AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User rooster , the webmaster of netnexus.pt.eu.org, joined AbuseIPDB in August 2026 and has reported 9,319 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇦 173.242.48.112	27 Oct 2026	2026-10-27T11:44:41.461000+00:00 vps02 sshd-session[432377]: Invalid user max from 173.242.48.112 po ... show more 2026-10-27T11:44:41.461000+00:00 vps02 sshd-session[432377]: Invalid user max from 173.242.48.112 port 59098 2026-10-27T11:52:46.670193+00:00 vps02 sshd-session[432895]: Invalid user aman from 173.242.48.112 port 58678 2026-10-27T11:54:22.355556+00:00 vps02 sshd-session[432992]: Invalid user monitor from 173.242.48.112 port 35894 ... show less	Brute-Force SSH
🇭🇰 156.236.66.15	27 Oct 2026	2026-10-27T11:43:22.174461+00:00 vps01 sshd-session[977910]: Invalid user activemq from 156.236.66.1 ... show more 2026-10-27T11:43:22.174461+00:00 vps01 sshd-session[977910]: Invalid user activemq from 156.236.66.15 port 51330 2026-10-27T11:48:10.536757+00:00 vps01 sshd-session[978589]: Invalid user mongodb from 156.236.66.15 port 41108 2026-10-27T11:52:13.297753+00:00 vps01 sshd-session[979188]: Invalid user wallet from 156.236.66.15 port 46748 ... show less	Brute-Force SSH
🇰🇷 175.198.62.180	27 Oct 2026	2026-10-27T11:39:37.819918+00:00 vps01 sshd-session[977362]: Invalid user testftp from 175.198.62.18 ... show more 2026-10-27T11:39:37.819918+00:00 vps01 sshd-session[977362]: Invalid user testftp from 175.198.62.180 port 46388 2026-10-27T11:47:31.063832+00:00 vps01 sshd-session[978495]: Invalid user mongodb from 175.198.62.180 port 51832 2026-10-27T11:51:01.684789+00:00 vps01 sshd-session[979015]: Invalid user activemq from 175.198.62.180 port 39956 ... show less	Brute-Force SSH
🇫🇷 185.187.169.202	27 Oct 2026	[27/Oct/2026:11:41:29 +0000] 404 - GET http 141.147.73.25 "/.env" [Client 185.187.169.202] [Length 1 ... show more [27/Oct/2026:11:41:29 +0000] 404 - GET http 141.147.73.25 "/.env" [Client 185.187.169.202] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" [27/Oct/2026:11:41:29 +0000] 404 - GET http 141.147.73.25 "/wp-config.local.php" [Client 185.187.169.202] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" [27/Oct/2026:11:41:29 +0000] 404 - GET http 141.147.73.25 "/%c0" [Client 185.187.169.202] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" [27/Oct/2026:11:41:29 +0000] 404 - GET http 141.147.73.25 "/._wp-config.php" [Client 185.187.169.202] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" [27/Oct/2026:11:41:29 +0000] 404 - GET ... show less	Hacking Web App Attack
🇩🇪 213.209.159.154	27 Oct 2026	[27/Oct/2026:11:13:18 +0000] 404 - GET http 141.147.73.25 "/site.zip" [Client 213.209.159.154] [Leng ... show more [27/Oct/2026:11:13:18 +0000] 404 - GET http 141.147.73.25 "/site.zip" [Client 213.209.159.154] [Length 150] [Gzip -] "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; it-it) AppleWebKit/312.1 (KHTML, like Gecko) Safari/312" "-" [27/Oct/2026:11:13:18 +0000] 404 - GET http 141.147.73.25 "/iyh07695g2vbt9" [Client 213.209.159.154] [Length 150] [Gzip -] "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; it-it) AppleWebKit/312.1 (KHTML, like Gecko) Safari/312" "-" [27/Oct/2026:11:13:18 +0000] 404 - GET http 141.147.73.25 "/.env" [Client 213.209.159.154] [Length 150] [Gzip -] "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; it-it) AppleWebKit/312.1 (KHTML, like Gecko) Safari/312" "-" [27/Oct/2026:11:13:18 +0000] 400 - GET http localhost-nginx-proxy-manager "-" [Client 213.209.159.154] [Length 154] [Gzip -] "-" "-" [27/Oct/2026:11:13:18 +0000] 404 - GET http 141.147.73.25 "/backend/.env" [Client 213.209.159.154] [Length 150] [Gzip -] "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; it-it) AppleWebKit/312.1 (KHTML, like Geck ... show less	Hacking Web App Attack
🇺🇸 164.92.112.151	27 Oct 2026	2026-10-27T10:35:06.475648+00:00 vps01 sshd-session[967835]: Invalid user factorio from 164.92.112.1 ... show more 2026-10-27T10:35:06.475648+00:00 vps01 sshd-session[967835]: Invalid user factorio from 164.92.112.151 port 32966 2026-10-27T10:42:44.056430+00:00 vps01 sshd-session[969297]: Invalid user ftp_user from 164.92.112.151 port 42910 2026-10-27T10:45:15.553421+00:00 vps01 sshd-session[969676]: Invalid user service from 164.92.112.151 port 33970 ... show less	Brute-Force SSH
🇻🇳 103.237.144.204	27 Oct 2026	2026-10-27T10:39:49.107777+00:00 vps01 sshd-session[968840]: Invalid user admin from 103.237.144.204 ... show more 2026-10-27T10:39:49.107777+00:00 vps01 sshd-session[968840]: Invalid user admin from 103.237.144.204 port 33208 2026-10-27T10:41:51.059995+00:00 vps01 sshd-session[969161]: Invalid user bot2 from 103.237.144.204 port 33720 2026-10-27T10:43:46.759906+00:00 vps01 sshd-session[969449]: Invalid user userftp from 103.237.144.204 port 52562 ... show less	Brute-Force SSH
🇻🇳 103.78.1.160	27 Oct 2026	2026-10-27T10:39:10.467415+00:00 vps01 sshd-session[968740]: Invalid user factorio from 103.78.1.160 ... show more 2026-10-27T10:39:10.467415+00:00 vps01 sshd-session[968740]: Invalid user factorio from 103.78.1.160 port 38450 2026-10-27T10:40:59.164020+00:00 vps01 sshd-session[969022]: Invalid user newuser from 103.78.1.160 port 54542 2026-10-27T10:42:45.901294+00:00 vps01 sshd-session[969299]: Invalid user ftp_user from 103.78.1.160 port 47740 ... show less	Brute-Force SSH
🇺🇸 143.110.145.158	27 Oct 2026	2026-10-27T10:28:45.477007+00:00 vps01 sshd-session[966924]: Invalid user userftp from 143.110.145.1 ... show more 2026-10-27T10:28:45.477007+00:00 vps01 sshd-session[966924]: Invalid user userftp from 143.110.145.158 port 54696 2026-10-27T10:38:51.351419+00:00 vps01 sshd-session[968685]: Invalid user sami from 143.110.145.158 port 37420 2026-10-27T10:41:55.165145+00:00 vps01 sshd-session[969163]: Invalid user bot2 from 143.110.145.158 port 47916 ... show less	Brute-Force SSH
🇨🇴 161.18.77.49	27 Oct 2026	2026-10-27T10:36:28.582615+00:00 vps01 sshd-session[968156]: Invalid user factorio from 161.18.77.49 ... show more 2026-10-27T10:36:28.582615+00:00 vps01 sshd-session[968156]: Invalid user factorio from 161.18.77.49 port 33226 2026-10-27T10:39:53.264192+00:00 vps01 sshd-session[968847]: Invalid user newuser from 161.18.77.49 port 46370 2026-10-27T10:41:37.776051+00:00 vps01 sshd-session[969127]: Invalid user service from 161.18.77.49 port 50748 ... show less	Brute-Force SSH
🇹🇼 114.35.59.237	27 Oct 2026	2026-10-27T10:35:24.449942+00:00 vps01 sshd-session[967862]: Invalid user ftp_user from 114.35.59.23 ... show more 2026-10-27T10:35:24.449942+00:00 vps01 sshd-session[967862]: Invalid user ftp_user from 114.35.59.237 port 33236 2026-10-27T10:39:48.368990+00:00 vps01 sshd-session[968838]: Invalid user factorio from 114.35.59.237 port 37080 2026-10-27T10:41:28.757228+00:00 vps01 sshd-session[969094]: Invalid user newuser from 114.35.59.237 port 52532 ... show less	Brute-Force SSH
🇧🇪 35.205.121.111	27 Oct 2026	[27/Oct/2026:10:31:53 +0000] 400 - GET http 141.147.73.25 "/" [Client 35.205.121.111] [Length 252] [ ... show more [27/Oct/2026:10:31:53 +0000] 400 - GET http 141.147.73.25 "/" [Client 35.205.121.111] [Length 252] [Gzip -] "Mozilla/5.0 (compatible; nmap-http-info)" "-" [27/Oct/2026:10:31:53 +0000] 400 - GET http 141.147.73.25 "/favicon.ico" [Client 35.205.121.111] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-" [27/Oct/2026:10:31:53 +0000] 400 - OPTIONS http 141.147.73.25 "/" [Client 35.205.121.111] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-" [27/Oct/2026:10:31:53 +0000] 400 - VHNY http 141.147.73.25 "/" [Client 35.205.121.111] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-" [27/Oct/2026:10:31:54 +0000] 400 - GET http 141.147.73.25 "/" [Client 35.205.121.111] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-" ... show less	Hacking Web App Attack
