AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Kiya6955 joined AbuseIPDB in September 2026 and has reported 310 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇫🇮 157.180.80.98	10 Nov 2026	Hello, We received repeated high-volume traffic from 157.180.80.98 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 157.180.80.98 aimed at our network (target 81.12.35.245). We saw this source in 3 incidents over the last 7 days, hitting 2 addresses of ours. The most recent one ended at 2026-11-10 20:52:41 UTC. Peak from this source alone in that incident: 100762 pps / 1204.5 Mbps, active for about 3s. Pattern: Combined / Multi-vector (severity MODERATE). Traffic detail: protocols tcp 98%, udp 2%; top dest port(s) tcp/2333, tcp/8080, udp/8080; sample confidence high (336 samples). Measured with sFlow: high confidence, 336 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇫🇮 2.29.122.163	10 Nov 2026	Hello, We received repeated high-volume traffic from 2.29.122.163 aimed at our network (target 81.1 ... show more Hello, We received repeated high-volume traffic from 2.29.122.163 aimed at our network (target 81.12.35.245). We saw this source in 3 incidents over the last 7 days, hitting 2 addresses of ours. The most recent one ended at 2026-11-10 20:48:34 UTC. Peak from this source alone in that incident: 181043 pps / 2141.8 Mbps, active for about 4s. Pattern: Combined / Multi-vector (severity MODERATE). Traffic detail: protocols tcp 99%, udp 1%; top dest port(s) tcp/2333, tcp/8080, udp/8080; sample confidence high (324 samples). Measured with sFlow: high confidence, 324 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 46.245.92.98	09 Nov 2026	Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.1 ... show more Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.12.34.70). We saw this source in 5 incidents over the last 7 days, hitting 4 addresses of ours. The most recent one ended at 2026-11-09 18:27:13 UTC. Peak from this source alone in that incident: 827392 pps / 10047.8 Mbps, active for about 9s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%; top dest port(s) tcp/55744, tcp/55724, tcp/55732; sample confidence very high (777 samples). Measured with sFlow: very high confidence, 777 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇩🇪 49.12.112.124	09 Nov 2026	Hello, We received repeated high-volume traffic from 49.12.112.124 aimed at our network (target 85. ... show more Hello, We received repeated high-volume traffic from 49.12.112.124 aimed at our network (target 85.133.195.138). We saw this source in 3 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-11-09 14:39:22 UTC. Peak from this source alone in that incident: 305562 pps / 3710.7 Mbps, active for about 4s. Pattern: Bandwidth Saturation (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/49515, tcp/38525, tcp/42101; sample confidence high (343 samples). Measured with sFlow: high confidence, 343 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇫🇷 185.113.249.181	08 Nov 2026	Hello, We received repeated high-volume traffic from 185.113.249.181 aimed at our network (target 8 ... show more Hello, We received repeated high-volume traffic from 185.113.249.181 aimed at our network (target 81.12.83.0/24). We saw this source in 3 incidents over the last 7 days, hitting 3 addresses of ours. The most recent one ended at 2026-11-08 19:59:09 UTC. Peak from this source alone in that incident: 72909 pps / 624.1 Mbps, active for about 3s. Pattern: Carpet Bombing (/24 packet rate) (severity MODERATE). Traffic detail: protocols udp 91%, tcp 9%, tunnel 0%; top dest port(s) udp/80, tcp/25565, tcp/2097; sample confidence very high (2460 samples). Measured with sFlow: very high confidence, 2460 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇫🇷 188.165.233.137	08 Nov 2026	Hello, We received repeated high-volume traffic from 188.165.233.137 aimed at our network (target 8 ... show more Hello, We received repeated high-volume traffic from 188.165.233.137 aimed at our network (target 81.12.83.0/24). We saw this source in 2 incidents over the last 7 days, hitting 2 addresses of ours. The most recent one ended at 2026-11-08 19:59:09 UTC. Peak from this source alone in that incident: 50790 pps / 434.8 Mbps, active for about 3s. Pattern: Carpet Bombing (/24 packet rate) (severity MODERATE). Traffic detail: protocols udp 91%, tcp 9%, tunnel 0%; top dest port(s) udp/80, tcp/25565, tcp/2097; sample confidence very high (2460 samples). Measured with sFlow: very high confidence, 2460 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 92.61.183.119	08 Nov 2026	Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 81.12.83.132). We saw this source in 6 incidents over the last 7 days, hitting 6 addresses of ours. The most recent one ended at 2026-11-08 16:16:46 UTC. Peak from this source alone in that incident: 602931 pps / 7322.0 Mbps, active for about 5s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%, icmp 0%; top dest port(s) tcp/56944, tcp/56932, tcp/56920; sample confidence very high (634 samples). Measured with sFlow: very high confidence, 634 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 46.245.92.98	07 Nov 2026	Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.1 ... show more Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.12.83.132). We saw this source in 5 incidents over the last 7 days, hitting 4 addresses of ours. The most recent one ended at 2026-11-07 17:41:59 UTC. Peak from this source alone in that incident: 568525 pps / 6904.2 Mbps, active for about 4s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%; top dest port(s) tcp/32202, tcp/32176, tcp/32162; sample confidence very