AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User netman joined AbuseIPDB in September 2026 and has reported 8,767 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇿🇦 20.164.214.25	03 Nov 2026	HTTP: 20.164.214.25 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇧🇪 34.52.234.95	03 Nov 2026	HTTP: 34.52.234.95 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇺🇸 74.249.204.86	03 Nov 2026	HTTP: 74.249.204.86 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇵🇱 45.138.12.89	03 Nov 2026	45.138.12.89 certvalidator.com - [03/Nov/2026:15:45:56 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5. ... show more 45.138.12.89 certvalidator.com - [03/Nov/2026:15:45:56 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.89 certvalidator.com - [03/Nov/2026:15:46:00 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.89 certvalidator.com - [03/Nov/2026:15:46:04 +0000] "GET /assets/js/netmanagement.scripts.min.js HTTP/2.0" 200 12927 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.89 certvalidator.com - [03/Nov/2026:15:46:05 +0000] "GET /mailto: HTTP/2.0" 404 158 "https://certvalidator.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.89 certvalidator.com - [03/Nov/2026:15:46:05 +0000] "GET /this.href HTTP/2.0" 404 158 "https://ce ... show less	DDoS Attack Web App Attack
🇺🇸 136.80.165.116	03 Nov 2026	HTTP: 136.80.165.116 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇵🇱 45.138.12.172	03 Nov 2026	45.138.12.172 smartonlinepayment.com - [03/Nov/2026:15:27:26 +0000] "GET / HTTP/2.0" 200 212991 "-" ... show more 45.138.12.172 smartonlinepayment.com - [03/Nov/2026:15:27:26 +0000] "GET / HTTP/2.0" 200 212991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.172 smartonlinepayment.com - [03/Nov/2026:15:27:28 +0000] "GET / HTTP/2.0" 200 217859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.172 smartonlinepayment.com - [03/Nov/2026:15:27:30 +0000] "GET /this.href HTTP/2.0" 404 158 "https://smartonlinepayment.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.172 smartonlinepayment.com - [03/Nov/2026:15:27:31 +0000] "GET /assets/js/netmanagement.scripts.min.js HTTP/2.0" 200 12927 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.172 smartonlinepayment.com - [03/Nov/2026:15:27:31 +0000] "GE ... show less	DDoS Attack Web App Attack
🇧🇪 207.175.165.55	03 Nov 2026	HTTP: 207.175.165.55 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇪🇬 197.134.248.163	03 Nov 2026	Nov 3 15:15:41 netserv400 sshd-session[164243]: Connection from 197.134.248.163 port 39110 on 94.10 ... show more Nov 3 15:15:41 netserv400 sshd-session[164243]: Connection from 197.134.248.163 port 39110 on 94.102.210.190 port 22 rdomain "" Nov 3 15:15:41 netserv400 sshd-session[164243]: User root from 197.134.248.163 not allowed because none of user's groups are listed in AllowGroups Nov 3 15:17:11 netserv400 sshd-session[164256]: Connection from 197.134.248.163 port 35576 on 94.102.210.190 port 22 rdomain "" Nov 3 15:17:12 netserv400 sshd-session[164256]: Invalid user test1 from 197.134.248.163 port 35576 Nov 3 15:18:40 netserv400 sshd-session[164260]: Connection from 197.134.248.163 port 38382 on 94.102.210.190 port 22 rdomain "" Nov 3 15:18:41 netserv400 sshd-session[164260]: Invalid user janus from 197.134.248.163 port 38382 Nov 3 15:20:11 netserv400 sshd-session[164267]: Connection from 197.134.248.163 port 35724 on 94.102.210.190 port 22 rdomain "" Nov 3 15:20:12 netserv400 sshd-session[164267]: Invalid user test from 197.134.248.163 port 35724 Nov 3 15:21:56 netserv400 sshd-sessi ... show less	Brute-Force SSH
🇧🇪 207.175.153.40	03 Nov 2026	HTTP: 207.175.153.40 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇫🇷 185.177.72.69	03 Nov 2026	185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:56 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-d ... show more 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:56 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 301 0 "-" "curl/8.7.1" 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:56 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/2.0" 404 158 "-" "curl/8.7.1" 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:57 +0000] "GET / HTTP/2.0" 200 98127 "-" "curl/8.7.1" 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:57 +0000] "GET /.git/config HTTP/2.0" 404 158 "-" "curl/8.7.1" 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:57 +0000] "GET /backend/.env HTTP/2.0" 404 158 "-" "curl/8.7.1" 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:57 +0000] "GET /%2eenv HTTP/2.0" 404 158 "-" "curl/8.7.1" 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:57 +0000] "GET /%2f%2eenv HTTP/2.0" 404 158 "-" "curl/8.7.1" 185.177.72.69 kyc-portal.de - [03/Nov/2026:14:50:57 +0000] "GET /.env HTTP/2.0" 404 158 "-" "curl/8.7.1" 185.177.72.69 kyc-port ... show less	DDoS Attack Web App Attack
🇺🇸 136.107.179.43	03 Nov 2026	136.107.179.43 smartonlinepayment.net - [03/Nov/2026:14:40:45 +0000] "GET / HTTP/2.0" 200 217859 "-" ... show more 136.107.179.43 smartonlinepayment.net - [03/Nov/2026:14:40:45 +0000] "GET / HTTP/2.0" 200 217859 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" 136.107.179.43 smartonlinepayment.net - [03/Nov/2026:14:40:45 +0000] "GET /robots.txt HTTP/2.0" 200 113 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 136.107.179.43 smartonlinepayment.net - [03/Nov/2026:14:40:45 +0000] "GET /sitemap.xml HTTP/2.0" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 136.107.179.43 smartonlinepayment.net - [03/Nov/2026:14:40:46 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 136.107.179.43 smartonlinepayment.net - [03/Nov/2026:14:40:46 +0000] "GET /bezyenpin2w3xb240ejb HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 136.107 ... show less	DDoS Attack Web App Attack
🇳🇱 34.91.147.23	03 Nov 2026	HTTP: 34.91.147.23 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇧🇪 35.195.245.38	03 Nov 2026	HTTP: 35.195.245.38 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇩🇪 85.155.14.33	03 Nov 2026	85.155.14.33 94.102.208.31 - [03/Nov/2026:14:32:25 +0000] "GET /.aws/credentials HTTP/1.1" 404 158 " ... show more 85.155.14.33 94.102.208.31 - [03/Nov/2026:14:32:25 +0000] "GET /.aws/credentials HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 85.155.14.33 94.102.208.31 - [03/Nov/2026:14:32:25 +0000] "GET /.aws/credentials.bak HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 85.155.14.33 94.102.208.31 - [03/Nov/2026:14:32:25 +0000] "GET /.aws/config.bak HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 85.155.14.33 94.102.208.31 - [03/Nov/2026:14:32:25 +0000] "GET /.s3cfg HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 85.155.14.33 94.102.208.31 - [03/Nov/2026:14:32:25 +0000] "GET /.passwd-s3fs HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) Apple ... show less	DDoS Attack Web App Attack
🇧🇪 35.187.35.191	03 Nov 2026	HTTP: 35.187.35.191 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇯🇵 136.110.109.192	03 Nov 2026	HTTP: 136.110.109.192 blocked because of 500 failures ...	Port Scan Web App Attack
🇿🇦 20.164.210.40	03 Nov 2026	HTTP: 20.164.210.40 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇵🇱 45.138.12.178	03 Nov 2026	HTTP: 45.138.12.178 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇷🇴 193.32.162.84	03 Nov 2026	Nov 3 13:22:11 netserv400 sshd-session[163121]: Connection from 193.32.162.84 port 33530 on 94.102. ... show more Nov 3 13:22:11 netserv400 sshd-session[163121]: Connection from 193.32.162.84 port 33530 on 94.102.210.190 port 22 rdomain "" Nov 3 13:22:12 netserv400 sshd-session[163121]: User root from 193.32.162.84 not allowed because none of user's groups are listed in AllowGroups Nov 3 13:24:19 netserv400 sshd-session[163134]: Connection from 193.32.162.84 port 36282 on 94.102.210.190 port 22 rdomain "" Nov 3 13:24:19 netserv400 sshd-session[163134]: User root from 193.32.162.84 not allowed because none of user's groups are listed in AllowGroups Nov 3 13:26:26 netserv400 sshd-session[163146]: Connection from 193.32.162.84 port 39012 on 94.102.210.190 port 22 rdomain "" Nov 3 13:26:27 netserv400 sshd-session[163146]: User root from 193.32.162.84 not allowed because none of user's groups are listed in AllowGroups Nov 3 13:28:31 netserv400 sshd-session[163154]: Connection from 193.32.162.84 port 41728 on 94.102.210.190 port 22 rdomain "" Nov 3 13:28:31 netserv400 sshd-session[163154]: User ... show less	Brute-Force SSH
🇮🇳 34.47.233.97	03 Nov 2026	HTTP: 34.47.233.97 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇮🇳 34.14.186.234	03 Nov 2026	HTTP: 34.14.186.234 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇳🇱 195.178.110.102	03 Nov 2026	HTTP: 195.178.110.102 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇩🇪 136.92.29.139	03 Nov 2026	HTTP: 136.92.29.139 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇷🇴 2.57.122.238	03 Nov 2026	Nov 3 12:21:13 netserv400 sshd-session[162593]: Connection from 2.57.122.238 port 44092 on 94.102.2 ... show more Nov 3 12:21:13 netserv400 sshd-session[162593]: Connection from 2.57.122.238 port 44092 on 94.102.210.190 port 22 rdomain "" Nov 3 12:21:13 netserv400 sshd-session[162593]: Invalid user raydium from 2.57.122.238 port 44092 Nov 3 12:22:42 netserv400 sshd-session[162599]: Connection from 2.57.122.238 port 51534 on 94.102.210.190 port 22 rdomain "" Nov 3 12:22:42 netserv400 sshd-session[162599]: Invalid user firedancer from 2.57.122.238 port 51534 Nov 3 12:24:14 netserv400 sshd-session[162605]: Connection from 2.57.122.238 port 39512 on 94.102.210.190 port 22 rdomain "" Nov 3 12:24:14 netserv400 sshd-session[162605]: Invalid user node from 2.57.122.238 port 39512 Nov 3 12:25:48 netserv400 sshd-session[162610]: Connection from 2.57.122.238 port 55144 on 94.102.210.190 port 22 rdomain "" Nov 3 12:25:48 netserv400 sshd-session[162610]: Invalid user node from 2.57.122.238 port 55144 Nov 3 12:27:20 netserv400 sshd-session[162617]: Connection from 2.57.122.238 port 45508 on 94.102.210. ... show less	Brute-Force SSH
🇮🇳 103.248.120.6	03 Nov 2026	Nov 3 12:01:24 netserv400 sshd-session[162375]: Connection from 103.248.120.6 port 42124 on 94.102. ... show more Nov 3 12:01:24 netserv400 sshd-session[162375]: Connection from 103.248.120.6 port 42124 on 94.102.210.190 port 22 rdomain "" Nov 3 12:01:25 netserv400 sshd-session[162375]: Invalid user avatar from 103.248.120.6 port 42124 Nov 3 12:07:43 netserv400 sshd-session[162456]: Connection from 103.248.120.6 port 53490 on 94.102.210.190 port 22 rdomain "" Nov 3 12:07:44 netserv400 sshd-session[162456]: User root from 103.248.120.6 not allowed because none of user's groups are listed in AllowGroups Nov 3 12:14:10 netserv400 sshd-session[162498]: Connection from 103.248.120.6 port 38789 on 94.102.210.190 port 22 rdomain "" Nov 3 12:14:11 netserv400 sshd-session[162498]: User root from 103.248.120.6 not allowed because none of user's groups are listed in AllowGroups Nov 3 12:17:38 netserv400 sshd-session[162553]: Connection from 103.248.120.6 port 43198 on 94.102.210.190 port 22 rdomain "" Nov 3 12:17:38 netserv400 sshd-session[162553]: Invalid user gustavo from 103.248.120.6 port 43198 N ... show less	Brute-Force SSH