AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Prepaid-Host.com , the webmaster of prepaid-host.com, joined AbuseIPDB in July 2020 and has reported 238,224 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇧🇪 34.14.117.64	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 05:25 UTC	Brute-Force SSH
🇺🇸 35.188.172.90	22 Oct 2026	Spam: 1 message(s) rejected by our mail server (spam score 20.3), last 2026-10-22 05:13 UTC	Email Spam
🇺🇸 136.86.128.231	22 Oct 2026	Spam: 1 message(s) rejected by our mail server (spam score 30.2), last 2026-10-22 05:10 UTC	Email Spam
🇫🇷 5.135.245.107	22 Oct 2026	Spam: 1 message(s) rejected by our mail server (spam score 22.4), last 2026-10-22 05:15 UTC	Email Spam
🇺🇸 34.139.22.121	22 Oct 2026	Spam: 2 message(s) rejected by our mail server (spam score 28.8), last 2026-10-22 05:13 UTC	Email Spam
🇺🇸 34.127.106.223	22 Oct 2026	Spam: 1 message(s) rejected by our mail server (spam score 31.8), last 2026-10-22 05:17 UTC	Email Spam
🇹🇼 35.201.170.32	22 Oct 2026	Spam: 1 message(s) rejected by our mail server (spam score 35.8), last 2026-10-22 05:17 UTC	Email Spam
🇸🇬 168.144.143.237	22 Oct 2026	Web Exploit: 2 event(s), last 2026-10-22 05:18 UTC 168.144.143.237 - - [22/Oct/2026:07:18:27 +0200] ... show more Web Exploit: 2 event(s), last 2026-10-22 05:18 UTC 168.144.143.237 - - [22/Oct/2026:07:18:27 +0200] "POST /wp-login.php HTTP/1.1" 200 14959 "https://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 168.144.143.237 - - [22/Oct/2026:07:18:27 +0200] "POST /wp-login.php HTTP/1.1" 200 14951 "https://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 168.144.143.237 - - [22/Oct/2026:07:18:28 +0200] "POST /wp-login.php HTTP/1.1" 200 14929 "https://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 34.185.97.184	22 Oct 2026	Spam: 2 message(s) rejected by our mail server (spam score 25.3), last 2026-10-22 05:09 UTC	Email Spam
🇺🇸 136.67.71.83	22 Oct 2026	Spam: 1 message(s) rejected by our mail server (spam score 25.3), last 2026-10-22 05:08 UTC	Email Spam
🇨🇳 14.155.1.67	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 05:10 UTC 2026-10-22T07:10:07.530552+02:00 [host] sshd[8 ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 05:10 UTC 2026-10-22T07:10:07.530552+02:00 [host] sshd[803524]: Invalid user delphi from 14.155.1.67 port 31134 2026-10-22T07:10:07.796733+02:00 [host] sshd[803524]: Received disconnect from 14.155.1.67 port 31134:11: Bye Bye [preauth] 2026-10-22T07:10:07.796924+02:00 [host] sshd[803524]: Disconnected from invalid user delphi 14.155.1.67 port 31134 [preauth] show less	Brute-Force SSH
🇰🇷 116.123.150.231	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 04:59 UTC 2026-10-22T06:59:40.006013+02:00 [host] sshd[7 ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 04:59 UTC 2026-10-22T06:59:40.006013+02:00 [host] sshd[799551]: Invalid user ubuntu from 116.123.150.231 port 55809 2026-10-22T06:59:40.265566+02:00 [host] sshd[799551]: Received disconnect from 116.123.150.231 port 55809:11: Bye Bye [preauth] 2026-10-22T06:59:40.265816+02:00 [host] sshd[799551]: Disconnected from invalid user ubuntu 116.123.150.231 port 55809 [preauth] show less	Brute-Force SSH
🇸🇬 152.42.187.193	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 04:42 UTC 152.42.187.193 - - [22/Oct/2026:06:41:24 +0200 ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 04:42 UTC 152.42.187.193 - - [22/Oct/2026:06:41:24 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%[domain]%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/1.1" 200 3770 "https://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 152.42.187.193 - - [22/Oct/2026:06:41:40 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%[domain]%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 404 25 "https://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20 152.42.187.193 - - [22/Oct/2026:06:41:49 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%[domain]%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/1.1" 200 3767 "https://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win6 show less	Brute-Force SSH
🇦🇺 20.53.249.197	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 04:46 UTC 20.53.249.197 - - [22/Oct/2026:06:46:14 +0200] ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 04:46 UTC 20.53.249.197 - - [22/Oct/2026:06:46:14 +0200] "GET /randkeyword.PhP7 HTTP/1.1" 404 60534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 731 61689 20.53.249.197 - - [22/Oct/2026:06:46:15 +0200] "GET /ws.php HTTP/1.1" 404 60534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 721 61689 20.53.249.197 - - [22/Oct/2026:06:46:15 +0200] "GET /404.php HTTP/1.1" 404 60534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 722 61689 show less	Brute-Force SSH
🇺🇸 129.146.23.7	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 04:35 UTC 129.146.23.7 - - [22/Oct/2026:06:35:29 +0200] ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 04:35 UTC 129.146.23.7 - - [22/Oct/2026:06:35:29 +0200] "GET /wp-includes/header.php HTTP/2.0" 404 7786 "https://[site]/wp-includes/header.php" "Go-http-client/2.0" 77 7839 129.146.23.7 - - [22/Oct/2026:06:35:30 +0200] "GET /wp-includes/block-bindings/system_core.php HTTP/2.0" 404 7826 "https://[site]/wp-includes/block-bindings/system_core.php" "Go-http-client/2.0" 105 7879 129.146.23.7 - - [22/Oct/2026:06:35:31 +0200] "GET /system_core.php HTTP/2.0" 404 7772 "https://[site]/system_core.php" "Go-http-client/2.0" 67 7825 show less	Brute-Force SSH
🇰🇷 20.194.0.112	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 04:22 UTC 20.194.0.112 - - [22/Oct/2026:06:22:49 +0200] ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 04:22 UTC 20.194.0.112 - - [22/Oct/2026:06:22:49 +0200] "GET /hinfofuns.php HTTP/1.1" 404 60534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 728 61689 20.194.0.112 - - [22/Oct/2026:06:22:49 +0200] "GET /hinfofuns.php HTTP/1.1" 404 60534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 728 61689 20.194.0.112 - - [22/Oct/2026:06:22:49 +0200] "GET /home.php HTTP/1.1" 404 60534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 723 61689 show less	Brute-Force SSH
🇨🇭 179.43.153.2	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 04:27 UTC 2026-10-22T06:25:41.934534+02:00 [host] sshd[7 ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 04:27 UTC 2026-10-22T06:25:41.934534+02:00 [host] sshd[786690]: Connection closed by invalid user ubuntu 179.43.153.2 port 59590 [preauth] 2026-10-22T06:27:47.377248+02:00 [host] sshd[787780]: Invalid user ethereum from 179.43.153.2 port 40782 2026-10-22T06:27:47.390523+02:00 [host] sshd[787780]: Connection closed by invalid user ethereum 179.43.153.2 port 40782 [preauth] show less	Brute-Force SSH
🇯🇵 158.179.191.73	22 Oct 2026	Web Exploit: 2 event(s), last 2026-10-22 04:17 UTC 158.179.191.73 - - [20/Oct/2026:17:02:31 +0200] " ... show more Web Exploit: 2 event(s), last 2026-10-22 04:17 UTC 158.179.191.73 - - [20/Oct/2026:17:02:31 +0200] "POST /wp-login.php HTTP/1.1" 503 18287 "-" "Mozilla/5.0" 158.179.191.73 - - [20/Oct/2026:17:02:31 +0200] "GET /wp-login.php HTTP/1.1" 503 18287 "-" "Mozilla/5.0" 158.179.191. show less	Brute-Force Web App Attack
🇬🇧 159.65.50.251	22 Oct 2026	Web Exploit: 1 event(s), last 2026-10-22 04:05 UTC 159.65.50.251 - - [22/Oct/2026:06:04:11 +0200] "P ... show more Web Exploit: 1 event(s), last 2026-10-22 04:05 UTC 159.65.50.251 - - [22/Oct/2026:06:04:11 +0200] "POST /wp-login.php HTTP/1.1" 200 32992 "-" "Mozilla/5.0" 159.65.50.251 - - [22/Oct/2026:06:04:54 +0200] "POST /wp-login.php HTTP/1.1" 200 32992 "-" "Mozilla/5.0" 159.65.50.251 - - [22/Oct/2026:05:41:20 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" show less	Brute-Force Web App Attack
🇭🇰 34.92.143.82	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 04:05 UTC 34.92.143.82 - - [22/Oct/2026:06:05:20 +0200] ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 04:05 UTC 34.92.143.82 - - [22/Oct/2026:06:05:20 +0200] "GET /.[domain] HTTP/1.1" 403 9 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 347 456 34.92.143.82 - - [22/Oct/2026:06:05:21 +0200] "GET /.[domain] HTTP/1.1" 403 9 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 351 456 34.92.143.82 - - [22/Oct/2026:06:05:21 +0200] "GET /.[domain] HTTP/1.1" 403 9 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36" 349 456 show less	Brute-Force SSH
🇦🇪 84.235.249.123	22 Oct 2026	Web Exploit: 1 event(s), last 2026-10-22 03:24 UTC 84.235.249.123 - - [20/Oct/2026:08:54:29 +0200] " ... show more Web Exploit: 1 event(s), last 2026-10-22 03:24 UTC 84.235.249.123 - - [20/Oct/2026:08:54:29 +0200] "POST /wp-login.php HTTP/1.1" 503 24138 "-" "Mozilla/5.0" 84.235.249.123 - - [20/Oct/2026:08:54:30 +0200] "GET /wp-login.php HTTP/1.1" 503 24138 "-" "Mozilla/5.0" 84.235.249.123 - - [20/Oct/2026:08:54:30 +0200] "POST /wp-login.php HTTP/1.1" 503 24138 "-" "Mozilla/5.0" show less	Brute-Force Web App Attack
🇷🇴 92.118.39.148	22 Oct 2026	Login Bruteforce: 1 event(s), last 2026-10-22 02:49 UTC	Brute-Force
🇫🇷 169.58.121.124	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 02:32 UTC 2026-10-22T04:32:15.723412+02:00 [host] sshd[7 ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 02:32 UTC 2026-10-22T04:32:15.723412+02:00 [host] sshd[744721]: Invalid user deploy from 169.58.121.124 port 44744 2026-10-22T04:32:15.734576+02:00 [host] sshd[744721]: Received disconnect from 169.58.121.124 port 44744:11: Bye Bye [preauth] 2026-10-22T04:32:15.735222+02:00 [host] sshd[744721]: Disconnected from invalid user deploy 169.58.121.124 port 44744 [preauth] show less	Brute-Force SSH
🇰🇷 211.253.37.225	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 02:33 UTC 2026-10-22T04:33:57.644802+02:00 [host] sshd[7 ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 02:33 UTC 2026-10-22T04:33:57.644802+02:00 [host] sshd[745313]: Invalid user admin from 211.253.37.225 port 43062 2026-10-22T04:33:57.922177+02:00 [host] sshd[745313]: Received disconnect from 211.253.37.225 port 43062:11: Bye Bye [preauth] 2026-10-22T04:33:57.922634+02:00 [host] sshd[745313]: Disconnected from invalid user admin 211.253.37.225 port 43062 [preauth] show less	Brute-Force SSH
🇩🇪 93.152.221.20	22 Oct 2026	SSH Bruteforce: 1 event(s), last 2026-10-22 02:25 UTC 93.152.221.20 - - [22/Oct/2026:04:25:41 +0200] ... show more SSH Bruteforce: 1 event(s), last 2026-10-22 02:25 UTC 93.152.221.20 - - [22/Oct/2026:04:25:41 +0200] "GET /phpinfo/info.php HTTP/1.1" 404 7774 "https://[site]/phpinfo/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[ip] Safari/537.36 Edg/[ip]" 93.152.221.20 - - [22/Oct/2026:04:25:41 +0200] "GET /server_info.php HTTP/1.1" 404 7772 "https://[site]/server_info.php" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 1042 13800 93.152.221.20 - - [22/Oct/2026:04:25:40 +0200] "GET show less	Brute-Force SSH