User whatda joined AbuseIPDB in April 2026 and has reported 20,921 IP addresses.

Standing (weight) is good.

ACTIVE USER
IP Date Comment Categories
🇩🇪 158.94.208.136
RDP connection attempt for user "unknown"
Port Scan Hacking
🇵🇰 139.135.59.230
Port Scan Web App Attack
🇧🇪 198.235.24.231
FTP unauthorized access: "AUTH TLS"
FTP Brute-Force Brute-Force
🇵🇰 103.26.82.92
TELNET unauthorized access: "start"
Brute-Force IoT Targeted
🇺🇸 185.180.141.45
FTP unauthorized access: "AUTH TLS"
FTP Brute-Force Brute-Force
🇳🇱 94.154.43.140
HTTP attack detected: GET /login (auth_bruteforce). UA: Go-http-client/1.1
Port Scan Web App Attack
🇩🇪 130.12.180.51
SSH brute-force login detected. Automated IDS report.
Brute-Force SSH
🇩🇪 138.124.33.255
SSH brute-force login detected. Automated IDS report.
Brute-Force SSH
🇺🇸 172.110.223.149
FTP unauthorized access: "USER PlcmSpIp"
FTP Brute-Force Brute-Force
🇮🇩 103.253.244.28
RDP connection attempt for user "unknown"
Port Scan Hacking
🇳🇱 77.239.124.108
SSH brute-force login detected. Automated IDS report.
Brute-Force SSH
🇸🇬 64.49.8.54
Bad Web Bot Web App Attack
🇮🇳 103.149.197.34
RDP connection attempt for user "unknown"
Port Scan Hacking
🇬🇧 5.226.140.12
Redis unauthorized command: "PING"
Port Scan Hacking
🇩🇪 69.5.169.230
Redis unauthorized command: "PING"
Port Scan Hacking
🇵🇭 165.154.100.252
MSSQL authentication attempt: user="" host="Nmap"
Hacking Brute-Force
🇳🇱 91.92.47.90
SSH brute-force login detected. Automated IDS report.
Brute-Force SSH
🇵🇰 202.163.107.242
TELNET unauthorized access: "start"
Brute-Force IoT Targeted
🇨🇦 85.217.149.7
SMTP abuse detected: "EHLO"
Email Spam Brute-Force
🇸🇬 64.49.8.54
Bad Web Bot Web App Attack
🇺🇸 44.220.185.76
SSH brute-force login detected. Automated IDS report.
Brute-Force SSH
🇵🇰 223.123.124.180
TELNET unauthorized access: "start"
Brute-Force IoT Targeted
🇳🇱 159.65.193.17
SMTP abuse detected: "EHLO 85.85.176.171"
Email Spam Brute-Force
🇧🇷 179.167.204.162
Bad Web Bot Web App Attack
🇳🇱 217.60.11.126
VNC unauthorized session established.
Port Scan Hacking