User Guman Singh joined AbuseIPDB in September 2023 and has reported 891 IP addresses.
Standing (weight) is good.
INACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 38.114.101.2 |
WAF | Sensitive file probe detected - looking for wp-config.php.bak
|
Web App Attack | |
| 🇷🇺 45.144.3.204 |
Shield: Layer4 Port 878 Trap
|
Bad Web Bot Web Spam | |
| 🇷🇺 195.133.5.33 |
|
Web Spam Bad Web Bot | |
| 🇳🇴 81.29.149.27 |
Blocked by UFW [50995/tcp] Source port: 44033 TTL: 244 Packet length: 1022 TOS: 0x00
|
Port Scan | |
| 🇳🇱 89.125.147.109 |
|
Bad Web Bot | |
| 🇷🇺 46.17.41.243 |
|
Port Scan | |
| 🇳🇱 89.125.144.118 |
sshd brute-force, targeted user: user.
|
Brute-Force SSH | |
| 🇳🇱 89.125.145.214 |
CrowdSec blocked: ssh:bruteforce detected via pfSense
|
Brute-Force SSH | |
| 🇦🇪 91.132.48.241 |
tcp ports: 8080,143 (13 or more attempts)
|
Port Scan | |
| 🇷🇺 194.87.196.135 |
sshd brute-force, targeted user: debian.
|
Brute-Force SSH | |
| 🇷🇺 46.17.42.48 |
tcp ports: 50995,5060 (6 or more attempts)
|
Port Scan | |
| 🇩🇪 103.56.84.111 |
|
Bad Web Bot Web Spam | |
| 🇺🇸 166.1.18.61 |
[rede-top188] 09/05/2026-03:10:12.267101, Protocol: 6, ET SCAN Suspicious inbound to SMB port 445
|
Port Scan | |
| 🇸🇬 192.124.176.74 |
denied traffic to a honeypot network. destination port 50995.
|
Port Scan | |
| 🇷🇺 176.32.33.174 |
2026-04-09 07:32:18 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Exploited Host Brute-Force | |
| 🇺🇸 108.165.154.155 |
|
Bad Web Bot Web Spam | |
| 🇺🇸 166.1.18.119 |
Blocked by UFW on Mailcow [null/9] Source port: N/A TTL: 250 Packet length: 56 TOS: 0x00
|
Brute-Force | |
| 🇷🇺 45.144.3.98 |
firewall-block, port(s): /42
|
Port Scan Exploited Host Brute-Force | |
| 🇳🇱 89.125.146.174 |
2026-05-18 05:37:58 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Exploited Host Brute-Force | |
| 🇷🇺 194.87.196.199 |
Blocked by UFW [3128/tcp] Source port: 19554 TTL: 246 Packet length: 967 TOS: 0x00
|
Port Scan | |
| 🇷🇺 176.32.34.203 |
Blocked by UFW on Mailcow [null/47] Source port: N/A TTL: 128 Packet length: 58 TOS: 0x00
|
Port Scan Brute-Force Exploited Host | |
| 🇳🇱 89.125.144.188 |
|
Bad Web Bot Web Spam | |
| 🇳🇱 78.17.139.114 |
GET /xmlrpc.php HTTP/1.1
|
Web App Attack Hacking | |
| 🇷🇺 46.29.166.55 |
sshd brute-force, targeted user: backup.
|
Brute-Force SSH | |
| 🇷🇺 194.87.196.222 |
tcp ports: 80,25 (3 or more attempts)
|
Port Scan |