AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

The webmaster of tafeu.de joined AbuseIPDB in December 2022 and has reported 19 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇫🇮 85.192.49.176	22 Aug 2025	11k SQL Injection tryouts per day	SQL Injection
🇩🇪 95.164.53.48	29 Jul 2025	GET /-1'%20OR%205*5=25%20--%20 GET /%208/%209/%2010-1)%3b%20waitfor%20delay%20'0:0:15'%20--%20	SQL Injection Bad Web Bot
🇺🇦 185.156.72.130	25 Jun 2025	Brute using "Fuzz Faster U Fool"	Brute-Force Web App Attack
🇳🇱 94.26.90.88	25 Jun 2025	/kb/assets/js/libs0\x22XOR(if(now()=sysdate(),sleep(15),0))XOR\x22Z/highlight.pack.js	Brute-Force Web App Attack
🇺🇸 35.184.137.120	28 May 2025	Excessive number of concurrent requests, crawling	Bad Web Bot
🇩🇪 185.125.50.54	12 Feb 2025	GET /zubehoer/?__s__11=11&__s__12=12&__s__120=120&__s__13=13&__s__135=135&__s__136=136&__s__137=137& ... show more GET /zubehoer/?__s__11=11&__s__12=12&__s__120=120&__s__13=13&__s__135=135&__s__136=136&__s__137=137&__s__140=140&__s__143=143&__s__154=154&__s__158=158&__s__16=16&__s__160=160&__s__164=164&__s__166=166&__s__170=170&__s__187=187&__s__193=193&__s__194=194&__s__20=20&__s__202=2026OnnvCxu';%20waitfor%20delay%20'0:0:15'%20--%20&__s__203=203&__s__210=210&__s__26=26&__s__27=27&__s__31=31&__s__4=4&__s__46=46&__s__48=48&__s__56=56&__s__57=57&__s__67=67&__s__68=68&__s__7=7&&__s__77=77&__s__8=8&__s__81=81&__s__83=83&__s__86=86&__s__94=94&n=24&o=8&p=1 show less	SQL Injection Brute-Force
🇩🇪 217.88.229.70	23 Sep 2024	Part of DDoS	DDoS Attack
🇹🇭 171.7.59.237	23 Sep 2024	171.7.59.237 - - [23/Sep/2024:04:45:12 +0200] "GET /*****/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windo ... show more 171.7.59.237 - - [23/Sep/2024:04:45:12 +0200] "GET /***/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 171.7.59.237 - - [23/Sep/2024:04:45:12 +0200] "GET /***/ HTTP/1.1" 302 - "https://DlKm.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 171.7.59.237 - - [23/Sep/2024:04:45:12 +0200] "GET /*****/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" show less	DDoS Attack
🇺🇸 134.209.213.5	23 Sep 2024	134.209.213.5 - - [23/Sep/2024:04:44:38 +0200] "GET /*****/ HTTP/1.1" 200 4981 "https://bQVD.com" ... show more 134.209.213.5 - - [23/Sep/2024:04:44:38 +0200] "GET /***/ HTTP/1.1" 200 4981 "https://bQVD.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 134.209.213.5 - - [23/Sep/2024:04:44:38 +0200] "GET /***/ HTTP/1.1" 200 4447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 134.209.213.5 - - [23/Sep/2024:04:44:38 +0200] "GET /*****/ HTTP/1.1" 200 4449 "https://RnUh.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	DDoS Attack
🇺🇸 89.116.149.32	23 Sep 2024	89.116.149.32 - - [23/Sep/2024:04:46:02 +0200] "GET /*****/ HTTP/1.1" 200 8950 "-" "Mozilla/5.0 (W ... show more 89.116.149.32 - - [23/Sep/2024:04:46:02 +0200] "GET /***/ HTTP/1.1" 200 8950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 89.116.149.32 - - [23/Sep/2024:04:46:02 +0200] "GET /***/ HTTP/1.1" 200 8954 "https://sbWi.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 89.116.149.32 - - [23/Sep/2024:04:46:02 +0200] "GET /*****/ HTTP/1.1" 200 8901 "https://XnWF.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" show less	DDoS Attack
