AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AFRICARGUS joined AbuseIPDB in November 2022 and has reported 899 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇷🇺 31.135.90.40	12 Dec 2023	31.135.90.40 [12/Dec/2023:21:31:35 +0000] GET "/wp-json" HTTP/2.0 403	Hacking Web App Attack
🇺🇸 51.81.206.205	12 Dec 2023	Brute force attempts & generic script kiddie attacks	Hacking Brute-Force Web App Attack
🇩🇪 156.146.33.66	12 Dec 2023	Tiresome script kiddie attacks	Hacking Brute-Force Web App Attack
🇺🇸 20.118.186.252	12 Dec 2023	Unsuccessful and indiscriminate brute force and script kiddie attacks	Hacking Brute-Force Web App Attack
🇨🇭 51.103.218.239	11 Dec 2023	51.103.218.239 [11/Dec/2023:20:35:07 +0000] GET "/phplogin.php7" HTTP/2.0 404	Hacking Web App Attack
🇫🇷 147.135.129.229	11 Dec 2023	Multiple attempts to get information supporting unauthorised login, including: 147.135.129.229 [1 ... show more Multiple attempts to get information supporting unauthorised login, including: 147.135.129.229 [11/Dec/2023:19:18:04 +0000] GET "/wp-admin/wplogin.php" HTTP/2.0 404 147.135.129.229 [11/Dec/2023:19:17:29 +0000] GET "/wp-content/wplogin.php" HTTP/2.0 404 147.135.129.229 [11/Dec/2023:19:17:32 +0000] GET "/wp-content/plugins/wplogin.php" HTTP/2.0 404 show less	Hacking Web App Attack
🇳🇱 212.102.35.7	11 Dec 2023	Brute force plus hundreds of malicious GET requests	Hacking Brute-Force Bad Web Bot Web App Attack
🇮🇩 103.180.119.90	11 Dec 2023	103.180.119.90 [11/Dec/2023:02:31:40 +0000] POST "/xmlrpc.php" HTTP/1.1 301	Hacking Web App Attack
🇮🇩 180.243.172.14	11 Dec 2023	180.243.172.14 [11/Dec/2023:02:31:41 +0000] POST "/xmlrpc.php" HTTP/2.0 403	Hacking Web App Attack
🇬🇧 194.34.245.51	10 Dec 2023	Attacks aimed at environment variables: 194.34.245.51 [10/Dec/2023:22:49:38 +0000] GET "/.env" HT ... show more Attacks aimed at environment variables: 194.34.245.51 [10/Dec/2023:22:49:38 +0000] GET "/.env" HTTP/1.1 301 194.34.245.51 [10/Dec/2023:22:49:38 +0000] GET "/sendgrid/.env" HTTP/1.1 301 show less	Hacking Web App Attack
🇷🇺 31.41.244.72	10 Dec 2023	Proxy IP from which was launched attempted discovery of a vulnerable exchange box: mail.[redacted ... show more Proxy IP from which was launched attempted discovery of a vulnerable exchange box: mail.[redacted].com 31.41.244.72 [10/Dec/2023:21:29:52 +0000] GET "/autodiscover/[email protected]/owa/?&Email=autodiscover/autodiscover.json%[email protected]" HTTP/2.0 404 Also, MX Toolbox lists this IP as being on six Blacklists. show less	Open Proxy Hacking Web App Attack
🇺🇸 154.16.49.10	10 Dec 2023	Multiple attempts to access PHP resources including: 154.16.49.10 [10/Dec/2023:15:49:34 +0000] GE ... show more Multiple attempts to access PHP resources including: 154.16.49.10 [10/Dec/2023:15:49:34 +0000] GET "/wp-content/themes/intense/block-css.php?mode=upload" HTTP/2.0 404 154.16.49.10 [10/Dec/2023:15:49:35 +0000] GET "/updates.php" HTTP/2.0 404 154.16.49.10 [10/Dec/2023:15:49:36 +0000] GET "/libraries/phpmailer/updates.php" HTTP/2.0 404 154.16.49.10 [10/Dec/2023:15:49:36 +0000] GET "/libraries/vendor/updates.php" HTTP/2.0 404 show less	Hacking Web App Attack
