AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User sajmon0011 , the webmaster of www.sajmon0011.cz, joined AbuseIPDB in September 2021 and has reported 91,056 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 66.132.224.84	14 Sep 2026	66.132.224.84 - - [14/Sep/2026:15:12:34 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇺🇸 20.150.197.177	14 Sep 2026	20.150.197.177 - - [14/Sep/2026:14:20:34 +0200] "MGLNDD_94.242.99.30_80\n" 400 226 "-" "-" ...	Web App Attack
🇸🇬 43.98.202.117	14 Sep 2026	43.98.202.117 - - [14/Sep/2026:14:06:26 +0200] "GET /robots.txt HTTP/1.1" 404 196 "-" "fasthttp" ...	Web App Attack
🇸🇬 194.164.107.6	14 Sep 2026	194.164.107.6 - - [14/Sep/2026:13:06:11 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇸🇬 161.118.255.67	14 Sep 2026	161.118.255.67 - - [14/Sep/2026:12:50:59 +0200] "GET /.env.bak HTTP/1.1" 404 196 "-" "Mozilla/5.0 (W ... show more 161.118.255.67 - - [14/Sep/2026:12:50:59 +0200] "GET /.env.bak HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 65.49.1.192	14 Sep 2026	65.49.1.192 - - [14/Sep/2026:12:22:21 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇫🇮 34.88.116.49	14 Sep 2026	34.88.116.49 - - [14/Sep/2026:12:01:36 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇺🇸 66.132.186.172	14 Sep 2026	66.132.186.172 - - [14/Sep/2026:11:25:46 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇺🇸 20.172.67.58	14 Sep 2026	20.172.67.58 - - [14/Sep/2026:10:43:50 +0200] "GET /autodiscover/autodiscover.json?@zdi/Powershell H ... show more 20.172.67.58 - - [14/Sep/2026:10:43:50 +0200] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 196 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack
🇩🇪 45.135.193.198	14 Sep 2026	45.135.193.198 - - [14/Sep/2026:10:22:05 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇺🇸 47.254.84.155	14 Sep 2026	47.254.84.155 - - [14/Sep/2026:10:09:51 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇺🇸 216.180.246.125	14 Sep 2026	216.180.246.125 - - [14/Sep/2026:07:58:34 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
🇧🇪 34.52.146.37	14 Sep 2026	34.52.146.37 - - [14/Sep/2026:07:52:40 +0200] "GET /.env.local HTTP/2.0" 404 196 "-" "Mozilla/5.0 (W ... show more 34.52.146.37 - - [14/Sep/2026:07:52:40 +0200] "GET /.env.local HTTP/2.0" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 20.81.45.139	14 Sep 2026	20.81.45.139 - - [14/Sep/2026:07:07:43 +0200] "GET /login HTTP/1.1" 404 196 "-" "Mozilla/5.0 zgrab/0 ... show more 20.81.45.139 - - [14/Sep/2026:07:07:43 +0200] "GET /login HTTP/1.1" 404 196 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack
🇺🇸 20.118.210.217	14 Sep 2026	20.118.210.217 - - [14/Sep/2026:06:47:15 +0200] "GET /actuator/health HTTP/1.1" 404 196 "-" "Mozilla ... show more 20.118.210.217 - - [14/Sep/2026:06:47:15 +0200] "GET /actuator/health HTTP/1.1" 404 196 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack
🇺🇸 20.14.75.16	14 Sep 2026	2026-09-14T05:45:23.645570 server1.sajmon0011.cz postfix/smtpd[1833280]: improper command pipelining ... show more 2026-09-14T05:45:23.645570 server1.sajmon0011.cz postfix/smtpd[1833280]: improper command pipelining after CONNECT from unknown[20.14.75.16]: MGLNDD_94.242.99.30_25\n ... show less	DNS Compromise
🇩🇪 51.89.83.60	14 Sep 2026	51.89.83.60 - - [14/Sep/2026:05:37:30 +0200] "GET /robots.txt HTTP/2.0" 404 196 "-" "Mozilla/5.0 (co ... show more 51.89.83.60 - - [14/Sep/2026:05:37:30 +0200] "GET /robots.txt HTTP/2.0" 404 196 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Web App Attack
🇦🇹 159.195.252.190	14 Sep 2026	159.195.252.190 - - [14/Sep/2026:05:22:29 +0200] "GET /api/session/properties HTTP/1.1" 404 196 "-" ... show more 159.195.252.190 - - [14/Sep/2026:05:22:29 +0200] "GET /api/session/properties HTTP/1.1" 404 196 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" ... show less	Web App Attack
🇧🇪 35.205.81.31	14 Sep 2026	35.205.81.31 - - [14/Sep/2026:05:22:16 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env ... show more 35.205.81.31 - - [14/Sep/2026:05:22:16 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/133.0.320.115 Safari/537.36" ... show less	Web App Attack
🇳🇱 213.177.179.109	14 Sep 2026	2026-09-14T05:09:29.005270 server1.sajmon0011.cz auth[1825496]: pam_unix(dovecot:auth): authenticati ... show more 2026-09-14T05:09:29.005270 server1.sajmon0011.cz auth[1825496]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=nonexistent_user_26 rhost=213.177.179.109 ... show less	Brute-Force
🇬🇪 88.218.94.33	14 Sep 2026	88.218.94.33 - - [14/Sep/2026:04:10:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e ... show more 88.218.94.33 - - [14/Sep/2026:04:10:19 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" ... show less	Web App Attack
🇳🇬 165.154.11.140	14 Sep 2026	2026-09-14T04:10:10.116285 server1.sajmon0011.cz postfix/smtpd[1779602]: improper command pipelining ... show more 2026-09-14T04:10:10.116285 server1.sajmon0011.cz postfix/smtpd[1779602]: improper command pipelining after CONNECT from unknown[165.154.11.140]: \026\003\001\000\374\001\000\000\370\003\003\331\021sd\243w\331X\fc\304".\277X\265\033\247\205\211\264\307\355p\365~\177\020\206\327x\243 \025p\227\2709\200\221\230\365\3760\366\r\234\262\227\240\352\212\036V0\253;\237\245\030\350\327{K6\0004\314\250\314\251\300/\3000\300+\300,\300\t\000\236\314\250\314\252\0003 ... show less	DNS Compromise
🇧🇷 187.67.130.17	14 Sep 2026	2026-09-14T04:01:19.474474 server1.sajmon0011.cz postfix/smtpd[1744388]: warning: hostname bb438211. ... show more 2026-09-14T04:01:19.474474 server1.sajmon0011.cz postfix/smtpd[1744388]: warning: hostname bb438211.virtua.com.br does not resolve to address 187.67.130.17: Name or service not known ... show less	DNS Compromise
🇺🇸 192.178.7.33	14 Sep 2026	192.178.7.33 - - [14/Sep/2026:03:05:25 +0200] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (c ... show more 192.178.7.33 - - [14/Sep/2026:03:05:25 +0200] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web App Attack
🇺🇸 4.148.1.24	14 Sep 2026	4.148.1.24 - - [14/Sep/2026:02:56:18 +0200] "GET /developmentserver/metadatauploader HTTP/1.1" 404 1 ... show more 4.148.1.24 - - [14/Sep/2026:02:56:18 +0200] "GET /developmentserver/metadatauploader HTTP/1.1" 404 196 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack