AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardpot joined AbuseIPDB in March 2026 and has reported 4,200 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇮🇩 223.25.108.2	02 Apr 2026	This IP address has been observed conducting malicious activity across 114 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 114 events involving 2 different attack vectors, first seen on 2025-05-14 17:51 UTC and last active on 2026-04-02 09:17 UTC. Observed activity includes: SSH brute-force login attempts (107 events); ssh-fortinet brute-force login attempts (7 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 18.118.100.31	02 Apr 2026	This IP address has been observed conducting malicious activity across 97 events involving 4 differe ... show more This IP address has been observed conducting malicious activity across 97 events involving 4 different attack vectors, first seen on 2024-11-14 03:49 UTC and last active on 2026-04-02 09:10 UTC. Observed activity includes: TCP port scanning / network reconnaissance (73 events); MySQL database brute-force login attempts (12 events); Modbus industrial control system (ICS/SCADA) protocol scanning (6 events); telnet activity detected (6 events). Reported by Guardpot. show less	Port Scan Hacking Brute-Force IoT Targeted
🇧🇪 34.14.23.97	02 Apr 2026	This IP address has been observed conducting malicious activity across 85 events involving 3 differe ... show more This IP address has been observed conducting malicious activity across 85 events involving 3 different attack vectors, first seen on 2026-03-14 02:51 UTC and last active on 2026-04-02 08:48 UTC. Observed activity includes: TCP port scanning / network reconnaissance (52 events); FTP brute-force login attempts (28 events); MySQL database brute-force login attempts (5 events). Reported by Guardpot. show less	FTP Brute-Force Port Scan Brute-Force
🇸🇬 43.156.71.43	02 Apr 2026	This IP address has been observed conducting malicious activity across 622 events involving 12 diffe ... show more This IP address has been observed conducting malicious activity across 622 events involving 12 different attack vectors, first seen on 2026-02-22 02:26 UTC and last active on 2026-04-02 09:06 UTC. Observed activity includes: SSH brute-force login attempts (282 events); ssh-sonicwall brute-force login attempts (97 events); ssh-watchguard brute-force login attempts (53 events); ssh-mikrotik brute-force login attempts (45 events); ssh-checkpoint brute-force login attempts (31 events); ssh-f5 brute-force login attempts (30 events); ssh-juniper brute-force login attempts (30 events); ssh-huawei brute-force login attempts (21 events); ssh-paloalto brute-force login attempts (12 events); ssh-fortinet brute-force login attempts (10 events); ssh-sophos brute-force login attempts (10 events); SMTP abuse: open relay probing or spam relay attempts (1 events). Reported by Guardpot. show less	Email Spam Hacking Brute-Force SSH
🇨🇳 43.248.109.27	02 Apr 2026	This IP address has been observed conducting malicious activity across 4 events involving 2 differen ... show more This IP address has been observed conducting malicious activity across 4 events involving 2 different attack vectors, first seen on 2026-04-02 09:07 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: Telnet brute-force login attempts (often targeting IoT devices) (3 events); telnet activity detected (1 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇲🇾 47.254.192.213	02 Apr 2026	This IP address has been observed conducting malicious activity across 1,104 events involving 6 diff ... show more This IP address has been observed conducting malicious activity across 1,104 events involving 6 different attack vectors, first seen on 2024-07-02 13:13 UTC and last active on 2026-04-02 08:48 UTC. Observed activity includes: TCP port scanning / network reconnaissance (845 events); MySQL database brute-force login attempts (177 events); Microsoft SQL Server brute-force login attempts (58 events); MySQL client fingerprinting / detection (8 events); MySQL handshake protocol analysis (8 events); MySQL routing protocol probing (8 events). Reported by Guardpot. show less	Port Scan Hacking Brute-Force
🇰🇷 58.226.255.240	02 Apr 2026	This IP address has been observed conducting malicious activity across 64 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 64 events involving 2 different attack vectors, first seen on 2024-09-05 01:22 UTC and last active on 2026-04-02 08:57 UTC. Observed activity includes: SSH brute-force login attempts (61 events); ssh-fortinet brute-force login attempts (3 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇨🇳 58.243.46.205	02 Apr 2026	This IP address has been observed conducting malicious activity across 2 events involving 2 differen ... show more This IP address has been observed conducting malicious activity across 2 events involving 2 different attack vectors, first seen on 2026-04-02 09:07 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: telnet activity detected (1 events); Telnet brute-force login attempts (often targeting IoT devices) (1 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇰🇷 59.11.11.58	02 Apr 2026	This IP address has been observed conducting malicious activity across 1 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 1 events involving 1 different attack vectors, first seen on 2026-04-02 09:07 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: SSH brute-force login attempts (1 events). Reported by Guardpot. show less	Brute-Force SSH
🇺🇸 63.47.149.59	02 Apr 2026	This IP address has been observed conducting malicious activity across 69 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 69 events involving 2 different attack vectors, first seen on 2024-08-29 08:01 UTC and last active on 2026-04-02 09:17 UTC. Observed activity includes: SSH brute-force login attempts (62 events); ssh-fortinet brute-force login attempts (7 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 64.23.161.101	02 Apr 2026	This IP address has been observed conducting malicious activity across 125 events involving 8 differ ... show more This IP address has been observed conducting malicious activity across 125 events involving 8 different attack vectors, first seen on 2026-03-03 09:16 UTC and last active on 2026-04-02 08:47 UTC. Observed activity includes: Modbus industrial control system (ICS/SCADA) protocol scanning (42 events); TCP port scanning / network reconnaissance (38 events); ftp activity detected (20 events); telnet activity detected (8 events); Telnet brute-force login attempts (often targeting IoT devices) (7 events); FTP brute-force login attempts (4 events); SMTP abuse: open relay probing or spam relay attempts (4 events); POP3 mailbox access attempts (2 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 66.132.224.228	02 Apr 2026	This IP address has been observed conducting malicious activity across 35 events involving 7 differe ... show more This IP address has been observed conducting malicious activity across 35 events involving 7 different attack vectors, first seen on 2026-03-31 06:04 UTC and last active on 2026-04-02 08:37 UTC. Observed activity includes: telnet activity detected (16 events); SMTP abuse: open relay probing or spam relay attempts (7 events); vnc activity detected (4 events); TCP port scanning / network reconnaissance (3 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); Telnet brute-force login attempts (often targeting IoT devices) (2 events); POP3 mailbox access attempts (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 74.125.72.17	02 Apr 2026	This IP address has been observed conducting malicious activity across 6 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 6 events involving 1 different attack vectors, first seen on 2024-11-06 11:05 UTC and last active on 2026-04-02 09:15 UTC. Observed activity includes: DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (6 events). Reported by Guardpot. show less	DNS Compromise
🇫🇷 85.217.140.10	02 Apr 2026	This IP address has been observed conducting malicious activity across 75 events involving 11 differ ... show more This IP address has been observed conducting malicious activity across 75 events involving 11 different attack vectors, first seen on 2025-12-10 06:01 UTC and last active on 2026-04-02 08:55 UTC. Observed activity includes: TCP port scanning / network reconnaissance (38 events); SMTP abuse: open relay probing or spam relay attempts (8 events); Modbus industrial control system (ICS/SCADA) protocol scanning (7 events); POP3 mailbox access attempts (6 events); MySQL database brute-force login attempts (5 events); vnc activity detected (4 events); telnet activity detected (3 events); ftp activity detected (1 events); MySQL client fingerprinting / detection (1 events); MySQL handshake protocol analysis (1 events); MySQL routing protocol probing (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇩🇪 88.214.25.124	02 Apr 2026	This IP address has been observed conducting malicious activity across 3,488 events involving 14 dif ... show more This IP address has been observed conducting malicious activity across 3,488 events involving 14 different attack vectors, first seen on 2025-02-21 09:10 UTC and last active on 2026-04-02 08:26 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (1,789 events); TCP port scanning / network reconnaissance (1,043 events); Windows Remote Desktop (RDP) brute-force login attempts (190 events); MySQL database brute-force login attempts (168 events); Unauthorized FTP file transfer commands (98 events); IMAP mailbox access attempts (credential stuffing) (74 events); Microsoft SQL Server brute-force login attempts (59 events); telnet activity detected (16 events); POP3 mailbox access attempts (15 events); MySQL client fingerprinting / detection (11 events); MySQL handshake protocol analysis (11 events); MySQL routing protocol probing (11 events); vnc activity detected (2 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇸🇬 94.231.206.252	02 Apr 2026	This IP address has been observed conducting malicious activity across 88 events involving 6 differe ... show more This IP address has been observed conducting malicious activity across 88 events involving 6 different attack vectors, first seen on 2025-12-23 15:42 UTC and last active on 2026-04-02 08:46 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (49 events); TCP port scanning / network reconnaissance (33 events); MySQL database brute-force login attempts (3 events); MySQL client fingerprinting / detection (1 events); MySQL handshake protocol analysis (1 events); MySQL routing protocol probing (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force
