AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User BlockingDefender joined AbuseIPDB in August 2025 and has reported 103 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 151.101.2.137	06 Jul 2026	PID 15948 brave.exe?	Bad Web Bot
🇩🇪 23.55.163.22	24 Jun 2026	Detect aggressive portscans	Brute-Force
🇳🇱 85.121.54.197	25 May 2026	C2	Hacking
🇳🇱 178.62.202.229	16 May 2026		Hacking
🇬🇷 62.74.30.179	15 May 2026		Hacking
🇩🇪 82.165.229.12	09 Apr 2026		Hacking
🇺🇸 50.17.226.62	07 Apr 2026	Repeated connection attempts observed in firewall logs. Source IP initiated multiple outbound HTTPS ... show more Repeated connection attempts observed in firewall logs. Source IP initiated multiple outbound HTTPS connections (port 443) within a short time frame. Traffic pattern consistent with automated scanning or bot activity. Detected via honeypot and firewall monitoring. show less	Exploited Host Hacking
🇩🇪 3.171.214.3	07 Apr 2026		Port Scan Hacking
🇺🇸 52.182.143.211	03 Mar 2026	WORD Exploit	Exploited Host
🇩🇪 40.126.62.97	01 Mar 2026	firewall-block, port(s): 34040/tcp	Exploited Host Hacking
🇳🇱 172.211.123.248	23 Feb 2026	Drop Exploit	Exploited Host Hacking
🇳🇱 172.211.123.249	23 Feb 2026	drop	Exploited Host Hacking
🇩🇪 46.4.33.26	22 Feb 2026	Holzhacker	Hacking
🇧🇬 212.39.80.61	22 Feb 2026	Exploit	Hacking
🇦🇲 5.101.37.37	21 Feb 2026		Hacking
🇺🇸 13.89.178.27	21 Feb 2026		Exploited Host Hacking
🇷🇺 88.212.202.52	15 Feb 2026	Q-Feeds Block	Hacking
🇳🇱 172.211.123.250	15 Feb 2026	During the review of active network connections, the external connection to 172.211.123.250:443 (HTT ... show more During the review of active network connections, the external connection to 172.211.123.250:443 (HTTPS) was investigated, as it initially appeared unusual. The connection was clearly mapped to the process svchost.exe with PID 4876. Further inspection of the services running under this svchost instance confirmed that the responsible service is: WpnService (Windows Push Notifications Service) This is a legitimate built-in Microsoft Windows system service responsible for push notifications and background communication (e.g. Windows notifications, Microsoft Store apps, system status updates). The IP address 172.211.123.250 belongs to a Microsoft Azure range, and the traffic is using the standard encrypted HTTPS port 443. Conclusion: This is legitimate Windows system traffic. There is no evidence of compromise, hacking activity, or unauthorized access. show less	Bad Web Bot
🇺🇸 64.29.17.67	14 Feb 2026	IPS Suricata Blocking	Exploited Host
🇩🇪 87.106.78.246	11 Feb 2026	Blocked Domain: tsv1860shop.de	Hacking
🇫🇷 46.105.222.161	10 Feb 2026	OPNsense firewall blocked repeated outbound connection attempts from internal host 192.168.13.10 to ... show more OPNsense firewall blocked repeated outbound connection attempts from internal host 192.168.13.10 to 46.105.222.161:443 (TCP). Multiple attempts within seconds using varying source ports. Destination appears to be OVH-hosted server. Suspected malware/C2 behavior. show less	Hacking
🇺🇸 150.171.22.17	04 Feb 2026	Prozess: msedgewebview2.exe Pfad: C:\Program Files (x86)\Microsoft\EdgeWebView\... Status: SYN ... show more Prozess: msedgewebview2.exe Pfad: C:\Program Files (x86)\Microsoft\EdgeWebView\... Status: SYN_SENT (geblockt) Port: 443 show less	IoT Targeted
🇺🇸 162.247.243.29	30 Jan 2026	Block IPS Port 1408	Hacking
🇳🇱 172.211.123.250	25 Jan 2026	Hacker	Hacking Brute-Force Exploited Host
🇳🇱 172.211.123.249	10 Jan 2026	Analysis conclusion – no compromise After a detailed local forensic analysis, this connection was ... show more Analysis conclusion – no compromise After a detailed local forensic analysis, this connection was confirmed to be legitimate and not the result of a system compromise. The outbound HTTPS connection to 172.211.123.249:443 originated from svchost.exe running the Windows Push Notifications System Service (WpnService), an official Microsoft Windows service. Key findings: No beaconing or periodic traffic observed No persistence mechanisms detected No malicious or injected memory modules No DNS-based C2 behavior Single, non-recurring outbound connection System verified clean via full forensic scan Conclusion: This system is not hacked or infected. The connection was legitimate system activity. Any negative reputation of the IP is unrelated to compromise on this host. show less	Exploited Host