User Som1ght3n joined AbuseIPDB in October 2025 and has reported 4,635 IP addresses.

Standing (weight) is good.

ACTIVE USER
IP Date Comment Categories
🇺🇸 43.172.80.83
IP attempted a brute-force attack against an Endlessh service on our server.
Brute-Force
🇨🇱 159.112.138.47
This IP performed a slow brute-force attack targeting the 'admin' user on SSH.
Brute-Force
🇮🇩 103.147.159.198
IP 103.147.159.198 initiated a slow SSH brute-force attack targeting user 'epadmin'.
Brute-Force
🇭🇰 199.45.154.62
IP was detected attempting a brute-force attack against an Endlessh service.
Brute-Force
🇷🇴 80.94.95.211
IP attempted to access sensitive configuration files like /.env via HTTP.
Web App Attack
🇺🇸 45.156.129.105
Web App Attack
🇩🇪 213.209.159.154
Web App Attack
🇵🇰 122.50.1.217
Attempted to exploit CVE-2020-27866 via HTTP GET request to download and execute 'Mozi.m' malware.
Hacking
🇭🇰 103.229.125.91
Hacking
🇳🇱 93.123.109.214
Web App Attack
🇯🇵 34.146.169.202
IP attempted to access sensitive configuration files via an HTTP GET request to /static../.env.
Web App Attack
🇳🇱 20.160.86.7
IP 20.160.86.7 attempted a slow SSH brute-force attack against the 'vishal' user on my server.
Brute-Force
🇧🇷 200.219.200.16
This IP attempted an SSH brute-force attack against our server.
Brute-Force
🇳🇱 176.65.148.226
Attempted to probe for sensitive application configuration files (`/.env`) on a web server via HTTP.
Web App Attack
🇺🇸 107.150.104.16
IP was banned by Crowdsec for an SSH slow brute-force attack targeting the 'sonarr' user.
Brute-Force
🇷🇴 80.94.95.211
IP 80.94.95.211 attempted to access sensitive configuration files (.env) on a web server.
Web App Attack
🇮🇩 103.63.24.43
Exploited Host
🇺🇸 23.95.193.99
IP 23.95.193.99 attempted a slow SSH brute-force attack against user 'astronomy'.
Brute-Force
🇫🇮 65.109.162.228
IP attempted an SSH brute-force against the 'test' user on my server.
Brute-Force
🇨🇦 4.204.224.164
Web App Attack
🇺🇸 157.230.5.247
Web App Attack
🇳🇱 195.178.110.70
Web App Attack
🇩🇪 2.26.172.97
Hacking
🇭🇰 156.236.66.15
IP 156.236.66.15 attempted an SSH brute-force login against target user 'abd'.
Brute-Force
🇺🇸 165.154.162.74
The IP performed an SSH brute-force attack targeting the root user on my server.
Brute-Force