AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Guardpot joined AbuseIPDB in March 2026 and has reported 4,200 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇮🇳 203.193.137.250	02 Apr 2026	This IP address has been observed conducting malicious activity across 89 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 89 events involving 2 different attack vectors, first seen on 2024-04-06 20:13 UTC and last active on 2026-04-02 09:47 UTC. Observed activity includes: SSH brute-force login attempts (85 events); ssh-fortinet brute-force login attempts (4 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇰🇷 203.252.10.3	02 Apr 2026	This IP address has been observed conducting malicious activity across 240 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 240 events involving 2 different attack vectors, first seen on 2024-04-01 10:00 UTC and last active on 2026-04-02 09:35 UTC. Observed activity includes: SSH brute-force login attempts (230 events); ssh-fortinet brute-force login attempts (10 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇺🇸 209.173.10.75	02 Apr 2026	This IP address has been observed conducting malicious activity across 119 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 119 events involving 2 different attack vectors, first seen on 2024-04-21 03:56 UTC and last active on 2026-04-02 09:46 UTC. Observed activity includes: SSH brute-force login attempts (110 events); ssh-fortinet brute-force login attempts (9 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇸🇬 212.73.148.36	02 Apr 2026	This IP address has been observed conducting malicious activity across 27 events involving 6 differe ... show more This IP address has been observed conducting malicious activity across 27 events involving 6 different attack vectors, first seen on 2026-03-04 18:44 UTC and last active on 2026-04-02 09:10 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (12 events); TCP port scanning / network reconnaissance (6 events); POP3 mailbox access attempts (5 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (2 events); MySQL database brute-force login attempts (1 events); vnc activity detected (1 events). Reported by Guardpot. show less	DNS Compromise Email Spam Port Scan Hacking Brute-Force
🇨🇳 218.200.9.182	02 Apr 2026	This IP address has been observed conducting malicious activity across 53 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 53 events involving 2 different attack vectors, first seen on 2025-01-06 23:35 UTC and last active on 2026-04-02 09:45 UTC. Observed activity includes: SSH brute-force login attempts (51 events); ssh-fortinet brute-force login attempts (2 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇨🇳 1.24.16.234	02 Apr 2026	This IP address has been observed conducting malicious activity across 3 events involving 3 differen ... show more This IP address has been observed conducting malicious activity across 3 events involving 3 different attack vectors, first seen on 2024-11-18 20:06 UTC and last active on 2026-04-02 09:33 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (1 events); TCP port scanning / network reconnaissance (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking
🇮🇱 2.55.70.26	02 Apr 2026	This IP address has been observed conducting malicious activity across 65 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 65 events involving 2 different attack vectors, first seen on 2025-08-25 01:36 UTC and last active on 2026-04-02 09:42 UTC. Observed activity includes: SSH brute-force login attempts (64 events); ssh-fortinet brute-force login attempts (1 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇧🇪 34.14.59.22	02 Apr 2026	This IP address has been observed conducting malicious activity across 140 events involving 3 differ ... show more This IP address has been observed conducting malicious activity across 140 events involving 3 different attack vectors, first seen on 2026-03-12 03:53 UTC and last active on 2026-04-02 09:38 UTC. Observed activity includes: TCP port scanning / network reconnaissance (83 events); FTP brute-force login attempts (38 events); MySQL database brute-force login attempts (19 events). Reported by Guardpot. show less	FTP Brute-Force Port Scan Brute-Force
🇱🇺 46.151.182.163	02 Apr 2026	This IP address has been observed conducting malicious activity across 134 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 134 events involving 2 different attack vectors, first seen on 2026-03-01 04:44 UTC and last active on 2026-04-02 09:43 UTC. Observed activity includes: MySQL database brute-force login attempts (67 events); TCP port scanning / network reconnaissance (67 events). Reported by Guardpot. show less	Port Scan Brute-Force
