AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User rooster , the webmaster of netnexus.pt.eu.org, joined AbuseIPDB in August 2026 and has reported 3,718 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 4.246.204.51	13 Sep 2026	2026-09-13T06:05:14.777470+00:00 vps02 sshd-session[364482]: Invalid user eb from 4.246.204.51 port ... show more 2026-09-13T06:05:14.777470+00:00 vps02 sshd-session[364482]: Invalid user eb from 4.246.204.51 port 33732 2026-09-13T06:09:54.211303+00:00 vps02 sshd-session[364766]: Invalid user oracle from 4.246.204.51 port 51212 2026-09-13T06:18:26.265804+00:00 vps02 sshd-session[365320]: Invalid user temp from 4.246.204.51 port 45610 ... show less	Brute-Force SSH
🇸🇪 185.217.1.246	13 Sep 2026	2026-09-13T06:15:03.592442+00:00 vps02 sshd-session[365089]: Invalid user 0 from 185.217.1.246 port ... show more 2026-09-13T06:15:03.592442+00:00 vps02 sshd-session[365089]: Invalid user 0 from 185.217.1.246 port 54654 2026-09-13T06:15:03.649607+00:00 vps02 sshd-session[365089]: Disconnecting invalid user 0 185.217.1.246 port 54654: Change of username or service not allowed: (0,ssh-connection) -> (anon,ssh-connection) [preauth] 2026-09-13T06:15:03.926621+00:00 vps02 sshd-session[365092]: Invalid user anon from 185.217.1.246 port 55071 ... show less	Brute-Force SSH
🇺🇸 216.180.246.194	13 Sep 2026	[13/Sep/2026:07:14:11 +0100] 400 - - http localhost-nginx-proxy-manager "-" [Client 216.180.246.194] ... show more [13/Sep/2026:07:14:11 +0100] 400 - - http localhost-nginx-proxy-manager "-" [Client 216.180.246.194] [Length 154] [Gzip -] "-" "-" [13/Sep/2026:07:14:20 +0100] 404 - GET http 109.49.176.159 "/manage/account/login" [Client 216.180.246.194] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" [13/Sep/2026:07:14:21 +0100] 404 - GET http 109.49.176.159 "/admin/index.html" [Client 216.180.246.194] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" [13/Sep/2026:07:14:23 +0100] 404 - GET http 109.49.176.159 "/+CSCOE+/logon.html" [Client 216.180.246.194] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" [13/Sep/2026:07:14:24 +0100] 404 - GET http 109.49.176.159 "/cgi-bin/login.cgi" [Client 216.180.246.194] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecraw ... show less	Hacking Web App Attack
🇺🇸 172.172.186.3	13 Sep 2026	2026-09-13T05:58:41.402590+00:00 vps02 sshd-session[364051]: Invalid user arif from 172.172.186.3 po ... show more 2026-09-13T05:58:41.402590+00:00 vps02 sshd-session[364051]: Invalid user arif from 172.172.186.3 port 51082 2026-09-13T06:04:28.225756+00:00 vps02 sshd-session[364422]: Invalid user ftpuser from 172.172.186.3 port 42780 2026-09-13T06:11:39.564280+00:00 vps02 sshd-session[364867]: Invalid user deployer from 172.172.186.3 port 37668 ... show less	Brute-Force SSH
🇺🇸 103.215.75.19	13 Sep 2026	[13/Sep/2026:06:51:20 +0100] 405 - POST http homelab604.duckdns.org "/?rest_route=/batch/v1" [Client ... show more [13/Sep/2026:06:51:20 +0100] 405 - POST http homelab604.duckdns.org "/?rest_route=/batch/v1" [Client 103.215.75.19] [Length 556] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" [13/Sep/2026:06:51:20 +0100] 404 - POST http homelab604.duckdns.org "/index.php?rest_route=/batch/v1" [Client 103.215.75.19] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" [13/Sep/2026:06:51:20 +0100] 404 - POST http homelab604.duckdns.org "/index.php?rest_route=/batch/v1" [Client 103.215.75.19] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" [13/Sep/2026:06:51:20 +0100] 404 - POST http homelab604.duckdns.org "/index.php?rest_route=%2Fbatch%2Fv1" [Client 103.215.75.19] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ... show less	Hacking Web App Attack