🇫🇷 20.199.19.117	10 Dec 2023	Proxy VPN IP engaged in suspected brute force attempts: 20.199.19.117 [10/Dec/2023:10:35:09 +0000 ... show more Proxy VPN IP engaged in suspected brute force attempts: 20.199.19.117 [10/Dec/2023:10:35:09 +0000] POST "/" HTTP/2.0 403 show less	VPN IP Brute-Force
🇺🇸 172.206.232.92	10 Dec 2023	Multiple malicious GET requests including: 172.206.232.92 [09/Dec/2023:23:37:12 +0000] GET "/wp-c ... show more Multiple malicious GET requests including: 172.206.232.92 [09/Dec/2023:23:37:12 +0000] GET "/wp-content/themes/signify/firkon.php" HTTP/2.0 403 172.206.232.92 [09/Dec/2023:23:37:13 +0000] GET "/wp-content/plugins/envato-market/inc/class-envato-market-api.php" HTTP/2.0 403 172.206.232.92 [09/Dec/2023:23:37:14 +0000] GET "/radio.php" HTTP/2.0 403 show less	Hacking Web App Attack
🇩🇪 193.26.115.156	09 Dec 2023	Attempted unauthorised login, attack via environment variables, & other exploits, including: 193. ... show more Attempted unauthorised login, attack via environment variables, & other exploits, including: 193.26.115.156 [09/Dec/2023:22:38:26 +0000] GET "/wp-login.php" HTTP/2.0 503 193.26.115.156 [09/Dec/2023:22:38:26 +0000] GET "/.env" HTTP/1.1 301 193.26.115.156 [09/Dec/2023:22:38:27 +0000] GET "/administrator/components/" HTTP/2.0 503 193.26.115.156 [09/Dec/2023:22:38:28 +0000] GET "/CHANGELOG.txt" HTTP/2.0 404 show less	Hacking Web App Attack
🇫🇷 20.199.19.78	09 Dec 2023	HTTP 1.1 attacks plus attacks on environment variables including: 20.199.19.78 [09/Dec/2023:20:16 ... show more HTTP 1.1 attacks plus attacks on environment variables including: 20.199.19.78 [09/Dec/2023:20:16:13 +0000] GET "/.env" HTTP/2.0 403 20.199.19.78 [09/Dec/2023:20:16:13 +0000] POST "/" HTTP/1.1 301 20.199.19.78 [09/Dec/2023:20:16:13 +0000] GET "/" HTTP/2.0 403 show less	Hacking Web App Attack
🇬🇧 194.34.245.51	09 Dec 2023	Brute force attacks plus multiple attempts to hack site via environment variables, including: 194 ... show more Brute force attacks plus multiple attempts to hack site via environment variables, including: 194.34.245.51 [09/Dec/2023:14:51:38 +0000] GET "/.env" HTTP/1.1 301 194.34.245.51 [09/Dec/2023:14:51:40 +0000] GET "/sendgrid/.env" HTTP/1.1 301 194.34.245.51 [09/Dec/2023:16:40:28 +0000] GET "/.env" HTTP/1.1 301 194.34.245.51 [09/Dec/2023:16:40:31 +0000] GET "/sendgrid/.env" HTTP/1.1 301 show less	Hacking Brute-Force Web App Attack
🇫🇷 103.102.228.176	09 Dec 2023	Sent over 250 malicious GET requests at rates of 4-5 per second within 56 seconds	Hacking Brute-Force Web App Attack
🇳🇱 51.158.174.16	09 Dec 2023	Attempts to access PHP and other sensitive resources: 51.158.174.16 [09/Dec/2023:10:05:00 +0000] ... show more Attempts to access PHP and other sensitive resources: 51.158.174.16 [09/Dec/2023:10:05:00 +0000] GET "/wp-content/plugins/cve-2023-45124/views/security.php" HTTP/2.0 403 51.158.174.16 [09/Dec/2023:10:05:00 +0000] GET "/index.php?rest_route=/tdw" HTTP/2.0 403 51.158.174.16 [09/Dec/2023:10:05:05 +0000] GET "/wp-content/plugins/mw-wp-form/css/style.css" HTTP/2.0 403 show less	Hacking Web App Attack
🇨🇦 144.217.180.167	09 Dec 2023	Unsuccessful attempts to access PHP resources: 144.217.180.167 [09/Dec/2023:04:03:45 +0000] GET " ... show more Unsuccessful attempts to access PHP resources: 144.217.180.167 [09/Dec/2023:04:03:45 +0000] GET "/wp-admin/html.php" HTTP/2.0 403 144.217.180.167 [09/Dec/2023:04:03:47 +0000] GET "/wp-stad.php" HTTP/2.0 403 show less	Hacking Web App Attack
🇬🇧 104.28.86.109	08 Dec 2023	Proxy VPN IP seemingly searching my site for a vulnerability derived from Apple Touch functionality ... show more Proxy VPN IP seemingly searching my site for a vulnerability derived from Apple Touch functionality (see below), and also flagged up by “Clean Talk” as a source of spam and brute force attacks on 15 other websites: ——————————- 104.28.86.109 [08/Dec/2023:14:13:57 +0000] GET "/apple-touch-icon-120x120-precomposed.png" HTTP/2.0 404 104.28.86.109 [08/Dec/2023:14:13:58 +0000] GET "/apple-touch-icon-precomposed.png" HTTP/2.0 404 104.28.86.109 [08/Dec/2023:14:13:58 +0000] GET "/apple-touch-icon.png" HTTP/2.0 404 show less	Open Proxy VPN IP Hacking Brute-Force Web App Attack
🇺🇦 178.159.37.10	08 Dec 2023	178.159.37.10 [08/Dec/2023:01:24:53 +0000] HEAD "/wp-content/plugins/royal-elementor-addons/readme.t ... show more 178.159.37.10 [08/Dec/2023:01:24:53 +0000] HEAD "/wp-content/plugins/royal-elementor-addons/readme.txt" HTTP/2.0 404 show less	Hacking Brute-Force Web App Attack
🇩🇪 193.141.60.95	07 Dec 2023	Brute force plus hundreds of unsuccessful “script kiddie” GET requests	Hacking Brute-Force Web App Attack
🇺🇸 172.105.159.174	07 Dec 2023	Multiple malicious GET requests including: 172.105.159.174 [07/Dec/2023:05:14:00 +0000] GET "/wp- ... show more Multiple malicious GET requests including: 172.105.159.174 [07/Dec/2023:05:14:00 +0000] GET "/wp-content/themes/signify/firkon.php" HTTP/2.0 404 172.105.159.174 [07/Dec/2023:05:14:03 +0000] GET "/radio.php" HTTP/2.0 404 show less	SQL Injection Web App Attack
🇫🇷 163.172.227.243	07 Dec 2023	Proxy VPN IP from which there has been an unsuccessful attack on my site with around 250 malicious G ... show more Proxy VPN IP from which there has been an unsuccessful attack on my site with around 250 malicious GET requests in 56 seconds, including: 163.172.227.243 [07/Dec/2023:00:01:43 +0000] GET "/xt/index.php" HTTP/1.1 301 163.172.227.243 [07/Dec/2023:00:01:58 +0000] GET "/wp-includes/IXR/" HTTP/1.1 301 163.172.227.243 [07/Dec/2023:00:02:39 +0000] GET "/up/.well-known/" HTTP/1.1 301 show less	VPN IP Hacking SQL Injection Brute-Force Web App Attack