🇮🇳 103.174.34.49	02 Apr 2026	This IP address has been observed conducting malicious activity across 79 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 79 events involving 2 different attack vectors, first seen on 2024-04-27 22:32 UTC and last active on 2026-04-02 09:09 UTC. Observed activity includes: SSH brute-force login attempts (69 events); ssh-fortinet brute-force login attempts (10 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 103.203.57.19	02 Apr 2026	This IP address has been observed conducting malicious activity across 190 events involving 1 differ ... show more This IP address has been observed conducting malicious activity across 190 events involving 1 different attack vectors, first seen on 2026-02-28 09:44 UTC and last active on 2026-04-02 08:55 UTC. Observed activity includes: telnet activity detected (190 events). Reported by Guardpot. show less	Hacking
🇨🇳 111.53.86.228	02 Apr 2026	This IP address has been observed conducting malicious activity across 52 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 52 events involving 2 different attack vectors, first seen on 2024-10-25 03:02 UTC and last active on 2026-04-02 09:05 UTC. Observed activity includes: TCP port scanning / network reconnaissance (44 events); Microsoft SQL Server brute-force login attempts (8 events). Reported by Guardpot. show less	Port Scan Brute-Force
🇹🇼 111.70.23.251	02 Apr 2026	This IP address has been observed conducting malicious activity across 49 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 49 events involving 2 different attack vectors, first seen on 2024-05-22 02:24 UTC and last active on 2026-04-02 09:13 UTC. Observed activity includes: SSH brute-force login attempts (45 events); ssh-fortinet brute-force login attempts (4 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇨🇳 112.123.185.151	02 Apr 2026	This IP address has been observed conducting malicious activity across 4 events involving 2 differen ... show more This IP address has been observed conducting malicious activity across 4 events involving 2 different attack vectors, first seen on 2026-04-02 08:57 UTC and last active on 2026-04-02 08:57 UTC. Observed activity includes: telnet activity detected (3 events); Telnet brute-force login attempts (often targeting IoT devices) (1 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇨🇳 113.200.72.200	02 Apr 2026	This IP address has been observed conducting malicious activity across 5 events involving 3 differen ... show more This IP address has been observed conducting malicious activity across 5 events involving 3 different attack vectors, first seen on 2024-11-26 03:22 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (3 events); IMAP mailbox access attempts (credential stuffing) (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	Email Spam Hacking Brute-Force
🇵🇰 119.160.215.50	02 Apr 2026	This IP address has been observed conducting malicious activity across 227 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 227 events involving 2 different attack vectors, first seen on 2026-03-30 13:50 UTC and last active on 2026-04-02 08:53 UTC. Observed activity includes: telnet activity detected (115 events); Telnet brute-force login attempts (often targeting IoT devices) (112 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇮🇳 128.185.228.134	02 Apr 2026	This IP address has been observed conducting malicious activity across 91 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 91 events involving 2 different attack vectors, first seen on 2025-05-20 11:08 UTC and last active on 2026-04-02 09:14 UTC. Observed activity includes: SSH brute-force login attempts (88 events); ssh-fortinet brute-force login attempts (3 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇯🇵 139.162.117.40	02 Apr 2026	This IP address has been observed conducting malicious activity across 2,313 events involving 1 diff ... show more This IP address has been observed conducting malicious activity across 2,313 events involving 1 different attack vectors, first seen on 2025-01-08 07:32 UTC and last active on 2026-04-02 08:53 UTC. Observed activity includes: TCP port scanning / network reconnaissance (2,313 events). Reported by Guardpot. show less	Port Scan