User spannella joined AbuseIPDB in May 2026 and has reported 971 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇷🇺 176.97.38.29 |
12 port 5907 VNC probes; state infrastructure abuse (SPB Enterprise Russia)
|
Port Scan | |
| 🇱🇻 194.165.17.6 |
18 RDP port 3389 events; Flyservers Latvia hosting abuse
|
Port Scan Brute-Force | |
| 🇨🇦 85.217.149.60 |
24 SSH port 22 events on internal IPs; reconnaissance or lateral movement probing from Modat
|
Port Scan SSH | |
| 🇳🇱 5.253.86.163 |
36 RDP port 3389 events; ColocaTel subnet peer, coordinated campaign
|
Port Scan Brute-Force | |
| 🇳🇱 5.253.84.38 |
36 RDP port 3389 events; ColocaTel hosting abuse for brute-force reconnaissance
|
Port Scan Brute-Force | |
| 🇺🇸 23.94.122.111 |
36 port 5907 VNC probes; HostPapa infrastructure abuse
|
Port Scan | |
| 🇺🇸 23.234.73.208 |
54 RDP port 3389 events; tzulo USA hosting abuse for RDP targeting
|
Port Scan Brute-Force | |
| 🇺🇸 173.249.201.166 |
54 port 5907 VNC probes across multiple days; persistent port-scanning from tzulo hosting
|
Port Scan | |
| 🇵🇱 45.227.253.204 |
54 RDP port 3389 events; same subnet as .202, coordinated brute-force activity
|
Port Scan Brute-Force | |
| 🇵🇱 45.227.253.202 |
63 RDP port 3389 events; part of coordinated RDP scanning campaign
|
Port Scan Brute-Force | |
| 🇱🇹 45.227.254.22 |
63 RDP port 3389 SYN probes; brute-force reconnaissance or credential attack preparation
|
Port Scan Brute-Force | |
| 🇳🇱 185.82.202.141 |
213 port 5907 VNC probes; consistent port-scanning activity from hosting provider
|
Port Scan | |
| 🇮🇩 2.27.165.137 |
231 sustained port 5907 probes; horizontal port scanner targeting VNC
|
Port Scan | |
| 🇺🇸 15.204.132.78 |
579 SYN-only port 5907 (VNC) probes in 24h from OVH hosting; port-scanner or botnet reconnaissance
|
Port Scan Hacking | |
| 🇷🇺 176.97.38.29 |
100 VNC probes from Russian state entity ASN; geopolitical concern
|
Port Scan Hacking | |
| 🇱🇻 194.165.17.6 |
150 RDP scans from Flyservers Latvia; port-scanning infrastructure
|
Port Scan Hacking | |
| 🇨🇦 85.217.149.60 |
200 SSH probes to multiple internal IPs; multi-target reconnaissance
|
Port Scan SSH | |
| 🇳🇱 5.253.86.163 |
300 RDP scans from same ASN; coordinated scanning network
|
Port Scan Hacking | |
| 🇳🇱 5.253.84.38 |
300 RDP events from ColocaTel Netherlands; port scanning
|
Port Scan Hacking | |
| 🇺🇸 23.94.122.111 |
300 VNC probes from HostPapa; datacenter scanner
|
Port Scan Hacking | |
| 🇺🇸 23.234.73.208 |
450 RDP scans from Los Angeles datacenter; port-scan abuse
|
Port Scan Hacking | |
| 🇺🇸 173.249.201.166 |
450 VNC probes over 2 days; tzulo hosting provider abuse
|
Port Scan Hacking | |
| 🇵🇱 45.227.253.203 |
400 RDP events; coordinated with adjacent .202/.204
|
Port Scan Hacking | |
| 🇵🇱 45.227.253.204 |
450 RDP scans; same ASN cluster as .202 and .203
|
Port Scan Hacking | |
| 🇵🇱 45.227.253.202 |
525 RDP probes from Alviva infrastructure; botnet-like behavior
|
Port Scan Hacking |