AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardpot joined AbuseIPDB in March 2026 and has reported 4,200 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 66.132.172.190	02 Apr 2026	This IP address has been observed conducting malicious activity across 102 events involving 6 differ ... show more This IP address has been observed conducting malicious activity across 102 events involving 6 different attack vectors, first seen on 2026-03-21 23:05 UTC and last active on 2026-04-02 08:58 UTC. Observed activity includes: TCP port scanning / network reconnaissance (38 events); SMTP abuse: open relay probing or spam relay attempts (29 events); ftp activity detected (20 events); telnet activity detected (11 events); POP3 mailbox access attempts (3 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 66.132.172.213	02 Apr 2026	This IP address has been observed conducting malicious activity across 91 events involving 6 differe ... show more This IP address has been observed conducting malicious activity across 91 events involving 6 different attack vectors, first seen on 2026-03-22 16:32 UTC and last active on 2026-04-02 09:15 UTC. Observed activity includes: TCP port scanning / network reconnaissance (37 events); ftp activity detected (30 events); SMTP abuse: open relay probing or spam relay attempts (12 events); telnet activity detected (9 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (2 events); POP3 mailbox access attempts (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force
🇺🇸 66.132.195.53	02 Apr 2026	This IP address has been observed conducting malicious activity across 47 events involving 5 differe ... show more This IP address has been observed conducting malicious activity across 47 events involving 5 different attack vectors, first seen on 2026-03-25 13:35 UTC and last active on 2026-04-02 08:18 UTC. Observed activity includes: TCP port scanning / network reconnaissance (15 events); ftp activity detected (10 events); SMTP abuse: open relay probing or spam relay attempts (9 events); telnet activity detected (9 events); vnc activity detected (4 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking
🇨🇦 85.217.149.66	02 Apr 2026	This IP address has been observed conducting malicious activity across 31 events involving 7 differe ... show more This IP address has been observed conducting malicious activity across 31 events involving 7 different attack vectors, first seen on 2026-03-09 17:48 UTC and last active on 2026-04-02 09:14 UTC. Observed activity includes: TCP port scanning / network reconnaissance (10 events); telnet activity detected (6 events); POP3 mailbox access attempts (5 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (4 events); SMTP abuse: open relay probing or spam relay attempts (3 events); vnc activity detected (2 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force
🇬🇧 87.236.176.110	02 Apr 2026	This IP address has been observed conducting malicious activity across 239 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 239 events involving 7 different attack vectors, first seen on 2024-03-05 21:46 UTC and last active on 2026-04-02 09:40 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (110 events); TCP port scanning / network reconnaissance (73 events); Modbus industrial control system (ICS/SCADA) protocol scanning (37 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (10 events); Unauthorized FTP file transfer commands (4 events); ldap brute-force login attempts (3 events); MySQL database brute-force login attempts (2 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 91.230.168.142	02 Apr 2026	This IP address has been observed conducting malicious activity across 15 events involving 4 differe ... show more This IP address has been observed conducting malicious activity across 15 events involving 4 different attack vectors, first seen on 2026-01-21 10:59 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: TCP port scanning / network reconnaissance (8 events); telnet activity detected (4 events); vnc activity detected (2 events); Telnet brute-force login attempts (often targeting IoT devices) (1 events). Reported by Guardpot. show less	Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 91.230.168.184	02 Apr 2026	This IP address has been observed conducting malicious activity across 34 events involving 4 differe ... show more This IP address has been observed conducting malicious activity across 34 events involving 4 different attack vectors, first seen on 2025-12-04 00:26 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (17 events); TCP port scanning / network reconnaissance (13 events); MySQL database brute-force login attempts (3 events); telnet activity detected (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force
🇺🇸 91.230.168.187	02 Apr 2026	This IP address has been observed conducting malicious activity across 28 events involving 4 differe ... show more This IP address has been observed conducting malicious activity across 28 events involving 4 different attack vectors, first seen on 2026-01-23 16:29 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (19 events); TCP port scanning / network reconnaissance (6 events); telnet activity detected (2 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force
🇮🇹 93.39.209.147	02 Apr 2026	This IP address has been observed conducting malicious activity across 20 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 20 events involving 1 different attack vectors, first seen on 2026-04-02 07:47 UTC and last active on 2026-04-02 08:52 UTC. Observed activity includes: SSH brute-force login attempts (20 events). Reported by Guardpot. show less	Brute-Force SSH
🇸🇬 94.231.206.249	02 Apr 2026	This IP address has been observed conducting malicious activity across 209 events involving 7 differ ... show more This IP address has been observed conducting malicious activity across 209 events involving 7 different attack vectors, first seen on 2025-12-20 14:43 UTC and last active on 2026-04-02 08:46 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (138 events); TCP port scanning / network reconnaissance (51 events); POP3 mailbox access attempts (9 events); MySQL database brute-force login attempts (8 events); MySQL client fingerprinting / detection (1 events); MySQL handshake protocol analysis (1 events); MySQL routing protocol probing (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force
🇺🇸 98.102.148.242	02 Apr 2026	This IP address has been observed conducting malicious activity across 94 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 94 events involving 2 different attack vectors, first seen on 2024-05-19 04:39 UTC and last active on 2026-04-02 09:03 UTC. Observed activity includes: SSH brute-force login attempts (88 events); ssh-fortinet brute-force login attempts (6 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 104.152.52.200	02 Apr 2026	This IP address has been observed conducting malicious activity across 69 events involving 9 differe ... show more This IP address has been observed conducting malicious activity across 69 events involving 9 different attack vectors, first seen on 2024-05-01 12:23 UTC and last active on 2026-04-02 09:23 UTC. Observed activity includes: TCP port scanning / network reconnaissance (32 events); SMTP abuse: open relay probing or spam relay attempts (13 events); POP3 mailbox access attempts (7 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (5 events); Modbus industrial control system (ICS/SCADA) protocol scanning (4 events); telnet activity detected (3 events); MySQL database brute-force login attempts (2 events); vnc activity detected (2 events); Windows Remote Desktop (RDP) brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 104.152.52.211	02 Apr 2026	This IP address has been observed conducting malicious activity across 92 events involving 9 differe ... show more This IP address has been observed conducting malicious activity across 92 events involving 9 different attack vectors, first seen on 2024-09-01 11:12 UTC and last active on 2026-04-02 09:23 UTC. Observed activity includes: TCP port scanning / network reconnaissance (60 events); POP3 mailbox access attempts (6 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (4 events); Unauthorized FTP file transfer commands (4 events); Modbus industrial control system (ICS/SCADA) protocol scanning (4 events); MySQL database brute-force login attempts (4 events); Telnet brute-force login attempts (often targeting IoT devices) (4 events); telnet activity detected (3 events); vnc activity detected (3 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇨🇳 120.239.154.96	02 Apr 2026	This IP address has been observed conducting malicious activity across 4 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 4 events involving 1 different attack vectors, first seen on 2026-03-29 21:24 UTC and last active on 2026-04-02 09:51 UTC. Observed activity includes: SSH brute-force login attempts (4 events). Reported by Guardpot. show less	Brute-Force SSH
🇳🇱 142.93.235.208	02 Apr 2026	This IP address has been observed conducting malicious activity across 4 events involving 2 differen ... show more This IP address has been observed conducting malicious activity across 4 events involving 2 different attack vectors, first seen on 2026-04-02 09:12 UTC and last active on 2026-04-02 09:12 UTC. Observed activity includes: MySQL database brute-force login attempts (2 events); TCP port scanning / network reconnaissance (2 events). Reported by Guardpot. show less	Port Scan Brute-Force
🇭🇰 152.32.133.174	02 Apr 2026	This IP address has been observed conducting malicious activity across 43 events involving 6 differe ... show more This IP address has been observed conducting malicious activity across 43 events involving 6 different attack vectors, first seen on 2026-01-15 18:43 UTC and last active on 2026-04-02 09:30 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (14 events); TCP port scanning / network reconnaissance (13 events); POP3 mailbox access attempts (6 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (4 events); telnet activity detected (4 events); Microsoft SQL Server brute-force login attempts (2 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force
🇺🇸 173.211.49.112	02 Apr 2026	This IP address has been observed conducting malicious activity across 1 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 1 events involving 1 different attack vectors, first seen on 2026-04-02 09:20 UTC and last active on 2026-04-02 09:20 UTC. Observed activity includes: Web application brute-force login attempts (1 events). Reported by Guardpot. show less	Brute-Force Web App Attack
🇮🇱 176.12.132.63	02 Apr 2026	This IP address has been observed conducting malicious activity across 4 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 4 events involving 1 different attack vectors, first seen on 2024-05-12 17:52 UTC and last active on 2026-04-02 08:56 UTC. Observed activity includes: SSH brute-force login attempts (4 events). Reported by Guardpot. show less	Brute-Force SSH
🇧🇷 177.72.87.7	02 Apr 2026	This IP address has been observed conducting malicious activity across 101 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 101 events involving 2 different attack vectors, first seen on 2024-04-09 11:43 UTC and last active on 2026-04-02 09:45 UTC. Observed activity includes: SSH brute-force login attempts (96 events); ssh-fortinet brute-force login attempts (5 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇷🇺 178.185.136.57	02 Apr 2026	This IP address has been observed conducting malicious activity across 1,294 events involving 11 dif ... show more This IP address has been observed conducting malicious activity across 1,294 events involving 11 different attack vectors, first seen on 2025-08-07 12:03 UTC and last active on 2026-04-02 09:07 UTC. Observed activity includes: SSH brute-force login attempts (557 events); ssh-fortinet brute-force login attempts (419 events); ssh-sonicwall brute-force login attempts (86 events); ssh-sophos brute-force login attempts (70 events); ssh-mikrotik brute-force login attempts (38 events); ssh-juniper brute-force login attempts (36 events); ssh-watchguard brute-force login attempts (32 events); ssh-f5 brute-force login attempts (22 events); ssh-checkpoint brute-force login attempts (20 events); ssh-paloalto brute-force login attempts (9 events); SMTP abuse: open relay probing or spam relay attempts (5 events). Reported by Guardpot. show less	Email Spam Hacking Brute-Force SSH
🇨🇭 179.43.159.78	02 Apr 2026	This IP address has been observed conducting malicious activity across 1 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 1 events involving 1 different attack vectors, first seen on 2026-04-02 09:41 UTC and last active on 2026-04-02 09:41 UTC. Observed activity includes: Web application brute-force login attempts (1 events). Reported by Guardpot. show less	Brute-Force Web App Attack
🇵🇰 182.185.131.230	02 Apr 2026	This IP address has been observed conducting malicious activity across 15 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 15 events involving 2 different attack vectors, first seen on 2026-04-02 09:00 UTC and last active on 2026-04-02 09:01 UTC. Observed activity includes: Telnet brute-force login attempts (often targeting IoT devices) (13 events); telnet activity detected (2 events). Reported by Guardpot. show less	Hacking Brute-Force IoT Targeted
🇦🇷 186.122.177.140	02 Apr 2026	This IP address has been observed conducting malicious activity across 863 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 863 events involving 2 different attack vectors, first seen on 2024-04-23 17:26 UTC and last active on 2026-04-02 08:56 UTC. Observed activity includes: SSH brute-force login attempts (520 events); ssh-fortinet brute-force login attempts (343 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇦🇷 191.241.142.170	02 Apr 2026	This IP address has been observed conducting malicious activity across 71 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 71 events involving 1 different attack vectors, first seen on 2026-03-13 02:47 UTC and last active on 2026-04-02 09:41 UTC. Observed activity includes: SSH brute-force login attempts (71 events). Reported by Guardpot. show less	Brute-Force SSH
🇺🇸 192.155.90.118	02 Apr 2026	This IP address has been observed conducting malicious activity across 593 events involving 15 diffe ... show more This IP address has been observed conducting malicious activity across 593 events involving 15 different attack vectors, first seen on 2024-02-29 22:33 UTC and last active on 2026-04-02 09:24 UTC. Observed activity includes: TCP port scanning / network reconnaissance (255 events); IMAP mailbox access attempts (credential stuffing) (84 events); Unauthorized FTP file transfer commands (59 events); MySQL database brute-force login attempts (50 events); POP3 mailbox access attempts (20 events); vnc activity detected (18 events); Telnet brute-force login attempts (often targeting IoT devices) (16 events); Microsoft SQL Server brute-force login attempts (15 events); MySQL client fingerprinting / detection (14 events); MySQL handshake protocol analysis (14 events); MySQL routing protocol probing (14 events); telnet activity detected (13 events); ftp activity detected (10 events); Modbus industrial control system (ICS/SCADA) protocol scanning (6 events); Windows Remote Desktop (RDP) brute-force login attempts (5 even show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted