User heyzg joined AbuseIPDB in January 2026 and has reported 18,163 IP addresses.
Standing (weight) is good.
ACTIVE USER
WEBMASTER
SUPPORTER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇧🇪 35.187.86.229 |
HTTP Command Execution (observed): 6 cmds, 2 HTTP, 18s
|
Hacking SSH | |
| 🇺🇸 45.73.160.131 |
HTTP Command Execution (observed): 4 cmds, 1 HTTP, 5s
|
Hacking SSH | |
| 🇺🇸 184.105.139.67 |
HTTP Command Execution (observed): 3 HTTP, 36s
|
Hacking SSH | |
| 🇺🇸 71.6.158.166 |
HTTP agent_ecosystem_recon (observed): 5 HTTP, 3s
|
Brute-Force | |
| 🇺🇸 165.154.173.21 |
HTTP Web Scanning (observed): 4 HTTP, 2.2m
|
Bad Web Bot Web App Attack | |
| 🇺🇸 66.132.224.91 |
HTTP MCP Recon (observed): 5 HTTP, 1s; attempted outbound scan
|
Hacking Web App Attack | |
| 🇺🇸 216.45.55.141 |
|
Hacking Web App Attack | |
| 🇺🇸 71.6.134.233 |
HTTP Command Execution (observed): 4 cmds, 1 HTTP
|
Hacking SSH | |
| 🇺🇸 137.184.19.144 |
HTTP Command Execution (observed): 4 cmds, 2 HTTP
|
Hacking SSH | |
| 🇨🇭 209.99.185.33 |
HTTP secret_harvesting (observed): 33 HTTP, 2.0m
|
Brute-Force | |
| 🇺🇸 66.132.186.181 |
HTTP Command Execution (observed): 4 cmds, 1 HTTP, 4s
|
Hacking SSH | |
| 🇦🇪 31.58.246.14 |
|
Hacking Web App Attack | |
| 🇩🇪 151.243.11.234 |
HTTP Web Scanning (observed): 3 HTTP
|
Bad Web Bot Web App Attack | |
| 🇺🇸 66.132.195.34 |
HTTP Web Scanning (observed): 4 HTTP, 1.1m
|
Bad Web Bot Web App Attack | |
| 🇭🇰 57.158.24.219 |
|
Hacking Web App Attack | |
| 🇺🇸 66.240.192.138 |
HTTP Command Execution (observed): 3 cmds, 1 HTTP
|
Hacking SSH | |
| 🇭🇰 57.158.24.219 |
|
Hacking Web App Attack | |
| 🇺🇸 66.132.224.79 |
HTTP Command Execution (observed): 4 cmds, 1 HTTP, 1s
|
Hacking SSH | |
| 🇩🇪 130.12.180.77 |
HTTP secret_harvesting (observed): 3 HTTP, 55s
|
Brute-Force | |
| 🇳🇱 93.123.109.228 |
HTTP secret_harvesting (observed): 4 HTTP, 3s
|
Brute-Force | |
| 🇺🇸 65.49.1.52 |
HTTP Command Execution (observed): 5 cmds, 3 HTTP, 50s
|
Hacking SSH | |
| 🇷🇺 156.229.16.165 |
API LLM Recon (Ollama) (observed): 6 HTTP, 19s; attempted outbound scan; Ollama: /v1/models
|
Hacking Web App Attack | |
| 🇷🇴 193.46.255.143 |
HTTP Command Execution (observed): 4 cmds, 2 HTTP, 13s
|
Hacking SSH | |
| 🇺🇸 45.156.129.120 |
HTTP Web Scanning (observed): 3 HTTP
|
Bad Web Bot Web App Attack | |
| 🇺🇸 65.49.1.132 |
HTTP Command Execution (observed): 5 cmds, 3 HTTP, 46s
|
Hacking SSH |