User heyzg joined AbuseIPDB in January 2026 and has reported 17,433 IP addresses.
Standing (weight) is good.
ACTIVE USER
WEBMASTER
SUPPORTER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇻🇳 160.30.204.101 |
|
Hacking Exploited Host SSH | |
| 🇺🇸 167.253.67.223 |
API LLM Recon (Ollama) (observed): 3 HTTP; attempted outbound scan; Ollama: /api/version,/api/tags
|
Hacking Web App Attack | |
| 🇺🇸 156.239.42.225 |
|
Hacking Web App Attack | |
| 🇨🇳 123.99.201.94 |
SSH Command Execution (observed): 69 cmds, 1.2m
|
Hacking SSH | |
| 🇺🇸 66.132.172.33 |
HTTP agent_ecosystem_recon (observed): 4 HTTP, 42s
|
Brute-Force | |
| 🇯🇵 34.97.49.29 |
HTTP secret_harvesting (observed): 12 HTTP
|
Brute-Force | |
| 🇫🇷 54.37.11.139 |
|
Hacking Exploited Host SSH | |
| 🇺🇸 66.132.195.123 |
HTTP Web Scanning (observed): 3 HTTP, 3s
|
Bad Web Bot Web App Attack | |
| 🇸🇬 141.11.46.174 |
API LLM Recon (Ollama) (observed): 3 HTTP, 2s; attempted outbound scan; Ollama: /api/ps
|
Hacking Web App Attack | |
| 🇺🇸 66.132.186.197 |
HTTP Command Execution (observed): 4 cmds, 1 HTTP, 2s
|
Hacking SSH | |
| 🇺🇸 66.132.195.39 |
|
Hacking Web App Attack | |
| 🇭🇰 156.225.1.90 |
API LLM Recon (Ollama) (observed): 4 HTTP, 1s; attempted outbound scan; Ollama: /api/tags
|
Hacking Web App Attack | |
| 🇧🇪 207.175.140.108 |
HTTP Command Execution (observed): 6 cmds, 2 HTTP, 6s
|
Hacking SSH | |
| 🇷🇺 45.91.64.6 |
HTTP Defense Evasion (observed): 1 cmds, 1 HTTP, 2s; attempted command obfuscation
|
Hacking SSH | |
| 🇭🇰 199.45.155.64 |
|
Hacking Web App Attack | |
| 🇭🇰 199.45.155.70 |
HTTP Web Scanning (observed): 5 HTTP, 16s
|
Bad Web Bot Web App Attack | |
| 🇺🇸 65.49.1.66 |
HTTP Command Execution (observed): 5 cmds, 3 HTTP, 51s
|
Hacking SSH | |
| 🇺🇦 152.89.61.139 |
|
Hacking Exploited Host SSH | |
| 🇩🇪 107.150.117.121 |
API LLM Recon (Ollama) (observed): 6 HTTP, 19s; attempted outbound scan; Ollama: /v1/models
|
Hacking Web App Attack | |
| 🇺🇸 51.8.152.67 |
HTTP Web Scanning (observed): 468 HTTP, 34.9m
|
Bad Web Bot Web App Attack | |
| 🇨🇭 209.99.184.19 |
HTTP Web Scanning (observed): 5 HTTP, 19.3m
|
Bad Web Bot Web App Attack | |
| 🇩🇪 107.150.117.121 |
API LLM Recon (Ollama) (observed): 6 HTTP, 20s; attempted outbound scan; Ollama: /v1/models
|
Hacking Web App Attack | |
| 🇵🇱 34.116.154.178 |
HTTP secret_harvesting (observed): 12 HTTP
|
Brute-Force | |
| 🇭🇰 199.45.154.48 |
HTTP Web Scanning (observed): 8 HTTP, 36s
|
Bad Web Bot Web App Attack | |
| 🇨🇭 209.99.184.19 |
HTTP Web Scanning (observed): 5 HTTP, 18.8m
|
Bad Web Bot Web App Attack |