User whatda joined AbuseIPDB in April 2026 and has reported 24,401 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 64.62.156.202 |
FTP unauthorized access: "AUTH TLS"
|
FTP Brute-Force Brute-Force | |
| 🇷🇴 2.57.122.168 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇺🇸 40.124.113.245 |
SNMP query: community="public", version=0, OIDs=[1.3.6.1.2.1.1.1.0]
|
Hacking Port Scan | |
| 🇱🇹 62.60.130.234 |
SMTP abuse detected: "EHLO User"
|
Email Spam Brute-Force | |
| 🇺🇸 98.174.39.245 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇷🇴 193.46.255.86 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇷🇴 2.57.121.25 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇭🇰 39.109.116.214 |
TELNET unauthorized access: "id"
|
IoT Targeted Brute-Force | |
| 🇺🇸 71.6.232.30 |
SNMP query: community="public", version=0, OIDs=[1.3.6.1.2.1.1.1.0]
|
Hacking Port Scan | |
| 🇧🇷 16.5.0.254 |
Redis unauthorized command: "GET / HTTP/1.1"
|
Hacking Port Scan | |
| 🇩🇪 195.182.16.23 |
|
Web App Attack Port Scan | |
| 🇩🇪 64.89.163.170 |
MySQL enumeration query → Rogue INFILE trap: "SHOW DATABASES"
|
Hacking Brute-Force | |
| 🇹🇷 185.226.93.242 |
HTTP attack detected: GET /login (auth_bruteforce). UA: Go-http-client/1.1
|
Web App Attack Port Scan | |
| 🇳🇱 204.76.203.21 |
|
Web App Attack Port Scan | |
| 🇩🇪 151.243.11.240 |
SNMP query: community="public", version=1, OIDs=[1.3.6.1]
|
Hacking Port Scan | |
| 🇸🇬 104.28.222.47 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇺🇦 45.12.1.49 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇻🇳 103.167.88.187 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇻🇳 103.118.29.32 |
TELNET unauthorized access: "id"
|
IoT Targeted Brute-Force | |
| 🇵🇰 36.255.33.139 |
TELNET unauthorized access: "start"
|
IoT Targeted Brute-Force | |
| 🇳🇱 85.11.167.212 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇩🇪 91.92.240.38 |
SMTP abuse detected: "EHLO User"
|
Email Spam Brute-Force | |
| 🇳🇱 164.92.148.118 |
HTTP attack detected: GET / (probe). UA: CGrab/v8.12.0
|
Web App Attack Port Scan | |
| 🇩🇪 64.89.163.167 |
MySQL enumeration query → Rogue INFILE trap: "SHOW DATABASES"
|
Hacking Brute-Force | |
| 🇺🇸 147.203.255.20 |
SNMP query: community="public", version=0, OIDs=[1.3.6.1.2.1.1.1.0]
|
Hacking Port Scan |