User whatda joined AbuseIPDB in April 2026 and has reported 41,539 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 137.184.153.68 |
HTTP attack detected: GET / (probe). UA: Mozilla/5.0 zgrab/0.x
|
Web App Attack Port Scan | |
| 🇵🇰 124.29.247.4 |
HTTP attack detected: GET /boaform/admin/formLogin?username=admin&psd=admin (auth_bruteforce). UA:
|
Web App Attack Port Scan | |
| 🇹🇷 78.181.73.173 |
RDP connection attempt for user "administr"
|
Hacking Port Scan | |
| 🇺🇸 184.105.139.68 |
SMTP abuse detected: "GET / HTTP/1.1"
|
Email Spam Brute-Force | |
| 🇺🇸 20.80.87.101 |
Raw/malformed SNMP connection or packet
|
Hacking Port Scan | |
| 🇺🇸 66.132.159.137 |
SMTP abuse detected: "EHLO www.censys.io"
|
Email Spam Brute-Force | |
| 🇺🇸 18.116.101.220 |
RDP connection attempt for user "zgrab"
|
Hacking Port Scan | |
| 🇧🇩 103.171.69.64 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇰🇷 158.180.79.132 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇦🇲 176.32.193.16 |
Redis unauthorized command: "info"
|
Hacking Port Scan | |
| 🇷🇺 45.91.64.10 |
MySQL enumeration query → Rogue INFILE trap: "SHOW databases"
|
Hacking Brute-Force | |
| 🇳🇱 109.160.32.167 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇭🇰 156.225.1.114 |
FTP unauthorized access: "USER anonymous"
|
FTP Brute-Force Brute-Force | |
| 🇰🇷 121.188.236.128 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇺🇸 129.121.100.45 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇺🇸 142.93.2.126 |
HTTP attack detected: GET / (probe). UA:
|
Web App Attack Port Scan | |
| 🇧🇬 45.88.138.47 |
RDP connection attempt for user "mstsc"
|
Hacking Port Scan | |
| 🇺🇸 137.184.210.41 |
|
Web App Attack Port Scan | |
| 🇺🇸 159.223.153.121 |
|
Web App Attack Port Scan | |
| 🇨🇦 139.177.194.222 |
|
Web App Attack Port Scan | |
| 🇺🇸 45.79.192.205 |
HTTP attack detected: POST /v1/statement (probe). UA: python-urllib3/2.8.0
|
Web App Attack Port Scan | |
| 🇺🇸 23.239.4.46 |
|
Web App Attack Port Scan | |
| 🇺🇸 170.187.147.114 |
|
Web App Attack Port Scan | |
| 🇨🇳 14.103.118.197 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force | |
| 🇰🇷 106.243.155.71 |
SSH brute-force login detected. Automated IDS report.
|
SSH Brute-Force |