🇺🇸 166.1.201.240	23 Sep 2024	166.1.201.240 - - [23/Sep/2024:04:46:02 +0200] "GET /*****/ HTTP/1.1" 200 9001 "https://KUPt.com" ... show more 166.1.201.240 - - [23/Sep/2024:04:46:02 +0200] "GET /***/ HTTP/1.1" 200 9001 "https://KUPt.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 166.1.201.240 - - [23/Sep/2024:04:46:02 +0200] "GET /***/ HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 166.1.201.240 - - [23/Sep/2024:04:46:02 +0200] "GET /*****/ HTTP/1.1" 200 8911 "https://LJoy.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" show less	DDoS Attack
🇯🇵 133.43.160.89	23 Sep 2024	133.43.160.89 - - [23/Sep/2024:04:45:30 +0200] "GET /*****/ HTTP/1.1" 200 8983 "https://uJPB.com" ... show more 133.43.160.89 - - [23/Sep/2024:04:45:30 +0200] "GET /***/ HTTP/1.1" 200 8983 "https://uJPB.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 133.43.160.89 - - [23/Sep/2024:04:45:30 +0200] "GET /***/ HTTP/1.1" 200 8972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 133.43.160.89 - - [23/Sep/2024:04:45:30 +0200] "GET /*****/ HTTP/1.1" 200 8956 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" show less	DDoS Attack
🇩🇪 188.245.124.144	23 Sep 2024	188.245.124.144 - - [23/Sep/2024:04:45:12 +0200] "GET /*****/ HTTP/1.1" 200 8953 "https://XjmK.com ... show more 188.245.124.144 - - [23/Sep/2024:04:45:12 +0200] "GET /***/ HTTP/1.1" 200 8953 "https://XjmK.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 188.245.124.144 - - [23/Sep/2024:04:45:12 +0200] "GET /***/ HTTP/1.1" 200 9011 "https://dRBs.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 188.245.124.144 - - [23/Sep/2024:04:45:13 +0200] "GET /*****/ HTTP/1.1" 200 8998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" show less	DDoS Attack
🇧🇬 94.156.79.193	30 Apr 2024	Hosting malware,. Webserver in use to download tools for automated brute force	Exploited Host
🇨🇳 183.253.241.209	17 Dec 2023	GET /se/%29%29%29%20OR%20EXP%28~%28SELECT%20%2A%20FROM%20%28SELECT%20CONCAT%280x7176717871%2C%28SELE ... show more GET /se/%29%29%29%20OR%20EXP%28~%28SELECT%20%2A%20FROM%20%28SELECT%20CONCAT%280x7176717871%2C%28SELECT%20%28ELT%289705%3D9705%2C1%29%29%29%2C0x717a6a6a71%2C0x78%29%29x%29%29%20AND%20%28%28%285963%3D5963,%20Dogecoin%20or%20Ethereum GET /se/%20OR%20EXP%28~%28SELECT%20%2A%20FROM%20%28SELECT%20CONCAT%280x7176717871%2C%28SELECT%20%28ELT%289705%3D9705%2C1%29%29%29%2C0x717a6a6a71%2C0x78%29%29x%29%29,%20Dogecoin%20or%20Ethereum HTTP/1.1 GET /se/%29%29%29%20OR%20EXP%28~%28SELECT%20%2A%20FROM%20%28SELECT%20CONCAT%280x7176717871%2C%28SELECT%20%28ELT%289705%3D9705%2C1%29%29%29%2C0x717a6a6a71%2C0x78%29%29x%29%29%20AND%20%28%28%285963%3D5963,%20Dogecoin%20or%20Ethereum HTTP/1.1 show less	SQL Injection
🇩🇪 88.99.104.108	17 Dec 2023	GET /?action=-1))%20OR%20603=(SELECT%20603%20FROM%20PG_SLEEP(15))-- HTTP/1.1 GET /en/BcIyB3Nl'%20OR ... show more GET /?action=-1))%20OR%20603=(SELECT%20603%20FROM%20PG_SLEEP(15))-- HTTP/1.1 GET /en/BcIyB3Nl'%20OR%20580=(SELECT%20580%20FROM%20PG_SLEEP(6))--(SHIB) HTTP/1.1 "POST /index.php?returnto=c8fN8ywW'))%20OR%20352=(SELECT%20352%20FROM%20PG_SLEEP(0))--&title=Special:UserLogin&type=signup HTTP/1.1 show less	SQL Injection
🇵🇭 161.49.87.222	15 Jan 2023	part of Layer7 DDoS against port 443	DDoS Attack
🇵🇭 206.201.3.83	15 Jan 2023	bigger part of a more than 48h running simple Layer7 DDoS against port 443	DDoS Attack