AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardpot joined AbuseIPDB in March 2026 and has reported 4,200 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇷🇺 45.91.64.7	02 Apr 2026	This IP address has been observed conducting malicious activity across 4,634 events involving 10 dif ... show more This IP address has been observed conducting malicious activity across 4,634 events involving 10 different attack vectors, first seen on 2025-12-23 15:46 UTC and last active on 2026-04-02 08:45 UTC. Observed activity includes: TCP port scanning / network reconnaissance (2,338 events); MySQL database brute-force login attempts (1,899 events); FTP brute-force login attempts (136 events); SMTP abuse: open relay probing or spam relay attempts (81 events); telnet activity detected (46 events); vnc activity detected (33 events); POP3 mailbox access attempts (29 events); MySQL client fingerprinting / detection (24 events); MySQL handshake protocol analysis (24 events); MySQL routing protocol probing (24 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force
🇬🇧 87.236.176.112	02 Apr 2026	This IP address has been observed conducting malicious activity across 197 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 197 events involving 7 different attack vectors, first seen on 2024-04-04 13:32 UTC and last active on 2026-04-02 08:25 UTC. Observed activity includes: TCP port scanning / network reconnaissance (82 events); SMTP abuse: open relay probing or spam relay attempts (71 events); Modbus industrial control system (ICS/SCADA) protocol scanning (26 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (8 events); Unauthorized FTP file transfer commands (8 events); ldap brute-force login attempts (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking IoT Targeted
🇬🇧 87.236.176.131	02 Apr 2026	This IP address has been observed conducting malicious activity across 269 events involving 6 differ ... show more This IP address has been observed conducting malicious activity across 269 events involving 6 different attack vectors, first seen on 2024-03-08 16:23 UTC and last active on 2026-04-02 08:16 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (137 events); TCP port scanning / network reconnaissance (89 events); Modbus industrial control system (ICS/SCADA) protocol scanning (29 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (12 events); MySQL database brute-force login attempts (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 87.236.176.235	02 Apr 2026	This IP address has been observed conducting malicious activity across 242 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 242 events involving 8 different attack vectors, first seen on 2024-03-19 11:19 UTC and last active on 2026-04-02 08:24 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (127 events); TCP port scanning / network reconnaissance (81 events); Modbus industrial control system (ICS/SCADA) protocol scanning (21 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (5 events); Unauthorized FTP file transfer commands (4 events); telnet activity detected (2 events); ldap brute-force login attempts (1 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 87.236.176.236	02 Apr 2026	This IP address has been observed conducting malicious activity across 330 events involving 9 differ ... show more This IP address has been observed conducting malicious activity across 330 events involving 9 different attack vectors, first seen on 2024-03-04 20:35 UTC and last active on 2026-04-02 08:26 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (157 events); TCP port scanning / network reconnaissance (100 events); Modbus industrial control system (ICS/SCADA) protocol scanning (36 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (22 events); Unauthorized FTP file transfer commands (8 events); MySQL database brute-force login attempts (3 events); POP3 mailbox access attempts (2 events); ldap brute-force login attempts (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇫🇷 91.196.152.59	02 Apr 2026	This IP address has been observed conducting malicious activity across 156 events involving 9 differ ... show more This IP address has been observed conducting malicious activity across 156 events involving 9 different attack vectors, first seen on 2025-02-21 16:33 UTC and last active on 2026-04-02 08:24 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (80 events); TCP port scanning / network reconnaissance (49 events); MySQL database brute-force login attempts (8 events); IMAP mailbox access attempts (credential stuffing) (7 events); Unauthorized FTP file transfer commands (4 events); telnet activity detected (4 events); vnc activity detected (2 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events); Microsoft SQL Server brute-force login attempts (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇷🇺 95.79.108.51	02 Apr 2026	This IP address has been observed conducting malicious activity across 123 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 123 events involving 2 different attack vectors, first seen on 2024-04-29 20:18 UTC and last active on 2026-04-02 08:47 UTC. Observed activity includes: SSH brute-force login attempts (113 events); ssh-fortinet brute-force login attempts (10 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇨🇳 106.117.110.224	02 Apr 2026	This IP address has been observed conducting malicious activity across 3 events involving 2 differen ... show more This IP address has been observed conducting malicious activity across 3 events involving 2 different attack vectors, first seen on 2026-04-02 08:33 UTC and last active on 2026-04-02 08:33 UTC. Observed activity includes: Telnet brute-force login attempts (often targeting IoT devices) (2 events); telnet activity detected (1 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇨🇳 116.178.130.220	02 Apr 2026	This IP address has been observed conducting malicious activity across 3 events involving 2 differen ... show more This IP address has been observed conducting malicious activity across 3 events involving 2 different attack vectors, first seen on 2026-04-02 08:33 UTC and last active on 2026-04-02 08:33 UTC. Observed activity includes: Telnet brute-force login attempts (often targeting IoT devices) (2 events); telnet activity detected (1 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇻🇳 117.2.123.19	02 Apr 2026	This IP address has been observed conducting malicious activity across 137 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 137 events involving 2 different attack vectors, first seen on 2024-04-02 06:09 UTC and last active on 2026-04-02 08:42 UTC. Observed activity includes: SSH brute-force login attempts (131 events); ssh-fortinet brute-force login attempts (6 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇨🇳 117.159.174.136	02 Apr 2026	This IP address has been observed conducting malicious activity across 86 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 86 events involving 2 different attack vectors, first seen on 2024-07-04 09:44 UTC and last active on 2026-04-02 08:46 UTC. Observed activity includes: SSH brute-force login attempts (83 events); ssh-fortinet brute-force login attempts (3 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 135.233.112.102	02 Apr 2026	This IP address has been observed conducting malicious activity across 50 events involving 5 differe ... show more This IP address has been observed conducting malicious activity across 50 events involving 5 different attack vectors, first seen on 2025-05-19 18:10 UTC and last active on 2026-04-02 08:26 UTC. Observed activity includes: TCP port scanning / network reconnaissance (40 events); MySQL database brute-force login attempts (4 events); telnet activity detected (4 events); Unauthorized FTP file transfer commands (1 events); POP3 mailbox access attempts (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force
🇺🇸 156.47.147.217	02 Apr 2026	This IP address has been observed conducting malicious activity across 21 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 21 events involving 2 different attack vectors, first seen on 2026-03-23 14:22 UTC and last active on 2026-04-02 08:17 UTC. Observed activity includes: SSH brute-force login attempts (19 events); telnet activity detected (2 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇩🇪 172.217.33.144	02 Apr 2026	This IP address has been observed conducting malicious activity across 101 events involving 1 differ ... show more This IP address has been observed conducting malicious activity across 101 events involving 1 different attack vectors, first seen on 2024-10-05 15:19 UTC and last active on 2026-04-02 08:18 UTC. Observed activity includes: DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (101 events). Reported by Guardpot. show less	DNS Compromise
🇩🇪 172.217.33.210	02 Apr 2026	This IP address has been observed conducting malicious activity across 92 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 92 events involving 1 different attack vectors, first seen on 2024-10-04 10:43 UTC and last active on 2026-04-02 07:46 UTC. Observed activity includes: DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (92 events). Reported by Guardpot. show less	DNS Compromise
🇬🇧 185.247.137.132	02 Apr 2026	This IP address has been observed conducting malicious activity across 227 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 227 events involving 8 different attack vectors, first seen on 2024-12-11 03:52 UTC and last active on 2026-04-02 08:22 UTC. Observed activity includes: TCP port scanning / network reconnaissance (82 events); SMTP abuse: open relay probing or spam relay attempts (74 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (25 events); Unauthorized FTP file transfer commands (20 events); Modbus industrial control system (ICS/SCADA) protocol scanning (17 events); MySQL database brute-force login attempts (5 events); ldap brute-force login attempts (2 events); POP3 mailbox access attempts (2 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 185.247.137.145	02 Apr 2026	This IP address has been observed conducting malicious activity across 263 events involving 6 differ ... show more This IP address has been observed conducting malicious activity across 263 events involving 6 different attack vectors, first seen on 2024-12-10 18:52 UTC and last active on 2026-04-02 08:20 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (131 events); TCP port scanning / network reconnaissance (79 events); Modbus industrial control system (ICS/SCADA) protocol scanning (32 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (19 events); MySQL database brute-force login attempts (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇿 213.230.65.53	02 Apr 2026	This IP address has been observed conducting malicious activity across 110 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 110 events involving 2 different attack vectors, first seen on 2024-04-19 02:15 UTC and last active on 2026-04-02 08:34 UTC. Observed activity includes: SSH brute-force login attempts (107 events); ssh-fortinet brute-force login attempts (3 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇧🇪 34.76.35.74	02 Apr 2026	This IP address has been observed conducting malicious activity across 113 events involving 4 differ ... show more This IP address has been observed conducting malicious activity across 113 events involving 4 different attack vectors, first seen on 2026-03-07 19:27 UTC and last active on 2026-04-02 08:39 UTC. Observed activity includes: TCP port scanning / network reconnaissance (62 events); MySQL database brute-force login attempts (38 events); FTP brute-force login attempts (12 events); SSH brute-force login attempts (1 events). Reported by Guardpot. show less	FTP Brute-Force Port Scan Brute-Force SSH
🇲🇲 42.156.32.106	02 Apr 2026	This IP address has been observed conducting malicious activity across 10,528 events involving 5 dif ... show more This IP address has been observed conducting malicious activity across 10,528 events involving 5 different attack vectors, first seen on 2026-02-13 12:34 UTC and last active on 2026-04-02 08:28 UTC. Observed activity includes: MySQL database brute-force login attempts (2,993 events); TCP port scanning / network reconnaissance (2,993 events); MySQL client fingerprinting / detection (1,514 events); MySQL handshake protocol analysis (1,514 events); MySQL routing protocol probing (1,514 events). Reported by Guardpot. show less	Port Scan Hacking Brute-Force
🇨🇳 49.7.235.5	02 Apr 2026	This IP address has been observed conducting malicious activity across 857 events involving 1 differ ... show more This IP address has been observed conducting malicious activity across 857 events involving 1 different attack vectors, first seen on 2026-03-02 12:29 UTC and last active on 2026-04-02 08:26 UTC. Observed activity includes: SSH brute-force login attempts (857 events). Reported by Guardpot. show less	Brute-Force SSH
🇨🇳 58.245.210.70	02 Apr 2026	This IP address has been observed conducting malicious activity across 77 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 77 events involving 2 different attack vectors, first seen on 2025-01-05 12:41 UTC and last active on 2026-04-02 08:35 UTC. Observed activity includes: SSH brute-force login attempts (71 events); ssh-fortinet brute-force login attempts (6 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 66.132.172.102	02 Apr 2026	This IP address has been observed conducting malicious activity across 88 events involving 7 differe ... show more This IP address has been observed conducting malicious activity across 88 events involving 7 different attack vectors, first seen on 2026-03-25 08:38 UTC and last active on 2026-04-02 07:41 UTC. Observed activity includes: TCP port scanning / network reconnaissance (36 events); ftp activity detected (25 events); SMTP abuse: open relay probing or spam relay attempts (11 events); telnet activity detected (11 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); Telnet brute-force login attempts (often targeting IoT devices) (2 events); vnc activity detected (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 66.132.172.180	02 Apr 2026	This IP address has been observed conducting malicious activity across 139 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 139 events involving 8 different attack vectors, first seen on 2026-03-27 14:33 UTC and last active on 2026-04-02 08:37 UTC. Observed activity includes: TCP port scanning / network reconnaissance (50 events); ftp activity detected (40 events); telnet activity detected (22 events); SMTP abuse: open relay probing or spam relay attempts (16 events); Telnet brute-force login attempts (often targeting IoT devices) (5 events); vnc activity detected (3 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (2 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇫🇷 85.217.140.9	02 Apr 2026	This IP address has been observed conducting malicious activity across 74 events involving 9 differe ... show more This IP address has been observed conducting malicious activity across 74 events involving 9 different attack vectors, first seen on 2025-12-19 06:24 UTC and last active on 2026-04-02 08:42 UTC. Observed activity includes: TCP port scanning / network reconnaissance (31 events); SMTP abuse: open relay probing or spam relay attempts (12 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (10 events); POP3 mailbox access attempts (6 events); vnc activity detected (6 events); Modbus industrial control system (ICS/SCADA) protocol scanning (3 events); ftp activity detected (2 events); MySQL database brute-force login attempts (2 events); telnet activity detected (2 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force IoT Targeted