🇺🇸 34.125.46.27	13 Sep 2026	[13/Sep/2026:06:40:17 +0100] 404 - GET http 141.147.73.25 "/__aws_leak_probe_25cfffe2__" [Client 34. ... show more [13/Sep/2026:06:40:17 +0100] 404 - GET http 141.147.73.25 "/__aws_leak_probe_25cfffe2__" [Client 34.125.46.27] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1313.188 Mobile Safari/537.36; compatible; Applebot/0.1; +http://www.apple.com/go/applebot" "-" [13/Sep/2026:06:40:17 +0100] 404 - GET http 141.147.73.25 "/static../.env" [Client 34.125.46.27] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected]) Chrome/130.0.4534.65 Safari/537.36" "-" [13/Sep/2026:06:40:17 +0100] 404 - GET http 141.147.73.25 "/media../.env" [Client 34.125.46.27] [Length 122] [Gzip 1.35] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" "-" [13/Sep/2026:06:40:17 +0100] 404 - GET http 141.147.73.25 "/@fs/root/.aws/credentials?raw??" [Client 34.125.46.27] [Length 122] [Gzip 1.35] "Moz ... show less	Hacking Web App Attack
🇺🇸 107.175.212.252	13 Sep 2026	2026-09-13T05:03:23.698711+00:00 vps01 sshd-session[830367]: Invalid user orangepi from 107.175.212. ... show more 2026-09-13T05:03:23.698711+00:00 vps01 sshd-session[830367]: Invalid user orangepi from 107.175.212.252 port 59516 2026-09-13T05:08:16.966487+00:00 vps01 sshd-session[831049]: Invalid user support from 107.175.212.252 port 45528 2026-09-13T05:13:11.263502+00:00 vps01 sshd-session[831739]: Invalid user admin from 107.175.212.252 port 46346 ... show less	Brute-Force SSH
🇱🇰 220.247.224.226	13 Sep 2026	2026-09-13T04:12:00.395824+00:00 vps02 sshd-session[357378]: Invalid user crafty from 220.247.224.22 ... show more 2026-09-13T04:12:00.395824+00:00 vps02 sshd-session[357378]: Invalid user crafty from 220.247.224.226 port 27489 2026-09-13T04:14:33.351566+00:00 vps02 sshd-session[357539]: Invalid user b from 220.247.224.226 port 14419 2026-09-13T04:18:18.223004+00:00 vps02 sshd-session[357827]: Invalid user deployer from 220.247.224.226 port 59161 ... show less	Brute-Force SSH
🇻🇳 14.225.206.171	13 Sep 2026	2026-09-13T04:10:41.914713+00:00 vps02 sshd-session[357307]: Invalid user temp from 14.225.206.171 p ... show more 2026-09-13T04:10:41.914713+00:00 vps02 sshd-session[357307]: Invalid user temp from 14.225.206.171 port 34828 2026-09-13T04:15:11.215761+00:00 vps02 sshd-session[357577]: Invalid user hadoop from 14.225.206.171 port 43350 2026-09-13T04:17:43.666006+00:00 vps02 sshd-session[357784]: Invalid user adminuser from 14.225.206.171 port 60862 ... show less	Brute-Force SSH
🇻🇳 163.223.8.141	13 Sep 2026	2026-09-13T04:08:18.655718+00:00 vps02 sshd-session[357145]: Invalid user nw from 163.223.8.141 port ... show more 2026-09-13T04:08:18.655718+00:00 vps02 sshd-session[357145]: Invalid user nw from 163.223.8.141 port 59022 2026-09-13T04:16:18.315648+00:00 vps02 sshd-session[357679]: Invalid user test1 from 163.223.8.141 port 50260 2026-09-13T04:17:36.185506+00:00 vps02 sshd-session[357753]: Invalid user user from 163.223.8.141 port 44794 ... show less	Brute-Force SSH
