User Som1ght3n joined AbuseIPDB in October 2025 and has reported 5,524 IP addresses.

Standing (weight) is good.

ACTIVE USER
IP Date Comment Categories
🇺🇸 173.239.214.120
Web App Attack
🇺🇸 173.239.214.104
Web App Attack
🇺🇸 34.94.198.158
Attempted to access sensitive file /.git/config via HTTP GET request on vulturecouncil.com.
Web App Attack
🇰🇷 121.179.164.33
Hacking
🇺🇸 20.65.219.69
Hacking
🇹🇼 45.43.36.172
Web App Attack
🇬🇧 195.96.139.64
IP attempted a brute-force attack against the endlessh service.
Brute-Force
🇰🇷 14.34.249.175
Hacking
🇺🇸 66.132.195.164
IP 66.132.195.164 attempted a brute-force attack against an SSH honeypot service.
Brute-Force
🇺🇸 2602:f639:2::2b
IP attempted to access a sensitive `.env` configuration file on the web server.
Web App Attack
🇺🇸 209.126.4.192
IP 209.126.4.192 attempted to access sensitive configuration files (.env) on a web application.
Web App Attack
🇺🇸 2602:f639:2::2b
Attempted to access sensitive web application configuration file /.env.
Web App Attack
🇺🇸 34.83.66.183
Web App Attack
🇩🇪 85.155.14.15
Web App Attack
🇵🇱 45.138.12.88
Web App Attack
🇺🇸 172.104.27.48
Attempted to access sensitive file `/.env` via HTTP GET on a web application.
Web App Attack
🇳🇱 151.245.151.163
Detected and banned for an Endlessh brute-force attack attempting to compromise SSH.
Brute-Force
🇬🇧 195.96.139.87
IP performed an Endlessh SSH brute-force attack against our server.
Brute-Force
🇺🇸 209.126.4.192
Web App Attack
🇺🇸 45.33.54.114
IP attempted to access sensitive web application configuration file /.env.
Web App Attack
🇺🇸 40.124.176.225
IP attempted to exploit CVE-2022-41082 via an Exchange Autodiscover path with a PowerShell payload.
Web App Attack
🇮🇳 135.235.196.148
Attempted a slow SSH brute-force attack against my server, detected by Crowdsec.
Brute-Force
🇨🇳 39.100.75.215
Brute-Force
🇨🇭 213.55.171.188
Detected slow SSH brute-force attack targeting the 'default' user.
Brute-Force
🇺🇸 170.106.73.254
Banned for SSH slow brute-force attempt targeting the 'administrator' user.
Brute-Force