AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User BlockingDefender joined AbuseIPDB in August 2025 and has reported 85 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇱 172.211.123.250	15 Feb 2026	During the review of active network connections, the external connection to 172.211.123.250:443 (HTT ... show more During the review of active network connections, the external connection to 172.211.123.250:443 (HTTPS) was investigated, as it initially appeared unusual. The connection was clearly mapped to the process svchost.exe with PID 4876. Further inspection of the services running under this svchost instance confirmed that the responsible service is: WpnService (Windows Push Notifications Service) This is a legitimate built-in Microsoft Windows system service responsible for push notifications and background communication (e.g. Windows notifications, Microsoft Store apps, system status updates). The IP address 172.211.123.250 belongs to a Microsoft Azure range, and the traffic is using the standard encrypted HTTPS port 443. Conclusion: This is legitimate Windows system traffic. There is no evidence of compromise, hacking activity, or unauthorized access. show less	Bad Web Bot
🇺🇸 64.29.17.67	14 Feb 2026	IPS Suricata Blocking	Exploited Host
🇩🇪 87.106.78.246	11 Feb 2026	Blocked Domain: tsv1860shop.de	Hacking
🇫🇷 46.105.222.161	10 Feb 2026	OPNsense firewall blocked repeated outbound connection attempts from internal host 192.168.13.10 to ... show more OPNsense firewall blocked repeated outbound connection attempts from internal host 192.168.13.10 to 46.105.222.161:443 (TCP). Multiple attempts within seconds using varying source ports. Destination appears to be OVH-hosted server. Suspected malware/C2 behavior. show less	Hacking
🇺🇸 150.171.22.17	04 Feb 2026	Prozess: msedgewebview2.exe Pfad: C:\Program Files (x86)\Microsoft\EdgeWebView\... Status: SYN ... show more Prozess: msedgewebview2.exe Pfad: C:\Program Files (x86)\Microsoft\EdgeWebView\... Status: SYN_SENT (geblockt) Port: 443 show less	IoT Targeted
🇺🇸 162.247.243.29	30 Jan 2026	Block IPS Port 1408	Hacking
🇳🇱 172.211.123.250	25 Jan 2026	Hacker	Hacking Brute-Force Exploited Host
🇳🇱 172.211.123.249	10 Jan 2026	Analysis conclusion – no compromise After a detailed local forensic analysis, this connection was ... show more Analysis conclusion – no compromise After a detailed local forensic analysis, this connection was confirmed to be legitimate and not the result of a system compromise. The outbound HTTPS connection to 172.211.123.249:443 originated from svchost.exe running the Windows Push Notifications System Service (WpnService), an official Microsoft Windows service. Key findings: No beaconing or periodic traffic observed No persistence mechanisms detected No malicious or injected memory modules No DNS-based C2 behavior Single, non-recurring outbound connection System verified clean via full forensic scan Conclusion: This system is not hacked or infected. The connection was legitimate system activity. Any negative reputation of the IP is unrelated to compromise on this host. show less	Exploited Host
🇫🇷 45.43.142.101	06 Jan 2026	C2	Hacking
🇩🇪 188.245.175.34	06 Jan 2026	Hacking	Hacking
🇺🇸 34.148.222.171	04 Jan 2026	Hacking	Hacking
🇷🇺 91.235.88.109	04 Jan 2026	Hacking	Hacking
🇷🇺 188.17.44.96	04 Jan 2026	Hacking	Hacking
🇺🇸 3.208.235.206	02 Jan 2026	ultiple parallel connection attempts (~20) Port 9000	Hacking Exploited Host
🇩🇪 185.111.111.159	02 Jan 2026	C2	Hacking
🇺🇸 103.224.182.251	02 Jan 2026	Hacking 2026	Hacking
🇺🇸 34.205.236.217	02 Jan 2026	Exploit	Hacking
🇺🇸 54.159.153.254	02 Jan 2026	Exploit	Hacking
🇺🇸 52.123.129.14	02 Jan 2026	Exploit	Hacking
🇺🇸 52.85.188.173	02 Jan 2026	Exploit	Hacking
🇩🇪 34.159.193.21	02 Jan 2026	Exploit	Hacking
🇩🇪 138.199.36.10	02 Jan 2026	Exploit	Hacking
🇺🇸 34.205.243.147	02 Jan 2026	Exploit	Hacking
🇺🇸 18.32.146.2	02 Jan 2026	Exploit!!!!!!!!!!!!!!	Hacking Exploited Host
🇩🇪 185.111.111.154	02 Jan 2026	C2 Trojaner 185.1111.1111.154 - 185.111.111.158	Hacking Exploited Host