AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User sojan joined AbuseIPDB in June 2026 and has reported 1,444 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 167.99.113.208	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=21 DPT=138 DPT=137 DPT=110 D ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=21 DPT=138 DPT=137 DPT=110 DPT=143 show less	Port Scan
🇺🇸 172.203.196.176	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=8080 DPT=8443 DPT=2082 DPT=2 ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=8080 DPT=8443 DPT=2082 DPT=2086 DPT=2095 show less	Port Scan
🇫🇷 145.239.196.67	02 Sep 2026	UFW Firewall alert: Portscan detected on . Targeted ports:	Port Scan
🇫🇷 147.79.21.59	02 Sep 2026	UFW Firewall alert: Portscan detected on . Targeted ports:	Port Scan
🇦🇷 148.227.73.167	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=22 DPT=23 DPT=22 DPT=23 DPT= ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=22 DPT=23 DPT=22 DPT=23 DPT=22 show less	Port Scan
🇦🇷 149.107.244.216	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=22 DPT=22 DPT=22 DPT=22 DPT= ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=22 DPT=22 DPT=22 DPT=22 DPT=22 show less	Port Scan
🇺🇸 104.236.246.155	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=995 DPT=8008 DPT=22 DPT=138 ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=995 DPT=8008 DPT=22 DPT=138 DPT=1433 show less	Port Scan
🇺🇸 134.122.7.245	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=1701 DPT=8443 DPT=3306 DPT=5 ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=1701 DPT=8443 DPT=3306 DPT=5432 DPT=25 show less	Port Scan
🇦🇷 143.0.170.22	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=22 DPT=22 DPT=22 DPT=22 DPT= ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=22 DPT=22 DPT=22 DPT=22 DPT=22 show less	Port Scan
🇺🇸 144.172.104.147	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=8548 DPT=8545 DPT=8546 DPT=8 ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=8548 DPT=8545 DPT=8546 DPT=8549 DPT=8547 show less	Port Scan
🇿🇦 102.182.68.207	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=23 DPT=22 DPT= ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=23 DPT=22 DPT=23 show less	Port Scan
🇧🇩 103.84.58.5	02 Sep 2026	UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=22 DPT=23 DPT= ... show more UFW Firewall alert: Portscan detected on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=22 DPT=23 DPT=23 show less	Port Scan
🇩🇪 34.96.39.113	02 Sep 2026	`echo \'\<matches\>\' \\| head -n 3 \\| sed -E \'s/.\SRC=\[\^ \]+//\; s/DST=\[\^ \]+/DST=\[SERVER-IP\ ... show more `echo \'\<matches\>\' \\| head -n 3 \\| sed -E \'s/.\SRC=\[\^ \]+//\; s/DST=\[\^ \]+/DST=\[SERVER-IP\]/\; s/.\PROTO=\(\[A-Z\]+\).\DPT=\(\[0-30000\]+\).\*/UFW Blocked: Port \2 \(\1\)/g\'` ... show less	Port Scan
🇺🇸 167.99.113.208	02 Sep 2026	2026-09-02T10:12:43.395514+02:00 koeia kernel: [267313.328358] [UFW BLOCK] IN=eth0 OUT= MAC=3a:ec:0a ... show more 2026-09-02T10:12:43.395514+02:00 koeia kernel: [267313.328358] [UFW BLOCK] IN=eth0 OUT= MAC=3a:ec:0a:0c:6a:d0:bc:0f:fe:37:fb:a3:08:00 SRC=167.99.113.208 DST=45.9.62.90 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=20483 DF PROTO=TCP SPT=59896 DPT=21 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-02T10:12:43.395791+02:00 koeia kernel: [267313.328461] [UFW BLOCK] IN=eth0 OUT= MAC=3a:ec:0a:0c:6a:d0:bc:0f:fe:33:fc:e3:08:00 SRC=167.99.113.208 DST=45.9.62.90 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=63285 DF PROTO=TCP SPT=58492 DPT=138 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-02T10:12:43.395820+02:00 koeia kernel: [267313.328505] [UFW BLOCK] IN=eth0 OUT= MAC=3a:ec:0a:0c:6a:d0:bc:0f:fe:33:fc:e3:08:00 SRC=167.99.113.208 DST=45.9.62.90 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=2745 DF PROTO=TCP SPT=58804 DPT=137 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-02T10:12:43.600186+02:00 koeia kernel: [267313.533080] [UFW BLOCK] IN=eth0 OUT= MAC=3a:ec:0a:0c:6a:d0:bc:0f:fe:33:fc:e3:08:00 SRC=167.99.113.208 DST=45.9.62.90 LEN=60 TO ... show less	Port Scan
🇳🇱 94.154.46.242	02 Sep 2026	94.154.46.242 - - [02/Sep/2026:04:53:18 +0200] "GET /config/database.php HTTP/1.1" 404 2258 "-" "Moz ... show more 94.154.46.242 - - [02/Sep/2026:04:53:18 +0200] "GET /config/database.php HTTP/1.1" 404 2258 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.242 - - [02/Sep/2026:04:53:18 +0200] "GET /wp-config.php HTTP/1.1" 404 2260 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.242 - - [02/Sep/2026:04:53:18 +0200] "GET /.git/index HTTP/1.1" 404 2257 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web App Attack
🇫🇮 193.32.204.199	01 Sep 2026	193.32.204.199 - - [02/Sep/2026:01:11:06 +0200] "GET / HTTP/1.1" 400 157 "-" "-" 193.32.204.199 - - ... show more 193.32.204.199 - - [02/Sep/2026:01:11:06 +0200] "GET / HTTP/1.1" 400 157 "-" "-" 193.32.204.199 - - [02/Sep/2026:01:28:50 +0200] "GET / HTTP/1.1" 400 157 "-" "-" 193.32.204.199 - - [02/Sep/2026:01:48:46 +0200] "GET / HTTP/1.1" 400 157 "-" "-" ... show less	Web App Attack
🇩🇪 81.91.162.26	01 Sep 2026	81.91.162.26 - - [02/Sep/2026:01:08:36 +0200] "GET /robots.txt HTTP/1.1" 404 125 "-" "DENIC-Crawler/ ... show more 81.91.162.26 - - [02/Sep/2026:01:08:36 +0200] "GET /robots.txt HTTP/1.1" 404 125 "-" "DENIC-Crawler/42 (https://www.denic.de/crawler)" 81.91.162.26 - - [02/Sep/2026:01:08:37 +0200] "GET /robots.txt HTTP/1.1" 404 125 "http://koeia.de/robots.txt" "DENIC-Crawler/42 (https://www.denic.de/crawler)" 81.91.162.26 - - [02/Sep/2026:01:08:41 +0200] "GET /.well-known/security.txt HTTP/1.1" 404 125 "http://koeia.de/.well-known/security.txt" "Go-http-client/1.1" ... show less	Web App Attack
🇳🇱 34.90.182.157	01 Sep 2026	34.90.182.157 - - [01/Sep/2026:19:49:30 +0200] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; ... show more 34.90.182.157 - - [01/Sep/2026:19:49:30 +0200] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.90.182.157 - - [01/Sep/2026:19:49:30 +0200] "POST / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.90.182.157 - - [01/Sep/2026:19:49:31 +0200] "POST / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 162.243.115.116	01 Sep 2026	162.243.115.116 - - [01/Sep/2026:15:31:58 +0200] "GET /backup/.git/config HTTP/1.1" 404 2259 "-" "Mo ... show more 162.243.115.116 - - [01/Sep/2026:15:31:58 +0200] "GET /backup/.git/config HTTP/1.1" 404 2259 "-" "Mozilla/5.0 (Linux; Android 9; SM-G955F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 162.243.115.116 - - [01/Sep/2026:15:31:58 +0200] "GET /archive/.git/config HTTP/1.1" 404 2260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 YaBrowser/19.6.0.1583 Yowser/2.5 Safari/537.36" 162.243.115.116 - - [01/Sep/2026:15:31:58 +0200] "GET /backend/.git/config HTTP/1.1" 404 2258 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/534.14 (KHTML, like Gecko) Chrome/9.0.601.0 Safari/534.14" ... show less	Web App Attack
🇺🇸 34.125.237.234	01 Sep 2026	34.125.237.234 - - [01/Sep/2026:09:06:28 +0200] "GET /__aws_leak_probe_007d386d__ HTTP/1.1" 404 2259 ... show more 34.125.237.234 - - [01/Sep/2026:09:06:28 +0200] "GET /__aws_leak_probe_007d386d__ HTTP/1.1" 404 2259 "-" "Mozilla/5.0 (Windows NT 10.0; rv:127.15) Gecko/20100101 Firefox/127.15; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.125.237.234 - - [01/Sep/2026:09:06:29 +0200] "GET /static../.env HTTP/1.1" 404 2259 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.125.237.234 - - [01/Sep/2026:09:06:30 +0200] "GET /static../etc/passwd HTTP/1.1" 404 2260 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]) Chrome/128.0.8566.146 Mobile Safari/537.36" ... show less	Web App Attack
🇩🇪 207.154.228.242	01 Sep 2026	207.154.228.242 - - [01/Sep/2026:03:29:51 +0200] "GET /wp-login.php HTTP/1.1" 404 125 "-" "Mozilla/5 ... show more 207.154.228.242 - - [01/Sep/2026:03:29:51 +0200] "GET /wp-login.php HTTP/1.1" 404 125 "-" "Mozilla/5.0" 207.154.228.242 - - [01/Sep/2026:07:49:47 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 207.154.228.242 - - [01/Sep/2026:07:49:48 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇦 20.220.211.172	01 Sep 2026	20.220.211.172 - - [01/Sep/2026:04:23:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.211.172 - - [01/Sep/2026:04:23:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 502 157 "-" "-" 20.220.211.172 - - [01/Sep/2026:04:23:47 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 502 157 "-" "-" 20.220.211.172 - - [01/Sep/2026:04:23:47 +0200] "GET /nail.php HTTP/1.1" 502 157 "-" "-" ... show less	Web App Attack
🇬🇧 34.89.6.12	01 Sep 2026	34.89.6.12 - - [01/Sep/2026:03:32:20 +0200] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10 ... show more 34.89.6.12 - - [01/Sep/2026:03:32:20 +0200] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.89.6.12 - - [01/Sep/2026:03:32:20 +0200] "POST / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.89.6.12 - - [01/Sep/2026:03:32:20 +0200] "POST / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇪🇸 34.175.208.180	31 Aug 2026	34.175.208.180 - - [01/Sep/2026:01:46:22 +0200] "GET /.env HTTP/1.1" 404 5839 "-" "crusader-worker/1 ... show more 34.175.208.180 - - [01/Sep/2026:01:46:22 +0200] "GET /.env HTTP/1.1" 404 5839 "-" "crusader-worker/1.0" 34.175.208.180 - - [01/Sep/2026:01:46:23 +0200] "GET /.env.local HTTP/1.1" 404 5839 "-" "crusader-worker/1.0" 34.175.208.180 - - [01/Sep/2026:01:46:23 +0200] "GET /.env.production HTTP/1.1" 404 5839 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇸 34.21.9.207	31 Aug 2026	34.21.9.207 - - [31/Aug/2026:17:24:36 +0200] "GET /.git/config HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X ... show more 34.21.9.207 - - [31/Aug/2026:17:24:36 +0200] "GET /.git/config HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.21.9.207 - - [31/Aug/2026:17:24:36 +0200] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.21.9.207 - - [31/Aug/2026:17:24:36 +0200] "GET /.env.local HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack