AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ne1for23 joined AbuseIPDB in May 2016 and has reported 158,238 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇸🇬 104.28.163.35	11 hours ago	Attempt to access invalid virtual host name (api.db-ip.com). Likely attempt to exploit misconfigura ... show more Attempt to access invalid virtual host name (api.db-ip.com). Likely attempt to exploit misconfiguration or access private resources. 104.28.163.35 - - [04/Nov/2026:21:44:32 +0000] "GET /v2/free/self HTTP/1.1" 403 153 "-" "-" "-" show less	Hacking
🇺🇸 35.253.221.158	12 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 35.253.221.158 - - [04/Nov/2026:21:20:50 +0000] "GET /.git/HEAD HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" show less	Hacking
🇺🇿 84.54.71.147	12 hours ago	Unauthorized access to SSH at 4/Nov/2026:21:09:14 +0000.	Port Scan SSH
🇺🇸 4.7.118.98	12 hours ago	Unauthorized access to SSH at 4/Nov/2026:20:42:47 +0000.	Port Scan SSH
🇹🇼 35.236.183.71	12 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 35.236.183.71 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 35.236.183.71 - - [04/Nov/2026:20:38:17 +0000] "GET /.git/config HTTP/1.1" 403 153 "-" "-" show less	Hacking
🇺🇸 47.162.130.13	12 hours ago	Unauthorized access to SSH at 4/Nov/2026:20:23:32 +0000.	Port Scan SSH
🇩🇪 94.183.174.99	13 hours ago	Attempt to access invalid virtual host name (###.###.###.###:80). Typically used to access "interna ... show more Attempt to access invalid virtual host name (###.###.###.###:80). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 94.183.174.99 - - [04/Nov/2026:20:15:48 +0000] "GET / HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" "-" show less	Hacking
🇺🇸 20.106.51.120	13 hours ago	20.106.51.120 - - [04/Nov/2026:19:55:52 +0000] "GET /actuator/health HTTP/1.1" 403 153 "-" "Mozilla/ ... show more 20.106.51.120 - - [04/Nov/2026:19:55:52 +0000] "GET /actuator/health HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgrab/0.x" show less	Bad Web Bot
🇲🇲 103.13.35.29	13 hours ago	Unauthorized access to SSH at 4/Nov/2026:19:50:40 +0000.	Port Scan SSH
🇨🇴 190.61.40.234	13 hours ago	Unauthorized access to SSH at 4/Nov/2026:19:48:32 +0000.	Port Scan SSH
🇺🇸 172.203.220.77	13 hours ago	172.203.220.77 - - [04/Nov/2026:19:26:06 +0000] "GET /hudson HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgra ... show more 172.203.220.77 - - [04/Nov/2026:19:26:06 +0000] "GET /hudson HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgrab/0.x" show less	Bad Web Bot
🇺🇸 184.32.70.65	13 hours ago	Unauthorized access to SSH at 4/Nov/2026:19:26:03 +0000.	Port Scan SSH
🇮🇩 103.28.116.207	14 hours ago	Unauthorized access to SSH at 4/Nov/2026:18:55:41 +0000.	Port Scan SSH
🇺🇾 167.62.215.30	14 hours ago	Unauthorized access to SSH at 4/Nov/2026:18:24:42 +0000.	Port Scan SSH
🇻🇳 103.98.152.120	15 hours ago	103.98.152.120 - - [04/Nov/2026:17:57:56 +0000] "HEAD /wp/wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/ ... show more 103.98.152.120 - - [04/Nov/2026:17:57:56 +0000] "HEAD /wp/wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 173.211.39.148	16 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 173.211.39.148 - - [04/Nov/2026:17:20:14 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇳🇱 185.226.197.107	16 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 185.226.197.107 - - [04/Nov/2026:16:56:52 +0000] "GET / HTTP/1.1" 403 555 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-" show less	Hacking
🇩🇪 47.254.156.127	16 hours ago	Attempt to access invalid virtual host name (###.###.###.###:80). Typically used to access "interna ... show more Attempt to access invalid virtual host name (###.###.###.###:80). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 47.254.156.127 - - [04/Nov/2026:16:43:32 +0000] "GET / HTTP/1.1" 403 153 "-" "curl/7.74.0" "-" show less	Hacking
🇧🇴 166.114.173.227	16 hours ago	Unauthorized access to SSH at 4/Nov/2026:16:41:46 +0000.	Port Scan SSH
🇫🇷 5.189.172.102	16 hours ago	5.189.172.102 - - [04/Nov/2026:16:38:59 +0000] "HEAD /admin/wp-login.php HTTP/1.1" 403 0 "-" "Mozill ... show more 5.189.172.102 - - [04/Nov/2026:16:38:59 +0000] "HEAD /admin/wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇷 129.121.52.239	16 hours ago	129.121.52.239 - - [04/Nov/2026:16:26:41 +0000] "HEAD /wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 ... show more 129.121.52.239 - - [04/Nov/2026:16:26:41 +0000] "HEAD /wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇪 34.77.173.196	16 hours ago	Attempting to probe for sensitive information accidently exposed via git config. 34.77.173.196 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 34.77.173.196 - - [04/Nov/2026:16:22:27 +0000] "GET /.git/config HTTP/2.0" 403 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Hacking
🇩🇪 85.214.222.185	17 hours ago	Unauthorized access to SSH at 4/Nov/2026:15:56:11 +0000. Received: (SSH-2.0-PuTTY_Release_0.78)	SSH
🇺🇦 62.16.23.149	18 hours ago	Unauthorized access to SSH at 4/Nov/2026:14:47:22 +0000.	Port Scan SSH
🇺🇸 185.163.211.178	18 hours ago	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 185.163.211.178 - - [04/Nov/2026:14:44:52 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking