AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User xKaramx joined AbuseIPDB in June 2026 and has reported 13,973 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇱 45.148.10.13	11 hours ago	HTTP honeypot (internet-facing deception server) observed 233 request(s) from this address. Observed ... show more HTTP honeypot (internet-facing deception server) observed 233 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Hacking SQL Injection Web App Attack
🇳🇱 45.148.10.125	11 hours ago	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇹🇷 45.139.199.21	11 hours ago	HTTP honeypot (internet-facing deception server) observed 2 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 2 request(s) from this address. Observed: git repository and credential file harvesting. Reported automatically from honeypot telemetry. show less	Hacking Bad Web Bot Web App Attack
🇬🇧 45.133.173.105	11 hours ago	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇸🇬 43.98.164.139	11 hours ago	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇸🇬 43.134.115.223	11 hours ago	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇯🇵 42.125.196.116	11 hours ago	SSH/Telnet honeypot (ssh) recorded 2 session(s) and 12 logged event(s) from this address. Observed: ... show more SSH/Telnet honeypot (ssh) recorded 2 session(s) and 12 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: 1234, operator, qwerty12, user1. Reported automatically from honeypot telemetry. show less	Brute-Force SSH
🇪🇬 41.40.60.57	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 14 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 14 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: S2fGqNFs, default. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇪🇬 41.236.101.9	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 14 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 14 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: default. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇮🇳 40.81.230.77	11 hours ago	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇨🇳 39.162.176.156	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 21 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 21 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: admin. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇨🇳 39.107.142.38	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 34 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 34 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: admin. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇨🇳 39.105.64.243	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 29 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 29 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: !'1&, $5''. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇻🇪 38.76.139.52	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 21 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 21 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: admin. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇺🇸 38.68.134.13	11 hours ago	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇺🇸 38.148.20.75	11 hours ago	HTTP honeypot (internet-facing deception server) observed 8 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 8 request(s) from this address. Observed: PHPUnit eval-stdin RCE attempts (CVE-2017-9841); CGI path traversal to shell execution; login endpoint brute-force attempts; webshell and backdoor probing. Reported automatically from honeypot telemetry. show less	Hacking SQL Injection Brute-Force Bad Web Bot Web App Attack
🇻🇪 38.137.233.55	11 hours ago	SSH/Telnet honeypot (telnet) recorded 2 session(s) and 52 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 2 session(s) and 52 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: root, telnetadmin. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇭🇺 37.76.125.1	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 48 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 48 logged event(s) from this address. Observed: post-authentication shell activity consistent with botnet loader/dropper behaviour. Sample credentials attempted: admin. Reported automatically from honeypot telemetry. show less	Hacking Brute-Force IoT Targeted
🇫🇷 37.60.245.234	11 hours ago	HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 1 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Bad Web Bot Web App Attack
🇳🇱 37.49.225.20	11 hours ago	HTTP honeypot (internet-facing deception server) observed 2 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 2 request(s) from this address. Observed: automated scanning and path enumeration. Reported automatically from honeypot telemetry. show less	Hacking SQL Injection Web App Attack
🇷🇺 37.28.177.141	11 hours ago	SSH/Telnet honeypot (ssh) recorded 2 session(s) and 12 logged event(s) from this address. Observed: ... show more SSH/Telnet honeypot (ssh) recorded 2 session(s) and 12 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: qwertyuiop, root, ubnt, ubnt2005. Reported automatically from honeypot telemetry. show less	Brute-Force SSH
🇰🇷 36.39.206.25	11 hours ago	SSH/Telnet honeypot (telnet) recorded 1 session(s) and 47 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 1 session(s) and 47 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: 1234, root. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇧🇪 35.233.111.70	11 hours ago	SSH/Telnet honeypot (telnet) recorded 6 session(s) and 40 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 6 session(s) and 40 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: GET / HTTP/1.0, OPTIONS sip:nm SIP/2.0, Via: SIP/2.0/TCP nm;branch=foo. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇧🇪 34.62.93.46	11 hours ago	SSH/Telnet honeypot (ssh) recorded 8 session(s) and 29 logged event(s) from this address. Observed: ... show more SSH/Telnet honeypot (ssh) recorded 8 session(s) and 29 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force SSH
🇧🇪 34.62.204.189	11 hours ago	SSH/Telnet honeypot (telnet) recorded 6 session(s) and 40 logged event(s) from this address. Observe ... show more SSH/Telnet honeypot (telnet) recorded 6 session(s) and 40 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: GET / HTTP/1.0, OPTIONS sip:nm SIP/2.0, Via: SIP/2.0/TCP nm;branch=foo. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted