User James Roxas joined AbuseIPDB in December 2024 and has reported 884 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇷🇺 91.206.93.169 |
WAF | Sensitive file probe detected - looking for .env
|
Hacking Web App Attack | |
| 🇷🇺 46.29.163.22 |
Unauthorized connection attempt to port from 46.29.163.22
|
Port Scan Exploited Host Brute-Force | |
| 🇮🇪 194.87.245.163 |
|
Port Scan | |
| 🇷🇺 46.17.47.133 |
|
Bad Web Bot Web Spam | |
| 🇷🇺 194.87.197.128 |
WAF | Sensitive file probe detected - looking for .git/config
|
Hacking Web App Attack | |
| 🇧🇬 132.243.239.222 |
Web bot: denial-of-service flood
|
Bad Web Bot Web Spam | |
| 🇷🇺 194.87.68.224 |
CrowdSec blocked: ssh:bruteforce detected via UFW
|
Brute-Force SSH | |
| 🇷🇺 185.22.153.139 |
Detected mail brute force attack from 6 different servers
|
Brute-Force SSH | |
| 🇫🇮 212.193.23.207 |
|
Web App Attack Hacking | |
| 🇳🇱 89.125.144.215 |
firewall-block, port(s): /53
|
Port Scan Exploited Host Brute-Force | |
| 🇸🇬 192.124.176.10 |
2026-08-09 16:37:41 UTC Unauthorized activity to TCP port 8080. Web App
|
Brute-Force | |
| 🇷🇺 46.29.166.47 |
Port probing on unauthorized port 18789
|
Port Scan | |
| 🇮🇪 194.87.245.94 |
[net-mon2] 07/28/2026-10:16:36.191419, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433
|
Port Scan | |
| 🇷🇺 185.22.153.34 |
Web bot: denial-of-service flood
|
Bad Web Bot Web Spam | |
| 🇱🇻 188.64.142.105 |
[Q802]: Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /config.json HTTP/1.1
|
Web App Attack Hacking | |
| 🇷🇺 45.135.135.131 |
|
Port Scan | |
| 🇷🇺 45.136.245.200 |
GET /config.json HTTP/1.1
|
Hacking Web App Attack | |
| 🇦🇪 188.208.110.183 |
Did not receive identification string from 188.208.110.183 port 61161
|
Brute-Force | |
| 🇷🇺 45.136.244.186 |
|
Web App Attack | |
| 🇳🇱 89.125.144.199 |
Blocked by UFW [33167/tcp] Source port: 26927 TTL: 64 Packet length: 606 TOS: 0x00
|
Port Scan | |
| 🇮🇪 194.87.245.137 |
sshd brute-force, targeted user: ubuntu.
|
Brute-Force SSH | |
| 🇳🇱 89.125.146.205 |
firewall-block, port(s): /28
|
Port Scan Brute-Force Exploited Host | |
| 🇳🇱 89.125.146.99 |
Blocked by UFW on Mailcow [null/24] Source port: N/A TTL: 254 Packet length: 79 TOS: 0x00
|
Port Scan Exploited Host Brute-Force | |
| 🇷🇺 46.17.44.209 |
Blocked by UFW on Mailcow [null/38] Source port: N/A TTL: 246 Packet length: 80 TOS: 0x00
|
Brute-Force | |
| 🇳🇱 89.125.146.217 |
|
Web App Attack Hacking |