AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User IndigoRidge , the webmaster of civility.co, joined AbuseIPDB in November 2022 and has reported 200,541 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇳🇱 109.160.32.175	4 hours ago	Knock-Knock SSH honeypot activity; time=2026-11-05 13:05:16; username=root	Brute-Force SSH
🇺🇸 132.148.22.172	4 hours ago	Knock-Knock TNET honeypot activity; time=2026-11-05 13:08:13; username=root	Brute-Force
🇷🇴 2.57.122.150	4 hours ago	Knock-Knock SSH honeypot activity; time=2026-11-05 13:06:52; username=root	Brute-Force SSH
🇧🇷 177.129.209.239	4 hours ago	Knock-Knock HTTP honeypot activity; time=2026-11-05 13:03:04; http_method=GET; http_path=/config.php ... show more Knock-Knock HTTP honeypot activity; time=2026-11-05 13:03:04; http_method=GET; http_path=/config.php; http_purpose=config_exposure; http_user_agent=Mozilla/5.0 (compatible; PBX-Scanner/1.0) show less	Web App Attack
🇳🇱 77.239.124.111	4 hours ago	Knock-Knock HTTP honeypot activity; time=2026-11-05 13:03:54; http_method=GET; http_path=/home.asp; ... show more Knock-Knock HTTP honeypot activity; time=2026-11-05 13:03:54; http_method=GET; http_path=/home.asp; http_purpose=app_discovery; http_user_agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.4 show less	Web App Attack
🇧🇷 2804:4f60:7c8c:fe00:1886:a1a5:a7e5:2a7a	4 hours ago	2804:4f60:7c8c:fe00:1886:a1a5:a7e5:2a7a - - [05/Nov/2026:08:03:37 -0500] "GET /wp-json/wp/v2/users H ... show more 2804:4f60:7c8c:fe00:1886:a1a5:a7e5:2a7a - - [05/Nov/2026:08:03:37 -0500] "GET /wp-json/wp/v2/users HTTP/1.1" 200 3926 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)" 2804:4f60:7c8c:fe00:1886:a1a5:a7e5:2a7a - - [05/Nov/2026:08:04:12 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3022 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" 2804:4f60:7c8c:fe00:1886:a1a5:a7e5:2a7a - - [05/Nov/2026:08:04:43 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3022 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" 2804:4f60:7c8c:fe00:1886:a1a5:a7e5:2a7a - - [05/Nov/2026:08:05:10 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3022 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/65.0.0.0 Safari/537.36" 2804:4f60:7c8c:fe00:1886:a1a5:a7e5:2a7a - - [05/Nov/2026:08:05:38 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3022 "-" "Mozilla/5.0 (Windows NT 6.2; a ... show less	Web App Attack
🇯🇵 34.146.201.159	4 hours ago	34.146.201.159 - - [05/Nov/2026:08:04:59 -0500] "GET /js../.env HTTP/1.1" 403 2853 "-" "Mozilla/5.0 ... show more 34.146.201.159 - - [05/Nov/2026:08:04:59 -0500] "GET /js../.env HTTP/1.1" 403 2853 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.146.201.159 - - [05/Nov/2026:08:04:58 -0500] "GET /build../.env HTTP/1.1" 404 92091 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.146.201.159 - - [05/Nov/2026:08:04:58 -0500] "GET /uploads../.env HTTP/1.1" 404 92091 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" ... show less	Web App Attack
🇳🇱 64.34.87.145	4 hours ago	Knock-Knock TNET honeypot activity; time=2026-11-05 12:50:48; username=root	Brute-Force
🇮🇩 118.99.73.112	4 hours ago	118.99.73.112 - - [05/Nov/2026:08:00:03 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "Mozilla/5.0 ... show more 118.99.73.112 - - [05/Nov/2026:08:00:03 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/75.0.0.0 Safari/537.36" 118.99.73.112 - - [05/Nov/2026:08:00:39 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/100.0.0.0 Safari/537.36" 118.99.73.112 - - [05/Nov/2026:08:01:10 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/94.0.0.0 Safari/537.36" 118.99.73.112 - - [05/Nov/2026:08:01:35 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/92.0.0.0 Safari/537.36" 118.99.73.112 - - [05/Nov/2026:08:02:09 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇳 114.66.37.235	4 hours ago	Knock-Knock SMB honeypot activity; time=2026-11-05 12:57:11; smb_action=AUTH; smb_version=SMB1	Hacking Brute-Force