high (705 samples). Measured with sFlow: very high confidence, 705 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇺🇸 172.110.223.179	07 Nov 2026	Hello, We received repeated high-volume traffic from 172.110.223.179 aimed at our network (target 1 ... show more Hello, We received repeated high-volume traffic from 172.110.223.179 aimed at our network (target 172.110.223.179). We saw this source in 3 incidents over the last 7 days. The most recent one ended at 2026-11-07 11:13:31 UTC. Peak from this source alone in that incident: 170394 pps / 557.2 Mbps, active for about 4s. Pattern: Fast Horizontal Sweep (severity ELEVATED). Traffic detail: protocols udp 100%; top dest port(s) udp/2050, udp/4017, udp/8092; sample confidence high (208 samples). Measured with sFlow: high confidence, 208 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇩🇪 188.34.165.79	06 Nov 2026	Hello, We received repeated high-volume traffic from 188.34.165.79 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 188.34.165.79 aimed at our network (target 81.12.83.195). We saw this source in 3 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-11-06 20:19:52 UTC. Peak from this source alone in that incident: 394854 pps / 594.2 Mbps, active for about 5s. Pattern: ACK / PSH-ACK Flood (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/5977, tcp/443; sample confidence high (381 samples). Measured with sFlow: high confidence, 381 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 46.245.92.98	06 Nov 2026	Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 185. ... show more Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 185.215.231.50). We saw this source in 4 incidents over the last 7 days, hitting 4 addresses of ours. The most recent one ended at 2026-11-06 01:22:59 UTC. Peak from this source alone in that incident: 618496 pps / 7511.0 Mbps, active for about 4s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%; top dest port(s) tcp/38994, tcp/38982, tcp/38988; sample confidence very high (755 samples). Measured with sFlow: very high confidence, 755 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 92.61.183.119	06 Nov 2026	Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 178 ... show more Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 178.239.145.19). We saw this source in 4 incidents over the last 7 days, hitting 4 addresses of ours. The most recent one ended at 2026-11-06 00:47:10 UTC. Peak from this source alone in that incident: 514458 pps / 6238.1 Mbps, active for about 3s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%; top dest port(s) tcp/45088, tcp/45062, tcp/45078; sample confidence very high (629 samples). Measured with sFlow: very high confidence, 629 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 46.245.92.98	04 Nov 2026	Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.1 ... show more Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.12.92.125). We saw this source in 3 incidents over the last 7 days, hitting 3 addresses of ours. The most recent one ended at 2026-11-04 11:58:33 UTC. Peak from this source alone in that incident: 301466 pps / 3661.0 Mbps, active for about 4s. Pattern: Bandwidth Saturation (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/25690, tcp/25684, tcp/25686; sample confidence high (314 samples). Measured with sFlow: high confidence, 314 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 92.61.183.119	03 Nov 2026	Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 91. ... show more Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 91.239.192.56). We saw this source in 5 incidents over the last 7 days, hitting 5 addresses of ours. The most recent one ended at 2026-11-03 16:59:16 UTC. Peak from this source alone in that incident: 791347 pps / 9103.7 Mbps, active for about 14s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%; top dest port(s) tcp/57864, tcp/57884, tcp/57878; sample confidence very high (831 samples). Measured with sFlow: very high confidence, 831 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 92.61.183.119	02 Nov 2026	Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 81.12.34.76). We saw this source in 5 incidents over the last 7 days, hitting 5 addresses of ours. The most recent one ended at 2026-11-02 00:26:11 UTC. Peak from this source alone in that incident: 653722 pps / 7938.8 Mbps, active for about 9s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%; top dest port(s) tcp/48408, tcp/48390, tcp/48370; sample confidence very high (647 samples). Measured with sFlow: very high confidence, 647 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 46.245.92.98	01 Nov 2026	Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.1 ... show more Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.12.92.130). We saw this source in 3 incidents over the last 7 days, hitting 3 addresses of ours. The most recent one ended at 2026-11-01 21:16:32 UTC. Peak from this source alone in that incident: 610304 pps / 6825.6 Mbps, active for about 6s. Pattern: Bandwidth Saturation (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/17034, tcp/17028, tcp/17032; sample confidence very high (591 samples). Measured with sFlow: very high confidence, 591 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 46.245.92.98	30 Oct 2026	Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.1 ... show more Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.12.92.110). We saw this source in 8 incidents over the last 7 days, hitting 7 addresses of ours. The most recent one ended at 2026-10-30 13:59:26 UTC. Peak from this source alone in that incident: 587366 pps / 7133.0 Mbps, active for about 6s. Pattern: Bandwidth Saturation (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/64050, tcp/64010, tcp/64066; sample confidence very high (515 samples). Measured with sFlow: very high confidence, 515 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇩🇪 91.107.157.70	29 Oct 2026	Hello, We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81.12.80.144). We saw this source in 7 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-29 16:58:15 UTC. Peak from this source alone in that incident: 372736 pps / 527.5 Mbps, active for about 4s. Pattern: ACK / PSH-ACK Flood (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/8880; sample confidence high (397 samples). Measured with sFlow: high confidence, 397 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 92.61.183.119	28 Oct 2026	Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 94. ... show more Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 94.183.240.162). We saw this source in 8 incidents over the last 7 days, hitting 7 addresses of ours. The most recent one ended at 2026-10-28 10:05:09 UTC. Peak from this source alone in that incident: 538214 pps / 6536.1 Mbps, active for about 5s. Pattern: Bandwidth Saturation (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/41040, tcp/41044, tcp/41074; sample confidence very high (443 samples). Measured with sFlow: very high confidence, 443 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇩🇪 91.107.157.70	27 Oct 2026	Hello, We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81.12.80.144). We saw this source in 3 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-27 22:58:26 UTC. Peak from this source alone in that incident: 273613 pps / 947.9 Mbps, active for about 3s. Pattern: ACK / PSH-ACK Flood (severity MODERATE). Traffic detail: protocols tcp 100%; top dest port(s) tcp/8880; sample confidence high (307 samples). Measured with sFlow: high confidence, 307 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 92.61.183.119	26 Oct 2026	Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 92.61.183.119 aimed at our network (target 81.12.83.133). We saw this source in 5 incidents over the last 7 days, hitting 4 addresses of ours. The most recent one ended at 2026-10-26 22:18:20 UTC. Peak from this source alone in that incident: 355533 pps / 4317.6 Mbps, active for about 7s. Pattern: Bandwidth Saturation (severity MODERATE). Traffic detail: protocols tcp 99%, tunnel 1%; top dest port(s) tcp/55830, tcp/55862, tcp/55854; sample confidence high (353 samples). Measured with sFlow: high confidence, 353 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇮🇷 46.245.92.98	26 Oct 2026	Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.1 ... show more Hello, We received repeated high-volume traffic from 46.245.92.98 aimed at our network (target 81.12.35.140). We saw this source in 10 incidents over the last 7 days, hitting 9 addresses of ours. The most recent one ended at 2026-10-26 20:27:07 UTC. Peak from this source alone in that incident: 829850 pps / 10077.7 Mbps, active for about 13s. Pattern: Bandwidth Saturation (severity ELEVATED). Traffic detail: protocols tcp 100%; top dest port(s) tcp/45532, tcp/45522, tcp/45542; sample confidence very high (770 samples). Measured with sFlow: very high confidence, 770 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇻🇳 160.191.46.101	24 Oct 2026	Hello, We received repeated high-volume traffic from 160.191.46.101 aimed at our network (target 81 ... show more Hello, We received repeated high-volume traffic from 160.191.46.101 aimed at our network (target 81.12.83.0/24). We saw this source in 3 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-24 10:52:03 UTC. Peak from this source alone in that incident: 79462 pps / 919.2 Mbps, active for about 4s. Pattern: Carpet Bombing (/24 bandwidth) (severity MODERATE). Traffic detail: protocols udp 94%, tcp 6%, tunnel 0%; top dest port(s) udp/80, tcp/2097, tcp/31415; sample confidence very high (2262 samples). Measured with sFlow: very high confidence, 2262 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇵🇱 93.158.234.66	24 Oct 2026	Hello, We received repeated high-volume traffic from 93.158.234.66 aimed at our network (target 81. ... show more Hello, We received repeated high-volume traffic from 93.158.234.66 aimed at our network (target 81.12.83.0/24). We saw this source in 2 incidents over the last 7 days, hitting 2 addresses of ours. The most recent one ended at 2026-10-24 10:52:03 UTC. Peak from this source alone in that incident: 69632 pps / 805.5 Mbps, active for about 7s. Pattern: Carpet Bombing (/24 bandwidth) (severity MODERATE). Traffic detail: protocols udp 94%, tcp 6%, tunnel 0%; top dest port(s) udp/80, tcp/2097, tcp/31415; sample confidence very high (2262 samples). Measured with sFlow: very high confidence, 2262 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host
🇺🇸 67.185.253.83	24 Oct 2026	Hello, We received repeated high-volume traffic from 67.185.253.83 aimed at our network (target 67. ... show more Hello, We received repeated high-volume traffic from 67.185.253.83 aimed at our network (target 67.185.253.83). We saw this source in 3 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-24 10:51:06 UTC. Peak from this source alone in that incident: 95846 pps / 1108.8 Mbps, active for about 4s. Pattern: Fast Horizontal Sweep (severity MODERATE). Traffic detail: protocols udp 100%; top dest port(s) udp/80; sample confidence high (117 samples). Measured with sFlow: high confidence, 117 samples at 1:4096 sampling. Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network. Regards, ParsAbr Network Abuse Automation show less	DDoS Attack Exploited Host