AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardpot joined AbuseIPDB in March 2026 and has reported 4,200 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇬🇧 87.236.176.140	02 Apr 2026	This IP address has been observed conducting malicious activity across 216 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 216 events involving 7 different attack vectors, first seen on 2024-03-03 09:54 UTC and last active on 2026-04-02 08:26 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (94 events); TCP port scanning / network reconnaissance (83 events); Modbus industrial control system (ICS/SCADA) protocol scanning (28 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (4 events); Unauthorized FTP file transfer commands (4 events); POP3 mailbox access attempts (2 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇨🇴 181.129.31.42	02 Apr 2026	This IP address has been observed conducting malicious activity across 149 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 149 events involving 2 different attack vectors, first seen on 2025-01-05 02:11 UTC and last active on 2026-04-02 08:22 UTC. Observed activity includes: SSH brute-force login attempts (144 events); ssh-fortinet brute-force login attempts (5 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇰🇷 146.56.182.39	02 Apr 2026	This IP address has been observed conducting malicious activity across 66 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 66 events involving 1 different attack vectors, first seen on 2026-03-14 07:02 UTC and last active on 2026-04-02 08:23 UTC. Observed activity includes: SSH brute-force login attempts (66 events). Reported by Guardpot. show less	Brute-Force SSH
🇨🇳 218.58.12.2	02 Apr 2026	This IP address has been observed conducting malicious activity across 2 events involving 2 differen ... show more This IP address has been observed conducting malicious activity across 2 events involving 2 different attack vectors, first seen on 2026-04-02 08:33 UTC and last active on 2026-04-02 08:33 UTC. Observed activity includes: telnet activity detected (1 events); Telnet brute-force login attempts (often targeting IoT devices) (1 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇫🇷 91.196.152.227	02 Apr 2026	This IP address has been observed conducting malicious activity across 116 events involving 11 diffe ... show more This IP address has been observed conducting malicious activity across 116 events involving 11 different attack vectors, first seen on 2025-04-03 23:38 UTC and last active on 2026-04-02 08:43 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (44 events); TCP port scanning / network reconnaissance (43 events); MySQL database brute-force login attempts (9 events); Unauthorized FTP file transfer commands (6 events); POP3 mailbox access attempts (4 events); IMAP mailbox access attempts (credential stuffing) (3 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); vnc activity detected (2 events); socks5 activity detected (1 events); telnet activity detected (1 events); Telnet brute-force login attempts (often targeting IoT devices) (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇮🇩 163.7.6.154	02 Apr 2026	This IP address has been observed conducting malicious activity across 294 events involving 3 differ ... show more This IP address has been observed conducting malicious activity across 294 events involving 3 different attack vectors, first seen on 2026-02-26 13:18 UTC and last active on 2026-04-02 08:18 UTC. Observed activity includes: telnet activity detected (107 events); Telnet brute-force login attempts (often targeting IoT devices) (97 events); SSH brute-force login attempts (90 events). Reported by Guardpot. show less	Hacking Brute-Force SSH IoT Targeted
🇯🇵 139.162.70.53	02 Apr 2026	This IP address has been observed conducting malicious activity across 3,893 events involving 2 diff ... show more This IP address has been observed conducting malicious activity across 3,893 events involving 2 different attack vectors, first seen on 2024-12-31 08:09 UTC and last active on 2026-04-02 08:05 UTC. Observed activity includes: TCP port scanning / network reconnaissance (2,290 events); MySQL database brute-force login attempts (1,603 events). Reported by Guardpot. show less	Port Scan Brute-Force
🇫🇷 91.196.152.231	02 Apr 2026	This IP address has been observed conducting malicious activity across 224 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 224 events involving 8 different attack vectors, first seen on 2025-04-01 08:50 UTC and last active on 2026-04-02 08:43 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (176 events); TCP port scanning / network reconnaissance (24 events); Unauthorized FTP file transfer commands (8 events); MySQL database brute-force login attempts (5 events); telnet activity detected (5 events); vnc activity detected (4 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events); Telnet brute-force login attempts (often targeting IoT devices) (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 107.210.238.85	02 Apr 2026	This IP address has been observed conducting malicious activity across 11 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 11 events involving 1 different attack vectors, first seen on 2026-03-24 04:41 UTC and last active on 2026-04-02 08:47 UTC. Observed activity includes: SSH brute-force login attempts (11 events). Reported by Guardpot. show less	Brute-Force SSH
🇬🇧 185.247.137.130	02 Apr 2026	This IP address has been observed conducting malicious activity across 289 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 289 events involving 8 different attack vectors, first seen on 2024-12-11 02:35 UTC and last active on 2026-04-02 08:20 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (148 events); TCP port scanning / network reconnaissance (81 events); Modbus industrial control system (ICS/SCADA) protocol scanning (29 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (19 events); Unauthorized FTP file transfer commands (4 events); MySQL database brute-force login attempts (4 events); POP3 mailbox access attempts (2 events); telnet activity detected (2 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 87.236.176.121	02 Apr 2026	This IP address has been observed conducting malicious activity across 182 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 182 events involving 7 different attack vectors, first seen on 2024-03-31 18:58 UTC and last active on 2026-04-02 08:17 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (74 events); TCP port scanning / network reconnaissance (60 events); Modbus industrial control system (ICS/SCADA) protocol scanning (26 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (16 events); Unauthorized FTP file transfer commands (4 events); MySQL database brute-force login attempts (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 185.247.137.123	02 Apr 2026	This IP address has been observed conducting malicious activity across 304 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 304 events involving 8 different attack vectors, first seen on 2024-12-11 07:59 UTC and last active on 2026-04-02 08:17 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (189 events); TCP port scanning / network reconnaissance (72 events); Modbus industrial control system (ICS/SCADA) protocol scanning (24 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (8 events); Unauthorized FTP file transfer commands (4 events); ldap brute-force login attempts (4 events); POP3 mailbox access attempts (2 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 195.184.76.139	02 Apr 2026	This IP address has been observed conducting malicious activity across 297 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 297 events involving 8 different attack vectors, first seen on 2025-03-16 04:21 UTC and last active on 2026-04-02 07:42 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (192 events); TCP port scanning / network reconnaissance (77 events); MySQL database brute-force login attempts (10 events); IMAP mailbox access attempts (credential stuffing) (7 events); POP3 mailbox access attempts (4 events); Unauthorized FTP file transfer commands (3 events); telnet activity detected (3 events); Microsoft SQL Server brute-force login attempts (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force
🇨🇳 218.29.196.162	02 Apr 2026	This IP address has been observed conducting malicious activity across 76 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 76 events involving 1 different attack vectors, first seen on 2024-08-28 08:46 UTC and last active on 2026-04-02 08:28 UTC. Observed activity includes: SSH brute-force login attempts (76 events). Reported by Guardpot. show less	Brute-Force SSH
🇮🇩 157.10.160.103	02 Apr 2026	This IP address has been observed conducting malicious activity across 60 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 60 events involving 1 different attack vectors, first seen on 2026-03-30 21:33 UTC and last active on 2026-04-02 08:28 UTC. Observed activity includes: SSH brute-force login attempts (60 events). Reported by Guardpot. show less	Brute-Force SSH
🇧🇪 34.76.35.74	02 Apr 2026	This IP address has been observed conducting malicious activity across 113 events involving 4 differ ... show more This IP address has been observed conducting malicious activity across 113 events involving 4 different attack vectors, first seen on 2026-03-07 19:27 UTC and last active on 2026-04-02 08:39 UTC. Observed activity includes: TCP port scanning / network reconnaissance (62 events); MySQL database brute-force login attempts (38 events); FTP brute-force login attempts (12 events); SSH brute-force login attempts (1 events). Reported by Guardpot. show less	FTP Brute-Force Port Scan Brute-Force SSH
🇨🇳 58.245.210.70	02 Apr 2026	This IP address has been observed conducting malicious activity across 77 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 77 events involving 2 different attack vectors, first seen on 2025-01-05 12:41 UTC and last active on 2026-04-02 08:35 UTC. Observed activity includes: SSH brute-force login attempts (71 events); ssh-fortinet brute-force login attempts (6 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇸🇬 212.73.148.39	02 Apr 2026	This IP address has been observed conducting malicious activity across 15 events involving 5 differe ... show more This IP address has been observed conducting malicious activity across 15 events involving 5 different attack vectors, first seen on 2026-03-09 00:39 UTC and last active on 2026-04-02 08:35 UTC. Observed activity includes: TCP port scanning / network reconnaissance (8 events); MySQL database brute-force login attempts (3 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (2 events); telnet activity detected (1 events); vnc activity detected (1 events). Reported by Guardpot. show less	DNS Compromise Port Scan Hacking Brute-Force
🇬🇧 185.247.137.151	02 Apr 2026	This IP address has been observed conducting malicious activity across 244 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 244 events involving 7 different attack vectors, first seen on 2024-12-11 07:04 UTC and last active on 2026-04-02 08:06 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (105 events); TCP port scanning / network reconnaissance (64 events); Modbus industrial control system (ICS/SCADA) protocol scanning (45 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (20 events); Unauthorized FTP file transfer commands (8 events); ldap brute-force login attempts (1 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 87.236.176.182	02 Apr 2026	This IP address has been observed conducting malicious activity across 356 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 356 events involving 7 different attack vectors, first seen on 2024-03-01 09:16 UTC and last active on 2026-04-02 08:45 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (209 events); TCP port scanning / network reconnaissance (78 events); Modbus industrial control system (ICS/SCADA) protocol scanning (32 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (18 events); Unauthorized FTP file transfer commands (16 events); MySQL database brute-force login attempts (2 events); telnet activity detected (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 185.247.137.116	02 Apr 2026	This IP address has been observed conducting malicious activity across 289 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 289 events involving 7 different attack vectors, first seen on 2024-12-10 18:18 UTC and last active on 2026-04-02 08:17 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (122 events); TCP port scanning / network reconnaissance (91 events); Modbus industrial control system (ICS/SCADA) protocol scanning (45 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (19 events); Unauthorized FTP file transfer commands (8 events); ldap brute-force login attempts (2 events); MySQL database brute-force login attempts (2 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇩🇪 167.94.146.50	02 Apr 2026	This IP address has been observed conducting malicious activity across 1,772 events involving 11 dif ... show more This IP address has been observed conducting malicious activity across 1,772 events involving 11 different attack vectors, first seen on 2024-04-24 01:22 UTC and last active on 2026-04-02 08:40 UTC. Observed activity includes: TCP port scanning / network reconnaissance (1,124 events); SMTP abuse: open relay probing or spam relay attempts (460 events); telnet activity detected (38 events); vnc activity detected (36 events); IMAP mailbox access attempts (credential stuffing) (26 events); Unauthorized FTP file transfer commands (23 events); MySQL database brute-force login attempts (18 events); ldap brute-force login attempts (17 events); Modbus industrial control system (ICS/SCADA) protocol scanning (11 events); ftp activity detected (10 events); POP3 mailbox access attempts (9 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 91.230.168.101	02 Apr 2026	This IP address has been observed conducting malicious activity across 102 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 102 events involving 8 different attack vectors, first seen on 2025-05-17 06:04 UTC and last active on 2026-04-02 07:41 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (57 events); TCP port scanning / network reconnaissance (25 events); MySQL database brute-force login attempts (5 events); telnet activity detected (5 events); IMAP mailbox access attempts (credential stuffing) (4 events); POP3 mailbox access attempts (4 events); Unauthorized FTP file transfer commands (1 events); Microsoft SQL Server brute-force login attempts (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force
🇬🇧 185.247.137.112	02 Apr 2026	This IP address has been observed conducting malicious activity across 269 events involving 6 differ ... show more This IP address has been observed conducting malicious activity across 269 events involving 6 different attack vectors, first seen on 2024-12-10 18:54 UTC and last active on 2026-04-02 08:19 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (140 events); TCP port scanning / network reconnaissance (77 events); Modbus industrial control system (ICS/SCADA) protocol scanning (25 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (21 events); Unauthorized FTP file transfer commands (4 events); POP3 mailbox access attempts (2 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 66.132.172.102	02 Apr 2026	This IP address has been observed conducting malicious activity across 88 events involving 7 differe ... show more This IP address has been observed conducting malicious activity across 88 events involving 7 different attack vectors, first seen on 2026-03-25 08:38 UTC and last active on 2026-04-02 07:41 UTC. Observed activity includes: TCP port scanning / network reconnaissance (36 events); ftp activity detected (25 events); SMTP abuse: open relay probing or spam relay attempts (11 events); telnet activity detected (11 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); Telnet brute-force login attempts (often targeting IoT devices) (2 events); vnc activity detected (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted