User Som1ght3n joined AbuseIPDB in October 2025 and has reported 5,578 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 40.124.176.225 |
IP attempted to exploit CVE-2022-41082 via an Exchange Autodiscover path with a PowerShell payload.
|
Web App Attack | |
| 🇮🇳 135.235.196.148 |
Attempted a slow SSH brute-force attack against my server, detected by Crowdsec.
|
Brute-Force | |
| 🇨🇳 39.100.75.215 |
|
Brute-Force | |
| 🇨🇭 213.55.171.188 |
Detected slow SSH brute-force attack targeting the 'default' user.
|
Brute-Force | |
| 🇺🇸 170.106.73.254 |
Banned for SSH slow brute-force attempt targeting the 'administrator' user.
|
Brute-Force | |
| 🇸🇪 172.160.227.37 |
Attempted slow SSH brute-force attack targeting the 'webmaster' user on my server.
|
Brute-Force | |
| 🇹🇭 203.150.107.87 |
Attempted SSH brute-force on user 'admin' using multiple failed login attempts.
|
Brute-Force | |
| 🇺🇸 104.245.107.161 |
IP attempted to access a sensitive /.env file on the web server via HTTP GET.
|
Web App Attack | |
| 🇺🇸 34.94.198.158 |
|
Hacking | |
| 🇺🇸 157.245.244.221 |
IP 157.245.244.221 attempted an SSH slow brute-force attack against the 'lab' user on my server.
|
Brute-Force | |
| 🇳🇱 86.54.31.34 |
The IP performed a brute-force attack targeting an Endlessh service on our server.
|
Brute-Force | |
| 🇳🇱 85.11.167.243 |
|
Web App Attack | |
| 🇺🇸 129.121.75.215 |
IP performed an SSH slow brute-force attack targeting user 'sajjad'.
|
Brute-Force | |
| 🇺🇸 2602:f639:2::2b |
This IP attempted to access the sensitive /.env file on a web application.
|
Web App Attack | |
| 🇮🇩 8.215.87.217 |
Attempted SSH brute-force attack targeting user 'ftptest2'.
|
Brute-Force | |
| 🇷🇺 5.133.111.190 |
IP attempted a slow SSH brute-force attack targeting user 'huang'.
|
Brute-Force | |
| 🇹🇷 78.135.111.63 |
Attempted SSH brute-force attack on user 'asad'.
|
Brute-Force | |
| 🇺🇸 184.185.26.51 |
|
Hacking | |
| 🇺🇸 170.106.194.247 |
|
Web App Attack | |
| 🇺🇸 2602:f639:2::2b |
|
Web App Attack | |
| 🇷🇺 91.234.63.247 |
Attempted Netgear Remote Code Execution exploit to download and execute Mozi botnet malware.
|
Hacking | |
| 🇫🇮 13.140.80.140 |
|
Web App Attack | |
| 🇺🇸 45.137.194.154 |
|
Web App Attack | |
| 🇩🇪 47.245.137.147 |
IP attempted an SSH brute-force attack against an Endlessh service.
|
Brute-Force | |
| 🇺🇸 44.220.188.203 |
IP 44.220.188.203 engaged in a brute-force attack against an endlessh SSH service.
|
Brute-Force |