🇺🇸 50.187.155.130	02 Apr 2026	This IP address has been observed conducting malicious activity across 117 events involving 2 differ ... show more This IP address has been observed conducting malicious activity across 117 events involving 2 different attack vectors, first seen on 2025-05-05 01:22 UTC and last active on 2026-04-02 09:40 UTC. Observed activity includes: SSH brute-force login attempts (109 events); ssh-fortinet brute-force login attempts (8 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇨🇦 57.134.70.139	02 Apr 2026	This IP address has been observed conducting malicious activity across 12 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 12 events involving 1 different attack vectors, first seen on 2026-03-23 20:42 UTC and last active on 2026-04-02 09:21 UTC. Observed activity includes: SSH brute-force login attempts (12 events). Reported by Guardpot. show less	Brute-Force SSH
🇨🇳 58.22.255.28	02 Apr 2026	This IP address has been observed conducting malicious activity across 52 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 52 events involving 1 different attack vectors, first seen on 2025-01-06 17:46 UTC and last active on 2026-04-02 09:32 UTC. Observed activity includes: SSH brute-force login attempts (52 events). Reported by Guardpot. show less	Brute-Force SSH
🇩🇪 64.89.163.81	02 Apr 2026	This IP address has been observed conducting malicious activity across 1,727 events involving 3 diff ... show more This IP address has been observed conducting malicious activity across 1,727 events involving 3 different attack vectors, first seen on 2026-02-15 04:31 UTC and last active on 2026-04-02 09:41 UTC. Observed activity includes: PostgreSQL database brute-force login attempts (803 events); TCP port scanning / network reconnaissance (567 events); Unauthorized SQL queries against PostgreSQL (357 events). Reported by Guardpot. show less	Port Scan Hacking SQL Injection Brute-Force
🇺🇸 66.132.172.42	02 Apr 2026	This IP address has been observed conducting malicious activity across 65 events involving 7 differe ... show more This IP address has been observed conducting malicious activity across 65 events involving 7 different attack vectors, first seen on 2026-03-20 15:49 UTC and last active on 2026-04-02 09:35 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (21 events); TCP port scanning / network reconnaissance (20 events); ftp activity detected (10 events); telnet activity detected (6 events); vnc activity detected (6 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events); POP3 mailbox access attempts (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 66.132.195.72	02 Apr 2026	This IP address has been observed conducting malicious activity across 13 events involving 5 differe ... show more This IP address has been observed conducting malicious activity across 13 events involving 5 different attack vectors, first seen on 2026-03-23 21:05 UTC and last active on 2026-04-02 09:37 UTC. Observed activity includes: TCP port scanning / network reconnaissance (5 events); SMTP abuse: open relay probing or spam relay attempts (3 events); telnet activity detected (3 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events); POP3 mailbox access attempts (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 66.132.195.75	02 Apr 2026	This IP address has been observed conducting malicious activity across 25 events involving 5 differe ... show more This IP address has been observed conducting malicious activity across 25 events involving 5 different attack vectors, first seen on 2026-03-24 07:35 UTC and last active on 2026-04-02 09:32 UTC. Observed activity includes: telnet activity detected (12 events); TCP port scanning / network reconnaissance (10 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events); POP3 mailbox access attempts (1 events); vnc activity detected (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 69.126.144.30	02 Apr 2026	This IP address has been observed conducting malicious activity across 97 events involving 2 differe ... show more This IP address has been observed conducting malicious activity across 97 events involving 2 different attack vectors, first seen on 2024-08-28 23:44 UTC and last active on 2026-04-02 09:21 UTC. Observed activity includes: SSH brute-force login attempts (93 events); ssh-fortinet brute-force login attempts (4 events). Reported by Guardpot. show less	Hacking Brute-Force SSH
🇸🇪 78.66.44.246	02 Apr 2026	This IP address has been observed conducting malicious activity across 81 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 81 events involving 1 different attack vectors, first seen on 2026-03-13 20:26 UTC and last active on 2026-04-02 09:40 UTC. Observed activity includes: SSH brute-force login attempts (81 events). Reported by Guardpot. show less	Brute-Force SSH
