AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User netman joined AbuseIPDB in September 2026 and has reported 5,859 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 35.212.148.226	23 hours ago	HTTP: 35.212.148.226 blocked because of 500 failures ...	Port Scan Web App Attack
🇺🇸 129.121.101.179	23 hours ago	SSH: 129.121.101.179 blocked because of 10 failures ...	Brute-Force SSH
🇮🇳 122.168.197.138	23 hours ago	SSH: 122.168.197.138 blocked because of 10 failures ...	Brute-Force SSH
🇳🇱 195.178.110.232	23 hours ago	SSH: 195.178.110.232 blocked because of 25 failures ...	Brute-Force SSH
🇦🇺 20.211.27.190	23 hours ago	HTTP: 20.211.27.190 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇰🇷 20.196.208.116	23 hours ago	HTTP: 20.196.208.116 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇰🇷 20.200.211.114	23 hours ago	HTTP: 20.200.211.114 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇳🇱 34.34.120.71	23 hours ago	HTTP: 34.34.120.71 blocked because of 500 failures ...	Port Scan Web App Attack
🇱🇹 77.90.185.128	23 hours ago	Oct 13 18:50:12 netserv400 sshd-session[68348]: Connection from 77.90.185.128 port 52306 on 94.102.2 ... show more Oct 13 18:50:12 netserv400 sshd-session[68348]: Connection from 77.90.185.128 port 52306 on 94.102.210.190 port 22 rdomain "" Oct 13 18:50:13 netserv400 sshd-session[68348]: User root from 77.90.185.128 not allowed because none of user's groups are listed in AllowGroups Oct 13 18:50:28 netserv400 sshd-session[68351]: Connection from 77.90.185.128 port 56316 on 94.102.210.190 port 22 rdomain "" Oct 13 18:50:29 netserv400 sshd-session[68351]: User root from 77.90.185.128 not allowed because none of user's groups are listed in AllowGroups Oct 13 18:50:39 netserv400 sshd-session[68354]: Connection from 77.90.185.128 port 36946 on 94.102.210.190 port 22 rdomain "" Oct 13 18:50:39 netserv400 sshd-session[68354]: User root from 77.90.185.128 not allowed because none of user's groups are listed in AllowGroups Oct 13 18:51:23 netserv400 sshd-session[68362]: Connection from 77.90.185.128 port 38122 on 94.102.210.190 port 22 rdomain "" Oct 13 18:51:23 netserv400 sshd-session[68362]: User root fro ... show less	Brute-Force SSH
🇩🇪 34.89.147.128	13 Oct 2026	HTTP: 34.89.147.128 blocked because of 500 failures ...	Port Scan Web App Attack
🇮🇳 45.123.110.70	13 Oct 2026	Oct 13 18:33:42 netserv400 sshd-session[68114]: Connection from 45.123.110.70 port 57652 on 94.102.2 ... show more Oct 13 18:33:42 netserv400 sshd-session[68114]: Connection from 45.123.110.70 port 57652 on 94.102.210.190 port 22 rdomain "" Oct 13 18:33:43 netserv400 sshd-session[68114]: Invalid user redbot from 45.123.110.70 port 57652 Oct 13 18:35:11 netserv400 sshd-session[68200]: Connection from 45.123.110.70 port 29040 on 94.102.210.190 port 22 rdomain "" Oct 13 18:35:12 netserv400 sshd-session[68200]: Invalid user postgres from 45.123.110.70 port 29040 Oct 13 18:36:39 netserv400 sshd-session[68223]: Connection from 45.123.110.70 port 56936 on 94.102.210.190 port 22 rdomain "" Oct 13 18:36:40 netserv400 sshd-session[68223]: User root from 45.123.110.70 not allowed because none of user's groups are listed in AllowGroups Oct 13 18:38:08 netserv400 sshd-session[68232]: Connection from 45.123.110.70 port 28324 on 94.102.210.190 port 22 rdomain "" Oct 13 18:38:09 netserv400 sshd-session[68232]: Invalid user web from 45.123.110.70 port 28324 Oct 13 18:39:38 netserv400 sshd-session[68247]: Connection ... show less	Brute-Force SSH
🇳🇱 212.92.104.210	13 Oct 2026	HTTP: 212.92.104.210 blocked because of 500 failures ...	Port Scan Web App Attack
🇮🇳 20.219.160.77	13 Oct 2026	20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:42 +0000] "GET /wp-content/plugins/hellopress/ ... show more 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:42 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 0 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 158 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:43 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 0 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:43 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 158 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:43 +0000] "GET /nakrip.php HTTP/1.1" 301 0 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:43 +0000] "GET /nakrip.php HTTP/1.1" 404 158 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:44 +0000] "GET /gmo.php HTTP/1.1" 301 0 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2026:18:30:44 +0000] "GET /gmo.php HTTP/1.1" 404 158 "-" "-" 20.219.160.77 netmanagement.mobi - [13/Oct/2 ... show less	DDoS Attack Web App Attack
🇺🇸 35.211.16.152	13 Oct 2026	HTTP: 35.211.16.152 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇯🇵 34.180.67.160	13 Oct 2026	HTTP: 34.180.67.160 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇮🇳 74.225.146.100	13 Oct 2026	HTTP: 74.225.146.100 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇯🇵 34.180.67.160	13 Oct 2026	34.180.67.160 netmanagement.news - [13/Oct/2026:17:43:45 +0000] "GET / HTTP/2.0" 200 257732 "-" "Moz ... show more 34.180.67.160 netmanagement.news - [13/Oct/2026:17:43:45 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.180.67.160 netmanagement.news - [13/Oct/2026:17:43:46 +0000] "GET /robots.txt HTTP/2.0" 200 113 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.180.67.160 netmanagement.news - [13/Oct/2026:17:43:46 +0000] "GET /qysky9aod2myi48cq249 HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.180.67.160 netmanagement.news - [13/Oct/2026:17:43:46 +0000] "GET /dist/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.180.67.160 netmanagement.news - [13/Oct/2026:17:43:46 +0000] "GET /asset-manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7 ... show less	DDoS Attack Web App Attack
🇰🇷 35.216.3.137	13 Oct 2026	HTTP: 35.216.3.137 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇧🇷 35.247.238.63	13 Oct 2026	HTTP: 35.247.238.63 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇸🇬 136.85.97.247	13 Oct 2026	136.85.97.247 au-portal.de - [13/Oct/2026:16:35:19 +0000] "GET / HTTP/2.0" 200 217859 "-" "Mozilla/5 ... show more 136.85.97.247 au-portal.de - [13/Oct/2026:16:35:19 +0000] "GET / HTTP/2.0" 200 217859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 136.85.97.247 au-portal.de - [13/Oct/2026:16:35:20 +0000] "GET /robots.txt HTTP/2.0" 200 113 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 136.85.97.247 au-portal.de - [13/Oct/2026:16:35:20 +0000] "GET /static../.env HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 136.85.97.247 au-portal.de - [13/Oct/2026:16:35:20 +0000] "GET /static/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 136.85.97.247 au-portal.de - [13/Oct/2026:16:35:20 +0000] "GET /z9x8c7v6b5-debug-trigger-au-portal.de HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136. ... show less	DDoS Attack Web App Attack
🇯🇵 124.45.31.113	13 Oct 2026	SSH: 124.45.31.113 blocked because of 10 failures ...	Brute-Force SSH
🇯🇵 35.200.127.138	13 Oct 2026	HTTP: 35.200.127.138 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇵🇪 161.132.37.136	13 Oct 2026	Oct 13 16:25:07 netserv400 sshd-session[66903]: Connection from 161.132.37.136 port 56840 on 94.102. ... show more Oct 13 16:25:07 netserv400 sshd-session[66903]: Connection from 161.132.37.136 port 56840 on 94.102.210.190 port 22 rdomain "" Oct 13 16:25:08 netserv400 sshd-session[66903]: User root from 161.132.37.136 not allowed because none of user's groups are listed in AllowGroups Oct 13 16:26:38 netserv400 sshd-session[66915]: Connection from 161.132.37.136 port 54868 on 94.102.210.190 port 22 rdomain "" Oct 13 16:26:39 netserv400 sshd-session[66915]: Invalid user test from 161.132.37.136 port 54868 Oct 13 16:28:11 netserv400 sshd-session[66927]: Connection from 161.132.37.136 port 60776 on 94.102.210.190 port 22 rdomain "" Oct 13 16:28:12 netserv400 sshd-session[66927]: Invalid user ernawati from 161.132.37.136 port 60776 Oct 13 16:29:41 netserv400 sshd-session[66933]: Connection from 161.132.37.136 port 59006 on 94.102.210.190 port 22 rdomain "" Oct 13 16:29:42 netserv400 sshd-session[66933]: User root from 161.132.37.136 not allowed because none of user's groups are listed in AllowGroups Oc ... show less	Brute-Force SSH
🇰🇷 220.80.223.144	13 Oct 2026	Oct 13 16:24:17 netserv400 sshd-session[66874]: Connection from 220.80.223.144 port 52994 on 94.102. ... show more Oct 13 16:24:17 netserv400 sshd-session[66874]: Connection from 220.80.223.144 port 52994 on 94.102.210.190 port 22 rdomain "" Oct 13 16:24:18 netserv400 sshd-session[66874]: Invalid user laravel from 220.80.223.144 port 52994 Oct 13 16:25:48 netserv400 sshd-session[66908]: Connection from 220.80.223.144 port 45308 on 94.102.210.190 port 22 rdomain "" Oct 13 16:25:50 netserv400 sshd-session[66908]: User root from 220.80.223.144 not allowed because none of user's groups are listed in AllowGroups Oct 13 16:27:19 netserv400 sshd-session[66919]: Connection from 220.80.223.144 port 45722 on 94.102.210.190 port 22 rdomain "" Oct 13 16:27:20 netserv400 sshd-session[66919]: User root from 220.80.223.144 not allowed because none of user's groups are listed in AllowGroups Oct 13 16:28:47 netserv400 sshd-session[66930]: Connection from 220.80.223.144 port 38036 on 94.102.210.190 port 22 rdomain "" Oct 13 16:28:48 netserv400 sshd-session[66930]: Invalid user t128 from 220.80.223.144 port 38036 Oct ... show less	Brute-Force SSH
🇺🇸 107.173.236.243	13 Oct 2026	SSH: 107.173.236.243 blocked because of 10 failures ...	Brute-Force SSH