AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardpot joined AbuseIPDB in March 2026 and has reported 4,200 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 146.190.123.63	02 Apr 2026	This IP address has been observed conducting malicious activity across 1,336 events involving 3 diff ... show more This IP address has been observed conducting malicious activity across 1,336 events involving 3 different attack vectors, first seen on 2025-09-10 09:28 UTC and last active on 2026-04-02 09:01 UTC. Observed activity includes: TCP port scanning / network reconnaissance (482 events); PostgreSQL database brute-force login attempts (445 events); Unauthorized SQL queries against PostgreSQL (409 events). Reported by Guardpot. show less	Port Scan Hacking SQL Injection Brute-Force
🇭🇰 154.12.90.12	02 Apr 2026	This IP address has been observed conducting malicious activity across 140 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 140 events involving 2 different attack vectors, first seen on 2026-03-28 22:04 UTC and last active on 2026-04-02 08:29 UTC. Observed activity includes: telnet activity detected (70 events); Telnet brute-force login attempts (often targeting IoT devices) (70 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇭🇰 165.154.6.49	02 Apr 2026	This IP address has been observed conducting malicious activity across 301 events involving 1 differ ... show more This IP address has been observed conducting malicious activity across 301 events involving 1 different attack vectors, first seen on 2026-03-01 18:42 UTC and last active on 2026-04-02 09:00 UTC. Observed activity includes: SSH brute-force login attempts (301 events). Reported by Guardpot. show less	Brute-Force SSH
🇺🇸 172.234.217.129	02 Apr 2026	This IP address has been observed conducting malicious activity across 423 events involving 12 diffe ... show more This IP address has been observed conducting malicious activity across 423 events involving 12 different attack vectors, first seen on 2025-05-25 17:39 UTC and last active on 2026-04-02 09:05 UTC. Observed activity includes: TCP port scanning / network reconnaissance (189 events); IMAP mailbox access attempts (credential stuffing) (68 events); MySQL database brute-force login attempts (51 events); POP3 mailbox access attempts (41 events); Telnet brute-force login attempts (often targeting IoT devices) (20 events); Microsoft SQL Server brute-force login attempts (16 events); Windows Remote Desktop (RDP) brute-force login attempts (10 events); telnet activity detected (10 events); vnc activity detected (6 events); MySQL client fingerprinting / detection (4 events); MySQL handshake protocol analysis (4 events); MySQL routing protocol probing (4 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇨🇳 175.30.48.151	02 Apr 2026	This IP address has been observed conducting malicious activity across 6 events involving 4 differen ... show more This IP address has been observed conducting malicious activity across 6 events involving 4 different attack vectors, first seen on 2025-04-19 00:58 UTC and last active on 2026-04-02 08:48 UTC. Observed activity includes: MySQL database brute-force login attempts (2 events); TCP port scanning / network reconnaissance (2 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (1 events); SMTP abuse: open relay probing or spam relay attempts (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Brute-Force
🇨🇳 175.43.184.215	02 Apr 2026	This IP address has been observed conducting malicious activity across 2 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 2 events involving 1 different attack vectors, first seen on 2026-04-02 08:15 UTC and last active on 2026-04-02 08:51 UTC. Observed activity includes: SSH brute-force login attempts (2 events). Reported by Guardpot. show less	Brute-Force SSH
🇧🇷 177.174.0.3	02 Apr 2026	This IP address has been observed conducting malicious activity across 94 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 94 events involving 2 different attack vectors, first seen on 2024-11-23 09:17 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: SSH brute-force login attempts (93 events); ssh-fortinet brute-force login attempts (1 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇱🇹 185.2.228.48	02 Apr 2026	This IP address has been observed conducting malicious activity across 76 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 76 events involving 1 different attack vectors, first seen on 2026-03-13 03:07 UTC and last active on 2026-04-02 09:01 UTC. Observed activity includes: SSH brute-force login attempts (76 events). Reported by Guardpot. show less	Brute-Force SSH
🇺🇸 185.180.141.47	02 Apr 2026	This IP address has been observed conducting malicious activity across 160 events involving 9 differ ... show more This IP address has been observed conducting malicious activity across 160 events involving 9 different attack vectors, first seen on 2024-11-10 07:42 UTC and last active on 2026-04-02 09:15 UTC. Observed activity includes: TCP port scanning / network reconnaissance (98 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (19 events); IMAP mailbox access attempts (credential stuffing) (16 events); PostgreSQL database brute-force login attempts (10 events); Windows Remote Desktop (RDP) brute-force login attempts (7 events); ldap brute-force login attempts (5 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); MySQL database brute-force login attempts (2 events); POP3 mailbox access attempts (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 185.180.141.50	02 Apr 2026	This IP address has been observed conducting malicious activity across 74 events involving 6 differe ... show more This IP address has been observed conducting malicious activity across 74 events involving 6 different attack vectors, first seen on 2024-11-05 19:57 UTC and last active on 2026-04-02 09:14 UTC. Observed activity includes: TCP port scanning / network reconnaissance (32 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (23 events); IMAP mailbox access attempts (credential stuffing) (10 events); MySQL database brute-force login attempts (6 events); Unauthorized FTP file transfer commands (2 events); Windows Remote Desktop (RDP) brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force
🇬🇧 185.247.137.121	02 Apr 2026	This IP address has been observed conducting malicious activity across 206 events involving 6 differ ... show more This IP address has been observed conducting malicious activity across 206 events involving 6 different attack vectors, first seen on 2024-12-11 12:37 UTC and last active on 2026-04-02 08:20 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (98 events); TCP port scanning / network reconnaissance (72 events); Modbus industrial control system (ICS/SCADA) protocol scanning (22 events); Unauthorized FTP file transfer commands (8 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (5 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇧🇷 200.196.50.91	02 Apr 2026	This IP address has been observed conducting malicious activity across 1,330 events involving 10 dif ... show more This IP address has been observed conducting malicious activity across 1,330 events involving 10 different attack vectors, first seen on 2024-04-10 10:01 UTC and last active on 2026-04-02 09:09 UTC. Observed activity includes: ssh-fortinet brute-force login attempts (550 events); SSH brute-force login attempts (547 events); ssh-watchguard brute-force login attempts (52 events); ssh-mikrotik brute-force login attempts (45 events); ssh-huawei brute-force login attempts (37 events); ssh-f5 brute-force login attempts (35 events); ssh-juniper brute-force login attempts (32 events); ssh-sonicwall brute-force login attempts (20 events); ssh-sophos brute-force login attempts (10 events); SMTP abuse: open relay probing or spam relay attempts (2 events). Reported by Guardpot. show less	Email Spam Hacking Brute-Force SSH
🇧🇷 201.17.133.138	02 Apr 2026	This IP address has been observed conducting malicious activity across 4,119 events involving 2 diff ... show more This IP address has been observed conducting malicious activity across 4,119 events involving 2 different attack vectors, first seen on 2024-04-14 00:39 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: SSH brute-force login attempts (3,587 events); ssh-fortinet brute-force login attempts (532 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇬🇧 213.121.5.132	02 Apr 2026	This IP address has been observed conducting malicious activity across 71 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 71 events involving 1 different attack vectors, first seen on 2026-03-26 06:53 UTC and last active on 2026-04-02 09:09 UTC. Observed activity includes: SSH brute-force login attempts (71 events). Reported by Guardpot. show less	Brute-Force SSH
🇨🇳 14.103.127.204	02 Apr 2026	This IP address has been observed conducting malicious activity across 398 events involving 12 diffe ... show more This IP address has been observed conducting malicious activity across 398 events involving 12 different attack vectors, first seen on 2024-08-21 09:21 UTC and last active on 2026-04-02 09:39 UTC. Observed activity includes: SSH brute-force login attempts (145 events); ssh-fortinet brute-force login attempts (56 events); ssh-mikrotik brute-force login attempts (43 events); ssh-juniper brute-force login attempts (33 events); ssh-sophos brute-force login attempts (27 events); ssh-f5 brute-force login attempts (25 events); ssh-watchguard brute-force login attempts (25 events); ssh-sonicwall brute-force login attempts (18 events); ssh-huawei brute-force login attempts (12 events); SMTP abuse: open relay probing or spam relay attempts (5 events); ssh-paloalto brute-force login attempts (5 events); ssh-checkpoint brute-force login attempts (4 events). Reported by Guardpot. show less	Email Spam Hacking Brute-Force SSH
🇦🇪 20.46.45.121	02 Apr 2026	This IP address has been observed conducting malicious activity across 67 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 67 events involving 2 different attack vectors, first seen on 2024-10-16 14:58 UTC and last active on 2026-04-02 09:02 UTC. Observed activity includes: SSH brute-force login attempts (56 events); ssh-fortinet brute-force login attempts (11 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 20.168.127.148	02 Apr 2026	This IP address has been observed conducting malicious activity across 15 events involving 3 differe ... show more This IP address has been observed conducting malicious activity across 15 events involving 3 different attack vectors, first seen on 2025-03-06 00:05 UTC and last active on 2026-04-02 09:32 UTC. Observed activity includes: TCP port scanning / network reconnaissance (7 events); Unauthorized FTP file transfer commands (4 events); vnc activity detected (4 events). Reported by Guardpot. show less	FTP Brute-Force Port Scan Hacking
🇨🇳 36.106.166.4	02 Apr 2026	This IP address has been observed conducting malicious activity across 3 events involving 3 differen ... show more This IP address has been observed conducting malicious activity across 3 events involving 3 different attack vectors, first seen on 2024-04-29 18:26 UTC and last active on 2026-04-02 09:33 UTC. Observed activity includes: MySQL database brute-force login attempts (1 events); TCP port scanning / network reconnaissance (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	Port Scan Hacking Brute-Force
🇭🇰 43.252.231.122	02 Apr 2026	This IP address has been observed conducting malicious activity across 12,859 events involving 4 dif ... show more This IP address has been observed conducting malicious activity across 12,859 events involving 4 different attack vectors, first seen on 2025-08-04 11:43 UTC and last active on 2026-04-02 09:12 UTC. Observed activity includes: SSH brute-force login attempts (12,511 events); telnet activity detected (118 events); Telnet brute-force login attempts (often targeting IoT devices) (116 events); ssh-fortinet brute-force login attempts (114 events). Reported by Guardpot. show less	Hacking Brute-Force SSH IoT Targeted
🇺🇸 44.220.185.252	02 Apr 2026	This IP address has been observed conducting malicious activity across 26 events involving 8 differe ... show more This IP address has been observed conducting malicious activity across 26 events involving 8 different attack vectors, first seen on 2024-04-28 11:39 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: TCP port scanning / network reconnaissance (8 events); vnc activity detected (6 events); FTP brute-force login attempts (4 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (2 events); IMAP mailbox access attempts (credential stuffing) (2 events); POP3 mailbox access attempts (2 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇮🇳 45.120.120.69	02 Apr 2026	This IP address has been observed conducting malicious activity across 167 events involving 1 differ ... show more This IP address has been observed conducting malicious activity across 167 events involving 1 different attack vectors, first seen on 2026-03-14 23:50 UTC and last active on 2026-04-02 09:27 UTC. Observed activity includes: SSH brute-force login attempts (167 events). Reported by Guardpot. show less	Brute-Force SSH
🇭🇰 45.142.154.91	02 Apr 2026	This IP address has been observed conducting malicious activity across 84 events involving 6 differe ... show more This IP address has been observed conducting malicious activity across 84 events involving 6 different attack vectors, first seen on 2025-08-03 14:55 UTC and last active on 2026-04-02 09:03 UTC. Observed activity includes: TCP port scanning / network reconnaissance (44 events); SMTP abuse: open relay probing or spam relay attempts (20 events); POP3 mailbox access attempts (12 events); telnet activity detected (4 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (2 events); Telnet brute-force login attempts (often targeting IoT devices) (2 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇩🇪 64.89.163.134	02 Apr 2026	This IP address has been observed conducting malicious activity across 1,478 events involving 3 diff ... show more This IP address has been observed conducting malicious activity across 1,478 events involving 3 different attack vectors, first seen on 2026-01-22 03:55 UTC and last active on 2026-04-02 08:53 UTC. Observed activity includes: PostgreSQL database brute-force login attempts (703 events); TCP port scanning / network reconnaissance (535 events); Unauthorized SQL queries against PostgreSQL (240 events). Reported by Guardpot. show less	Port Scan Hacking SQL Injection Brute-Force
🇮🇶 65.20.161.126	02 Apr 2026	This IP address has been observed conducting malicious activity across 71 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 71 events involving 1 different attack vectors, first seen on 2026-03-13 01:48 UTC and last active on 2026-04-02 09:02 UTC. Observed activity includes: SSH brute-force login attempts (71 events). Reported by Guardpot. show less	Brute-Force SSH
🇮🇶 65.20.167.160	02 Apr 2026	This IP address has been observed conducting malicious activity across 130 events involving 1 differ ... show more This IP address has been observed conducting malicious activity across 130 events involving 1 different attack vectors, first seen on 2024-04-06 01:16 UTC and last active on 2026-04-02 09:49 UTC. Observed activity includes: SSH brute-force login attempts (130 events). Reported by Guardpot. show less	Brute-Force SSH