🇫🇷 85.217.140.41	02 Apr 2026	This IP address has been observed conducting malicious activity across 64 events involving 8 differe ... show more This IP address has been observed conducting malicious activity across 64 events involving 8 different attack vectors, first seen on 2026-03-04 18:49 UTC and last active on 2026-04-02 09:18 UTC. Observed activity includes: TCP port scanning / network reconnaissance (22 events); SMTP abuse: open relay probing or spam relay attempts (13 events); vnc activity detected (9 events); telnet activity detected (7 events); MySQL database brute-force login attempts (6 events); Modbus industrial control system (ICS/SCADA) protocol scanning (4 events); Telnet brute-force login attempts (often targeting IoT devices) (2 events); POP3 mailbox access attempts (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇫🇷 91.196.152.76	02 Apr 2026	This IP address has been observed conducting malicious activity across 114 events involving 10 diffe ... show more This IP address has been observed conducting malicious activity across 114 events involving 10 different attack vectors, first seen on 2025-03-07 18:33 UTC and last active on 2026-04-02 09:26 UTC. Observed activity includes: TCP port scanning / network reconnaissance (56 events); SMTP abuse: open relay probing or spam relay attempts (38 events); MySQL database brute-force login attempts (10 events); Unauthorized FTP file transfer commands (2 events); telnet activity detected (2 events); vnc activity detected (2 events); ftp activity detected (1 events); IMAP mailbox access attempts (credential stuffing) (1 events); Modbus industrial control system (ICS/SCADA) protocol scanning (1 events); Microsoft SQL Server brute-force login attempts (1 events). Reported by Guardpot. show less	FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 91.230.168.10	02 Apr 2026	This IP address has been observed conducting malicious activity across 101 events involving 6 differ ... show more This IP address has been observed conducting malicious activity across 101 events involving 6 different attack vectors, first seen on 2025-05-17 04:47 UTC and last active on 2026-04-02 09:23 UTC. Observed activity includes: SMTP abuse: open relay probing or spam relay attempts (62 events); TCP port scanning / network reconnaissance (27 events); IMAP mailbox access attempts (credential stuffing) (5 events); MySQL database brute-force login attempts (4 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); telnet activity detected (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇵🇰 103.86.52.218	02 Apr 2026	This IP address has been observed conducting malicious activity across 23 events involving 1 differe ... show more This IP address has been observed conducting malicious activity across 23 events involving 1 different attack vectors, first seen on 2026-03-23 16:51 UTC and last active on 2026-04-02 09:35 UTC. Observed activity includes: SSH brute-force login attempts (23 events). Reported by Guardpot. show less	Brute-Force SSH
🇮🇳 103.118.150.139	02 Apr 2026	This IP address has been observed conducting malicious activity across 9 events involving 1 differen ... show more This IP address has been observed conducting malicious activity across 9 events involving 1 different attack vectors, first seen on 2026-03-24 01:26 UTC and last active on 2026-04-02 09:23 UTC. Observed activity includes: SSH brute-force login attempts (9 events). Reported by Guardpot. show less	Brute-Force SSH
🇺🇸 104.152.52.143	02 Apr 2026	This IP address has been observed conducting malicious activity across 29 events involving 5 differe ... show more This IP address has been observed conducting malicious activity across 29 events involving 5 different attack vectors, first seen on 2024-03-27 00:47 UTC and last active on 2026-04-02 09:23 UTC. Observed activity includes: TCP port scanning / network reconnaissance (15 events); SMTP abuse: open relay probing or spam relay attempts (10 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); MySQL database brute-force login attempts (1 events); telnet activity detected (1 events). Reported by Guardpot. show less	Email Spam Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 104.152.52.214	02 Apr 2026	This IP address has been observed conducting malicious activity across 64 events involving 9 differe ... show more This IP address has been observed conducting malicious activity across 64 events involving 9 different attack vectors, first seen on 2024-03-30 14:53 UTC and last active on 2026-04-02 09:23 UTC. Observed activity includes: TCP port scanning / network reconnaissance (29 events); POP3 mailbox access attempts (13 events); SMTP abuse: open relay probing or spam relay attempts (7 events); telnet activity detected (5 events); Telnet brute-force login attempts (often targeting IoT devices) (4 events); DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (2 events); Modbus industrial control system (ICS/SCADA) protocol scanning (2 events); Unauthorized FTP file transfer commands (1 events); MySQL database brute-force login attempts (1 events). Reported by Guardpot. show less	DNS Compromise FTP Brute-Force Email Spam Port Scan Hacking Brute-Force IoT Targeted