AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User xKaramx joined AbuseIPDB in June 2026 and has reported 24,613 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 159.65.233.253	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 7 session(s) and 56 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 7 session(s) and 56 logged event(s) from this address. Observed: post-authentication shell activity consistent with botnet loader/dropper behaviour. Sample credentials attempted: 888888, pass, password, root. Reported automatically from honeypot telemetry. show less	Hacking Brute-Force IoT Targeted
🇩🇪 159.223.18.78	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇳🇱 158.94.211.230	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇫🇷 158.220.106.54	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇫🇷 157.143.132.32	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇯🇵 156.227.234.198	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 7 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 7 request(s) from this address. Observed: CGI path traversal to shell execution. Reported automatically from honeypot telemetry. show less	Hacking SQL Injection Web App Attack
🇳🇱 154.6.145.14	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇵🇰 153.117.50.123	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 15 session(s) and 45 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 15 session(s) and 45 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇵🇰 153.117.40.46	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇵🇰 153.117.38.52	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇵🇰 153.117.13.184	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇺🇸 151.243.18.111	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇮🇹 151.0.208.41	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 47 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 47 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: admin. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇮🇳 15.252.71.46	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: environment/secrets file harvesting. Reported automatically from honeypot telemetry. show less	Hacking Bad Web Bot Web App Attack
🇮🇳 15.252.142.243	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇵🇰 144.48.130.13	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇺🇸 144.225.6.182	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇺🇸 143.198.58.195	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇺🇸 143.198.191.92	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇩🇪 142.93.175.59	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇰🇷 14.46.10.48	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 20 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 20 logged event(s) from this address. Observed: credential set includes known IoT/DVR default passwords associated with Mirai-family botnets. Sample credentials attempted: root, vizxv. Reported automatically from honeypot telemetry. show less	Hacking Brute-Force IoT Targeted
🇰🇷 14.33.48.192	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 10 session(s) and 126 logged event(s) from this address. Obser ... show more SSH/Telnet honeypot (telnet) recorded 10 session(s) and 126 logged event(s) from this address. Observed: credential set includes known IoT/DVR default passwords associated with Mirai-family botnets. Sample credentials attempted: "??$, 123456, 185$*9 h, \x8f\x8f\x8f\x8f, \xc4\xd2\xc6\xc6\x90, \xcc\xd1\xd1\xca. Reported automatically from honeypot telemetry. show less	Hacking Brute-Force IoT Targeted
🇵🇰 139.135.60.92	14 Sep 2026	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇵🇰 139.135.60.178	14 Sep 2026	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: embedded DVR/NVR/router endpoint exploitation; login endpoint brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇳🇱 138.226.239.234	14 Sep 2026	SSH/Telnet honeypot (ssh) recorded 23 session(s) and 262 logged event(s) from this address. Observed ... show more SSH/Telnet honeypot (ssh) recorded 23 session(s) and 262 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: operator, password, root, support, ubnt, user. Reported automatically from honeypot telemetry. show less	Brute-Force SSH