173.123.1 ... show more [Wed Jun 10 14:57:53.713519 2026] [access_compat:error] [pid 217514:tid 217562] [client 52.173.123.148:31266] AH01797: client denied by server configuration: /var/www/kivitendo-erp-git/.git/HEAD [Wed Jun 10 14:57:54.456419 2026] [access_compat:error] [pid 217513:tid 217528] [client 52.173.123.148:30523] AH01797: client denied by server configuration: /var/www/kivitendo-erp-git/.git/config ... show less	Brute-Force Web App Attack
🇵🇱 34.158.228.153	10 Jun 2026	[Wed Jun 10 14:50:55.830276 2026] [authz_core:error] [pid 56089:tid 56089] [client 34.158.228.153:50 ... show more [Wed Jun 10 14:50:55.830276 2026] [authz_core:error] [pid 56089:tid 56089] [client 34.158.228.153:50920] AH01630: client denied by server configuration: /var/www/pooldeck.de/.htpasswd [Wed Jun 10 14:50:55.835523 2026] [authz_core:error] [pid 56012:tid 56012] [client 34.158.228.153:50926] AH01630: client denied by server configuration: /var/www/pooldeck.de/.htaccess ... show less	Brute-Force Web App Attack
🇺🇸 172.174.221.227	10 Jun 2026	[Wed Jun 10 14:05:00.564438 2026] [authz_core:error] [pid 149154:tid 149174] [client 172.174.221.227 ... show more [Wed Jun 10 14:05:00.564438 2026] [authz_core:error] [pid 149154:tid 149174] [client 172.174.221.227:47305] AH01630: client denied by server configuration: /var/www/kivitendo-erp/.git/HEAD [Wed Jun 10 14:05:01.187612 2026] [authz_core:error] [pid 149155:tid 149204] [client 172.174.221.227:47322] AH01630: client denied by server configuration: /var/www/kivitendo-erp/.git/config ... show less	Brute-Force Web App Attack
🇺🇸 20.81.159.35	10 Jun 2026	[Wed Jun 10 13:24:16.237883 2026] [authz_core:error] [pid 55436:tid 55436] [client 20.81.159.35:2702 ... show more [Wed Jun 10 13:24:16.237883 2026] [authz_core:error] [pid 55436:tid 55436] [client 20.81.159.35:27027] AH01630: client denied by server configuration: /var/www/filterbox.de/server-status [Wed Jun 10 13:24:21.348119 2026] [authz_core:error] [pid 54089:tid 54089] [client 20.81.159.35:26974] AH01630: client denied by server configuration: /var/www/filterbox.de/.htpasswd ... show less	Brute-Force Web App Attack