🇨🇦 70.54.182.130	27 Oct 2026	2026-10-27T10:17:47.654177+00:00 vps01 sshd-session[965330]: Invalid user andrew from 70.54.182.130 ... show more 2026-10-27T10:17:47.654177+00:00 vps01 sshd-session[965330]: Invalid user andrew from 70.54.182.130 port 53629 2026-10-27T10:26:25.609303+00:00 vps01 sshd-session[966614]: Invalid user kafka from 70.54.182.130 port 52173 2026-10-27T10:28:36.937490+00:00 vps01 sshd-session[966895]: Invalid user lee from 70.54.182.130 port 39862 ... show less	Brute-Force SSH
🇬🇹 190.149.6.54	27 Oct 2026	2026-10-27T10:14:12.336908+00:00 vps01 sshd-session[964811]: Invalid user teamspeak from 190.149.6.5 ... show more 2026-10-27T10:14:12.336908+00:00 vps01 sshd-session[964811]: Invalid user teamspeak from 190.149.6.54 port 43484 2026-10-27T10:20:10.094622+00:00 vps01 sshd-session[965695]: Invalid user proba from 190.149.6.54 port 40604 2026-10-27T10:21:44.571556+00:00 vps01 sshd-session[965918]: Invalid user avis from 190.149.6.54 port 33858 ... show less	Brute-Force SSH
🇰🇭 167.179.17.252	27 Oct 2026	2026-10-27T10:13:08.410353+00:00 vps01 sshd-session[964669]: Invalid user apache from 167.179.17.252 ... show more 2026-10-27T10:13:08.410353+00:00 vps01 sshd-session[964669]: Invalid user apache from 167.179.17.252 port 39588 2026-10-27T10:19:59.198577+00:00 vps01 sshd-session[965667]: Invalid user kafka from 167.179.17.252 port 44754 2026-10-27T10:21:38.587284+00:00 vps01 sshd-session[965910]: Invalid user lee from 167.179.17.252 port 35682 ... show less	Brute-Force SSH
🇮🇩 210.79.142.203	27 Oct 2026	2026-10-27T10:03:12.027441+00:00 vps02 sshd-session[426029]: Invalid user super from 210.79.142.203 ... show more 2026-10-27T10:03:12.027441+00:00 vps02 sshd-session[426029]: Invalid user super from 210.79.142.203 port 55696 2026-10-27T10:05:53.698299+00:00 vps02 sshd-session[426187]: Invalid user myuser from 210.79.142.203 port 47902 2026-10-27T10:08:28.944962+00:00 vps02 sshd-session[426338]: Invalid user deploy from 210.79.142.203 port 54250 ... show less	Brute-Force SSH
🇺🇸 216.180.246.102	27 Oct 2026	[27/Oct/2026:06:54:46 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 216.180.246.102] ... show more [27/Oct/2026:06:54:46 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 216.180.246.102] [Length 154] [Gzip -] "-" "-" [27/Oct/2026:06:55:23 +0000] 404 - GET http 141.147.73.25 "/manage/account/login" [Client 216.180.246.102] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" [27/Oct/2026:06:55:24 +0000] 404 - GET http 141.147.73.25 "/admin/index.html" [Client 216.180.246.102] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" [27/Oct/2026:06:55:26 +0000] 404 - GET http 141.147.73.25 "/+CSCOE+/logon.html" [Client 216.180.246.102] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" [27/Oct/2026:06:55:28 +0000] 404 - GET http 141.147.73.25 "/cgi-bin/login.cgi" [Client 216.180.246.102] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) ... show less	Hacking Web App Attack
🇻🇳 125.212.235.194	27 Oct 2026	2026-10-27T06:26:00.037913+00:00 vps01 sshd-session[932370]: Invalid user conta from 125.212.235.194 ... show more 2026-10-27T06:26:00.037913+00:00 vps01 sshd-session[932370]: Invalid user conta from 125.212.235.194 port 29855 2026-10-27T06:27:51.839460+00:00 vps01 sshd-session[932656]: Invalid user joshua from 125.212.235.194 port 51726 2026-10-27T06:31:20.119369+00:00 vps01 sshd-session[933169]: Invalid user venus from 125.212.235.194 port 18479 ... show less	Brute-Force SSH
🇺🇸 43.135.133.30	27 Oct 2026	2026-10-27T06:20:04.129547+00:00 vps01 sshd-session[931527]: Invalid user sai from 43.135.133.30 por ... show more 2026-10-27T06:20:04.129547+00:00 vps01 sshd-session[931527]: Invalid user sai from 43.135.133.30 port 51772 2026-10-27T06:28:48.923204+00:00 vps01 sshd-session[932798]: Invalid user samba from 43.135.133.30 port 41054 2026-10-27T06:30:17.866157+00:00 vps01 sshd-session[932993]: Invalid user vhserver from 43.135.133.30 port 56328 ... show less	Brute-Force SSH
🇳🇱 158.94.209.116	27 Oct 2026	[27/Oct/2026:06:09:19 +0000] 400 - GET http 141.147.73.25 "/+CSCOU+/csco_logo.gif" [Client 158.94.20 ... show more [27/Oct/2026:06:09:19 +0000] 400 - GET http 141.147.73.25 "/+CSCOU+/csco_logo.gif" [Client 158.94.209.116] [Length 654] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "-" [27/Oct/2026:06:09:20 +0000] 400 - GET http 141.147.73.25 "/login" [Client 158.94.209.116] [Length 654] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "-" [27/Oct/2026:06:09:20 +0000] 400 - GET http 141.147.73.25 "/auth1.js" [Client 158.94.209.116] [Length 654] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "-" [27/Oct/2026:06:09:20 +0000] 400 - GET http 141.147.73.25 "/auth_portal/Default/logo.gif" [Client 158.94.209.116] [Length 654] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "-" [27/Oct/2026:06:09:24 +0000] 400 - GET http 141.147.73.25 "/+CSCOU+/csco_logo.gif" [Client 158.94.209.116] [Length ... show less	Hacking Web App Attack
🇮🇳 121.242.232.216	27 Oct 2026	2026-10-27T05:27:51.247384+00:00 vps02 sshd-session[408718]: Invalid user fa from 121.242.232.216 po ... show more 2026-10-27T05:27:51.247384+00:00 vps02 sshd-session[408718]: Invalid user fa from 121.242.232.216 port 48620 2026-10-27T05:27:56.044079+00:00 vps02 sshd-session[408745]: Invalid user test from 121.242.232.216 port 56700 2026-10-27T05:27:56.888396+00:00 vps02 sshd-session[408747]: Invalid user user from 121.242.232.216 port 35026 ... show less	Brute-Force SSH
🇵🇱 54.38.52.18	27 Oct 2026	2026-10-27T04:24:17.328027+00:00 vps02 sshd-session[404816]: Invalid user ftpuser from 54.38.52.18 p ... show more 2026-10-27T04:24:17.328027+00:00 vps02 sshd-session[404816]: Invalid user ftpuser from 54.38.52.18 port 40360 2026-10-27T04:27:05.785282+00:00 vps02 sshd-session[405003]: Invalid user stone from 54.38.52.18 port 42632 2026-10-27T04:28:32.467383+00:00 vps02 sshd-session[405076]: Invalid user eddy from 54.38.52.18 port 41054 ... show less	Brute-Force SSH
🇧🇪 34.78.213.249	27 Oct 2026	[27/Oct/2026:04:22:08 +0000] - 401 401 - GET https wgd01.netnexus.pt.eu.org "/.amplifyrc" [Client 34 ... show more [27/Oct/2026:04:22:08 +0000] - 401 401 - GET https wgd01.netnexus.pt.eu.org "/.amplifyrc" [Client 34.78.213.249] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:22:08 +0000] - 401 401 - GET https wgd01.netnexus.pt.eu.org "/.aws/.env" [Client 34.78.213.249] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:22:08 +0000] - 401 401 - GET https wgd01.netnexus.pt.eu.org "/.env.anthropic" [Client 34.78.213.249] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:22:08 +0000] - 401 401 - GET https wgd01.netnexus.pt.eu.org "/.aws/config" [Client 34.78.213.249] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:22:08 +0000] - 401 401 - GET https wgd01.netnexus.pt.eu.org "/.claude/settings.local.jso ... show less	Hacking Web App Attack
🇫🇷 172.71.232.92	27 Oct 2026	[27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.aws" [Client 172. ... show more [27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.aws" [Client 172.71.232.92] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.aws" [Client 172.71.232.92] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.sample" [Client 172.71.232.92] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.sample" [Client 172.71.232.92] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.git/index" [Client 172.71.232.9 ... show less	Hacking Web App Attack
🇫🇷 172.71.232.93	27 Oct 2026	[27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.development" [Cli ... show more [27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.development" [Client 172.71.232.93] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:12 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/.env.development" [Client 172.71.232.93] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:13 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/Dockerfile" [Client 172.71.232.93] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:13 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/Dockerfile" [Client 172.71.232.93] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" [27/Oct/2026:04:18:13 +0000] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/credentials" [Clie ... show less	Hacking Web App Attack