AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User zerokelvin , the webmaster of zexahost.org, joined AbuseIPDB in October 2025 and has reported 37 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇳🇱 94.154.43.129	13 Oct 2026	Cloudflare Worker blocked request to /.env. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ... show more Cloudflare Worker blocked request to /.env. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 show less	Web App Attack
🇳🇱 94.154.43.180	13 Oct 2026	Cloudflare Worker blocked request to /.env. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ... show more Cloudflare Worker blocked request to /.env. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 show less	Web App Attack
🇳🇱 134.209.89.254	13 Oct 2026	Cloudflare Worker blocked request to /.env. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ... show more Cloudflare Worker blocked request to /.env. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	Web App Attack
🇧🇪 34.79.12.228	13 Oct 2026	Cloudflare Worker blocked request to /.aws/credentials.bak. UA: Mozilla/5.0 (Windows NT 10.0; Win64; ... show more Cloudflare Worker blocked request to /.aws/credentials.bak. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Web App Attack
🇺🇸 34.72.194.72	12 Oct 2026	Tried accessing /.git/config. User-Agent: Unknown	Web App Attack
🇺🇸 2a06:98c0:3600::103	12 Oct 2026	Cloudflare Worker blocked request to /.env. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ... show more Cloudflare Worker blocked request to /.env. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 show less	Web App Attack
🇨🇭 213.55.242.183	12 Oct 2026	tried scraping a web app	Brute-Force Web App Attack
🇨🇭 195.65.152.139	27 Mar 2026	2 honeypots triggered, didn't try to send any suspicious data. UA: sqlmap/1.9.11#stable (https://sql ... show more 2 honeypots triggered, didn't try to send any suspicious data. UA: sqlmap/1.9.11#stable (https://sqlmap.org) show less	Web App Attack
🇮🇩 103.77.106.81	20 Mar 2026	honeypot triggered. url: zexa.ch/sftp-config.json?page=sftp-config.json	Web App Attack Hacking
🇧🇪 79.127.164.162	20 Mar 2026	honeypot triggered. url: zexa.ch/.env	Web App Attack Hacking
🇳🇱 45.148.10.99	23 Dec 2025	captured by two honeypots four times: login.php (2x), register.php (2x). UA: Mozilla/5.0 (Windows NT ... show more captured by two honeypots four times: login.php (2x), register.php (2x). UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0 show less	Web App Attack
🇯🇵 172.192.51.163	26 Oct 2025	tried bruteforcing various pages	Brute-Force Bad Web Bot Web App Attack
🇳🇱 195.178.110.201	19 Oct 2025	brute forced different pages	Brute-Force Bad Web Bot Web App Attack
🇫🇷 51.91.131.209	19 Oct 2025	tried accessing ftp sensitive pages	Bad Web Bot Web App Attack
🇺🇸 89.187.187.74	19 Oct 2025	tried accessing WordPress pages	Brute-Force Bad Web Bot Web App Attack
🇮🇩 157.66.56.84	19 Oct 2025	tried accessing sensitive pages	Brute-Force Bad Web Bot Web App Attack
🇳🇱 64.227.70.2	19 Oct 2025	tried accessing sensitive pages	Brute-Force Bad Web Bot Web App Attack
🇺🇸 169.150.203.197	19 Oct 2025	brute forced backdoors	Brute-Force Bad Web Bot Web App Attack
🇳🇱 204.76.203.31	19 Oct 2025	brute forced backdoors	Brute-Force Bad Web Bot Web App Attack
🇮🇩 180.252.134.148	19 Oct 2025	tried accessing /.git/	Bad Web Bot Web App Attack
🇯🇵 74.176.184.162	19 Oct 2025	tried accessing wordpress backdoor	Bad Web Bot Web App Attack
🇳🇱 194.26.192.153	19 Oct 2025	tried to install WordPress	Bad Web Bot Web App Attack
🇺🇸 20.169.43.221	19 Oct 2025	brute forced a lot of pages	Brute-Force Bad Web Bot Web App Attack
🇺🇸 35.237.142.186	19 Oct 2025	access to sensitive pages	Bad Web Bot Web App Attack
🇳🇱 45.148.10.238	16 Oct 2025	tried accessing /.git/config	Bad Web Bot Web App Attack