🇨🇭 190.211.254.232	4 hours ago	190.211.254.232 - - [05/Nov/2026:08:00:52 -0500] "POST /wp-login.php HTTP/1.1" 200 12851 "https://ca ... show more 190.211.254.232 - - [05/Nov/2026:08:00:52 -0500] "POST /wp-login.php HTTP/1.1" 200 12851 "https://campdanmark.com/wp-login.php" "Mozilla/5.0 (iPad; CPU OS 16_7_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 190.211.254.232 - - [05/Nov/2026:08:00:53 -0500] "POST /wp-login.php HTTP/1.1" 200 12851 "https://campdanmark.com/wp-login.php" "Mozilla/5.0 (iPad; CPU OS 16_7_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 190.211.254.232 - - [05/Nov/2026:08:00:55 -0500] "POST /wp-login.php HTTP/1.1" 200 12835 "https://campdanmark.com/wp-login.php" "Mozilla/5.0 (iPad; CPU OS 16_7_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 190.211.254.232 - - [05/Nov/2026:08:00:56 -0500] "POST /wp-login.php HTTP/1.1" 200 12851 "https://campdanmark.com/wp-login.php" "Mozilla/5.0 (iPad; CPU OS 16_7_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Versi ... show less	Web App Attack
🇧🇪 34.53.139.63	4 hours ago	34.53.139.63 - - [05/Nov/2026:07:56:53 -0500] "GET /.env HTTP/1.1" 403 4861 "-" "Mozilla/5.0 (Window ... show more 34.53.139.63 - - [05/Nov/2026:07:56:53 -0500] "GET /.env HTTP/1.1" 403 4861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.53.139.63 - - [05/Nov/2026:07:56:54 -0500] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.53.139.63 - - [05/Nov/2026:07:56:54 -0500] "GET /.env HTTP/1.1" 403 4861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇮 80.66.83.43	4 hours ago	Knock-Knock RDP honeypot activity; time=2026-11-05 12:55:02; username=administr	Brute-Force
🇫🇷 91.238.181.92	4 hours ago	Knock-Knock RDP honeypot activity; time=2026-11-05 12:54:38; username=domain	Brute-Force
🇫🇮 193.187.110.160	4 hours ago	Knock-Knock SSH honeypot activity; time=2026-11-05 12:50:57; username=admin	Brute-Force SSH
🇰🇷 43.133.90.155	4 hours ago	Knock-Knock RDP honeypot activity; time=2026-11-05 12:50:51; username=administrator; rdp_workstation ... show more Knock-Knock RDP honeypot activity; time=2026-11-05 12:50:51; username=administrator; rdp_workstation=workstation show less	Brute-Force
🇰🇷 220.87.228.177	4 hours ago	Knock-Knock TNET honeypot activity; time=2026-11-05 12:47:38; username=admin	Brute-Force
🇮🇩 103.154.77.48	4 hours ago	Knock-Knock SSH honeypot activity; time=2026-11-05 12:45:29; username=ubuntu	Brute-Force SSH
🇺🇸 64.225.8.171	4 hours ago	Knock-Knock TNET honeypot activity; time=2026-11-05 12:45:11; username=root	Brute-Force
🇺🇸 66.132.195.50	4 hours ago	Knock-Knock HTTP honeypot activity; time=2026-11-05 12:46:04; http_method=<cryptic binary>; http_pat ... show more Knock-Knock HTTP honeypot activity; time=2026-11-05 12:46:04; http_method=<cryptic binary>; http_path=<cryptic binary>; http_purpose=protocol_probe show less	Web App Attack
🇸🇬 34.124.166.80	4 hours ago	34.124.166.80 - - [05/Nov/2026:07:47:53 -0500] "GET /public../.env HTTP/1.1" 404 25806 "-" "Mozilla/ ... show more 34.124.166.80 - - [05/Nov/2026:07:47:53 -0500] "GET /public../.env HTTP/1.1" 404 25806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.124.166.80 - - [05/Nov/2026:07:47:53 -0500] "GET /files../.env HTTP/1.1" 404 25806 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.124.166.80 - - [05/Nov/2026:07:47:53 -0500] "GET /js../.env HTTP/1.1" 404 25806 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" ... show less	Web App Attack
🇷🇴 141.98.83.27	4 hours ago	Knock-Knock RDP honeypot activity; time=2026-11-05 12:45:11; username=domain	Brute-Force
🇳🇱 64.34.87.145	4 hours ago	Knock-Knock TNET honeypot activity; time=2026-11-05 12:23:39; username=root	Brute-Force
🇩🇪 88.214.25.124	4 hours ago	Knock-Knock RDP honeypot activity; time=2026-11-05 12:42:47; username=domain	Brute-Force
🇮🇳 152.58.191.105	4 hours ago	152.58.191.105 - - [05/Nov/2026:07:41:17 -0500] "GET /wp-json/wp/v2/users HTTP/1.1" 403 5479 "-" "Mo ... show more 152.58.191.105 - - [05/Nov/2026:07:41:17 -0500] "GET /wp-json/wp/v2/users HTTP/1.1" 403 5479 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)" 152.58.191.105 - - [05/Nov/2026:07:42:24 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5112 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36" 152.58.191.105 - - [05/Nov/2026:07:43:01 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5112 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/69.0.0.0 Safari/537.36" 152.58.191.105 - - [05/Nov/2026:07:43:37 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/63.0.0.0 Safari/537.36" 152.58.191.105 - - [05/Nov/2026:07:44:14 -0500] "POST /xmlrpc.php HTTP/1.1" 200 5096 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36" ... show less	Web App Attack