🇸🇬 101.47.8.188	13 Sep 2026	2026-09-13T04:03:54.923475+00:00 vps01 sshd-session[821892]: Invalid user admin from 101.47.8.188 po ... show more 2026-09-13T04:03:54.923475+00:00 vps01 sshd-session[821892]: Invalid user admin from 101.47.8.188 port 38816 2026-09-13T04:04:48.888209+00:00 vps01 sshd-session[822029]: Invalid user irm from 101.47.8.188 port 39564 2026-09-13T04:05:54.858353+00:00 vps01 sshd-session[822178]: Invalid user ibrahim from 101.47.8.188 port 45478 ... show less	Brute-Force SSH
🇹🇼 61.222.211.114	13 Sep 2026	2026-09-13T03:44:41.041511+00:00 vps01 sshd-session[819143]: Invalid user kserge from 61.222.211.114 ... show more 2026-09-13T03:44:41.041511+00:00 vps01 sshd-session[819143]: Invalid user kserge from 61.222.211.114 port 41628 2026-09-13T03:49:47.483420+00:00 vps01 sshd-session[819867]: Invalid user aa from 61.222.211.114 port 50166 2026-09-13T03:50:57.072714+00:00 vps01 sshd-session[820025]: Invalid user readonlyuser from 61.222.211.114 port 44006 ... show less	Brute-Force SSH
🇲🇲 103.59.163.135	13 Sep 2026	2026-09-13T03:40:01.805895+00:00 vps01 sshd-session[818455]: Invalid user mahdi from 103.59.163.135 ... show more 2026-09-13T03:40:01.805895+00:00 vps01 sshd-session[818455]: Invalid user mahdi from 103.59.163.135 port 54762 2026-09-13T03:42:39.365164+00:00 vps01 sshd-session[818832]: Invalid user sumit from 103.59.163.135 port 41016 2026-09-13T03:45:09.778558+00:00 vps01 sshd-session[819195]: Invalid user demo from 103.59.163.135 port 51882 ... show less	Brute-Force SSH
🇧🇪 35.187.91.181	13 Sep 2026	[13/Sep/2026:04:39:06 +0100] 400 - - http localhost-nginx-proxy-manager "-" [Client 35.187.91.181] [ ... show more [13/Sep/2026:04:39:06 +0100] 400 - - http localhost-nginx-proxy-manager "-" [Client 35.187.91.181] [Length 154] [Gzip -] "-" "-" [13/Sep/2026:04:39:13 +0100] 405 - OPTIONS http 141.147.73.25 "/" [Client 35.187.91.181] [Length 154] [Gzip -] "Mozilla/5.0 (compatible)" "-" [13/Sep/2026:04:39:13 +0100] 405 - NAZF http 141.147.73.25 "/" [Client 35.187.91.181] [Length 154] [Gzip -] "Mozilla/5.0 (compatible)" "-" [13/Sep/2026:04:39:13 +0100] 405 - POST http 141.147.73.25 "/" [Client 35.187.91.181] [Length 154] [Gzip -] "Mozilla/5.0 (compatible)" "-" [13/Sep/2026:04:39:13 +0100] 405 - OPTIONS http 141.147.73.25 "/" [Client 35.187.91.181] [Length 154] [Gzip -] "Mozilla/5.0 (compatible)" "-" ... show less	Hacking Web App Attack
🇨🇭 209.99.189.173	13 Sep 2026	2026-09-13T03:34:56.069091+00:00 vps02 sshd-session[355085]: Invalid user vpn from 209.99.189.173 po ... show more 2026-09-13T03:34:56.069091+00:00 vps02 sshd-session[355085]: Invalid user vpn from 209.99.189.173 port 52092 2026-09-13T03:35:16.598401+00:00 vps02 sshd-session[355113]: Invalid user service from 209.99.189.173 port 32976 2026-09-13T03:35:17.999138+00:00 vps02 sshd-session[355115]: Invalid user vpn from 209.99.189.173 port 32992 ... show less	Brute-Force SSH
🇳🇱 94.154.46.245	13 Sep 2026	[13/Sep/2026:03:46:00 +0100] 404 - GET http 141.147.73.25 "/wp-config.php.old" [Client 94.154.46.245 ... show more [13/Sep/2026:03:46:00 +0100] 404 - GET http 141.147.73.25 "/wp-config.php.old" [Client 94.154.46.245] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:03:46:00 +0100] 404 - GET http 141.147.73.25 "/wp-config.php.save" [Client 94.154.46.245] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:03:46:00 +0100] 404 - GET http 141.147.73.25 "/wp-config.php.bak" [Client 94.154.46.245] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:03:46:00 +0100] 404 - GET http 141.147.73.25 "/wp-config.php" [Client 94.154.46.245] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:03:46:00 +0100] 404 - GET http 141.147.73.25 "/.git/HEAD" [Client 94.154.46.245] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google. ... show less	Hacking Web App Attack
🇬🇧 35.203.211.54	13 Sep 2026	[13/Sep/2026:03:26:14 +0100] 400 - - http localhost "-" [Client 35.203.211.54] [Length 154] [Gzip -] ... show more [13/Sep/2026:03:26:14 +0100] 400 - - http localhost "-" [Client 35.203.211.54] [Length 154] [Gzip -] "-" "-" [13/Sep/2026:03:26:14 +0100] 400 - - http localhost "-" [Client 35.203.211.54] [Length 154] [Gzip -] "-" "-" [13/Sep/2026:03:26:14 +0100] 400 - - http localhost "-" [Client 35.203.211.54] [Length 154] [Gzip -] "-" "-" [13/Sep/2026:03:26:14 +0100] 400 - - http localhost "-" [Client 35.203.211.54] [Length 154] [Gzip -] "-" "-" [13/Sep/2026:03:26:14 +0100] 400 - - http localhost "-" [Client 35.203.211.54] [Length 154] [Gzip -] "-" "-" ... show less	Hacking Web App Attack
🇮🇩 163.7.1.218	13 Sep 2026	2026-09-13T01:46:37.254161+00:00 vps02 sshd-session[348475]: Invalid user nick from 163.7.1.218 port ... show more 2026-09-13T01:46:37.254161+00:00 vps02 sshd-session[348475]: Invalid user nick from 163.7.1.218 port 48914 2026-09-13T01:49:33.362206+00:00 vps02 sshd-session[348644]: Invalid user znc from 163.7.1.218 port 45454 2026-09-13T01:50:51.624892+00:00 vps02 sshd-session[348735]: Invalid user db from 163.7.1.218 port 45084 ... show less	Brute-Force SSH
🇭🇰 118.193.45.220	13 Sep 2026	[13/Sep/2026:02:50:32 +0100] 400 - GET http 144.21.63.93 "/" [Client 118.193.45.220] [Length 252] [G ... show more [13/Sep/2026:02:50:32 +0100] 400 - GET http 144.21.63.93 "/" [Client 118.193.45.220] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:02:50:33 +0100] 400 - GET http 144.21.63.93 "/raw" [Client 118.193.45.220] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:02:50:33 +0100] 400 - GET http 144.21.63.93 "/ws" [Client 118.193.45.220] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:02:50:33 +0100] 400 - GET http 144.21.63.93 "/socket.io/?EIO=4&transport=websocket" [Client 118.193.45.220] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:02:50:35 +0100] 400 - GET http 144.21.63.93 "/version" [Client 118.193.45.220] [Length 252] [Gzip -] "-" "-" ... show less	Hacking Web App Attack
🇳🇱 94.154.46.244	13 Sep 2026	[13/Sep/2026:02:31:14 +0100] 404 - GET http 109.49.176.159 "/.git/index" [Client 94.154.46.244] [Len ... show more [13/Sep/2026:02:31:14 +0100] 404 - GET http 109.49.176.159 "/.git/index" [Client 94.154.46.244] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:02:31:14 +0100] 404 - GET http 109.49.176.159 "/config/app.php" [Client 94.154.46.244] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:02:31:14 +0100] 404 - GET http 109.49.176.159 "/.git/config" [Client 94.154.46.244] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:02:31:14 +0100] 404 - GET http 109.49.176.159 "/composer.json" [Client 94.154.46.244] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" [13/Sep/2026:02:31:14 +0100] 404 - GET http 109.49.176.159 "/config/database.php" [Client 94.154.46.244] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.co ... show less	Hacking Web App Attack
🇭🇰 152.32.226.138	13 Sep 2026	[13/Sep/2026:01:57:46 +0100] 400 - GET http 109.49.176.159 "/" [Client 152.32.226.138] [Length 252] ... show more [13/Sep/2026:01:57:46 +0100] 400 - GET http 109.49.176.159 "/" [Client 152.32.226.138] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:01:57:46 +0100] 400 - GET http 109.49.176.159 "/raw" [Client 152.32.226.138] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:01:57:47 +0100] 400 - GET http 109.49.176.159 "/ws" [Client 152.32.226.138] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:01:57:47 +0100] 400 - GET http 109.49.176.159 "/socket.io/?EIO=4&transport=websocket" [Client 152.32.226.138] [Length 252] [Gzip -] "rawgrab" "-" [13/Sep/2026:01:57:49 +0100] 400 - GET http 109.49.176.159 "/version" [Client 152.32.226.138] [Length 252] [Gzip -] "-" "-" ... show less	Hacking Web App Attack
🇩🇪 31.76.98.105	13 Sep 2026	2026-09-13T00:45:39.521399+00:00 vps01 sshd-session[792853]: Invalid user admin from 31.76.98.105 po ... show more 2026-09-13T00:45:39.521399+00:00 vps01 sshd-session[792853]: Invalid user admin from 31.76.98.105 port 54880 2026-09-13T00:46:09.719855+00:00 vps01 sshd-session[792928]: Invalid user user from 31.76.98.105 port 52806 2026-09-13T00:47:10.153613+00:00 vps01 sshd-session[793076]: Invalid user user from 31.76.98.105 port 36850 ... show less	Brute-Force SSH
🇺🇸 34.125.90.62	13 Sep 2026	[13/Sep/2026:01:14:59 +0100] 404 - GET http 109.49.176.159 "/__aws_leak_probe_69fe4673__" [Client 34 ... show more [13/Sep/2026:01:14:59 +0100] 404 - GET http 109.49.176.159 "/__aws_leak_probe_69fe4673__" [Client 34.125.90.62] [Length 122] [Gzip 1.35] "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:128.0) Gecko/20100101 Firefox/128.0; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php" "-" [13/Sep/2026:01:14:59 +0100] 404 - GET http 109.49.176.159 "/static../.env" [Client 34.125.90.62] [Length 122] [Gzip 1.35] "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1; compatible; Bytespider; +https://zhanzhang.toutiao.com/" "-" [13/Sep/2026:01:14:59 +0100] 404 - GET http 109.49.176.159 "/aws/credentials" [Client 34.125.90.62] [Length 183] [Gzip 3.21] "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/147.0.3718.32 Mobile Safari/537.36" "-" [13/Sep/2026:01:14:59 ... show less	Hacking Web App Attack
🇪🇸 46.24.47.94	13 Sep 2026	2026-09-12T23:56:24.209108+00:00 vps01 sshd-session[785719]: Invalid user sunshine from 46.24.47.94 ... show more 2026-09-12T23:56:24.209108+00:00 vps01 sshd-session[785719]: Invalid user sunshine from 46.24.47.94 port 37442 2026-09-13T00:02:52.384265+00:00 vps01 sshd-session[786698]: Invalid user sachin from 46.24.47.94 port 37862 2026-09-13T00:04:12.434648+00:00 vps01 sshd-session[786888]: Invalid user temp from 46.24.47.94 port 60532 ... show less	Brute-Force SSH
🇫🇷 51.75.253.68	12 Sep 2026	2026-09-12T23:51:01.471031+00:00 vps01 sshd-session[784926]: Invalid user test from 51.75.253.68 por ... show more 2026-09-12T23:51:01.471031+00:00 vps01 sshd-session[784926]: Invalid user test from 51.75.253.68 port 40218 2026-09-12T23:55:39.830209+00:00 vps01 sshd-session[785614]: Invalid user server from 51.75.253.68 port 45962 2026-09-12T23:57:31.273923+00:00 vps01 sshd-session[785901]: Invalid user utente from 51.75.253.68 port 44118 ... show less	Brute-Force SSH