AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User warriors joined AbuseIPDB in December 2020 and has reported 175,727 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇨🇳 14.21.159.218	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload stag ... show more Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=12. username=Administrator. Echo signature(s): ZCPRWG, TUHUZOLZ. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇮🇳 103.170.85.7	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload stag ... show more Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=156. username=root. Echo signature(s): EPAFAH, KCOAOENF. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇵🇰 153.117.15.187	03 Nov 2026	Telnet honeypot observed a Mirai-style shell probe, and a Mirai/Gafgyt-style payload staging attempt ... show more Telnet honeypot observed a Mirai-style shell probe, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=40. username=admin. Echo signature(s): RXATLX, PUGZNLAN. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇵🇰 153.117.69.192	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray, and a Mirai-style shell probe, and a ... show more Telnet honeypot observed an automated Telnet credential spray, and a Mirai-style shell probe, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=151. username=root. Echo signature(s): XBOIRV, QTTYSULF. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇺🇸 38.96.196.74	03 Nov 2026	Telnet honeypot observed a Mirai-style BusyBox shell-validation probe against TCP/23. username=admin ... show more Telnet honeypot observed a Mirai-style BusyBox shell-validation probe against TCP/23. username=admin. Commands: sh, shell, enable, system, ping, busybox hisilicon, busybox cat, cat. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇫🇷 85.217.140.51	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray against TCP/23. username=00000000.	Brute-Force IoT Targeted
🇺🇦 94.179.67.110	03 Nov 2026	Telnet honeypot observed a Gafgyt/Bashlite malware loader attempt against TCP/23. username=admin. Ec ... show more Telnet honeypot observed a Gafgyt/Bashlite malware loader attempt against TCP/23. username=admin. Echo signature(s): GAYFGT. Commands: enable, system, shell, sh, linuxshell, enablelinuxshell, ping, echo, cd, cat. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇸🇬 72.46.87.247	03 Nov 2026	Telnet honeypot observed unclassified post-login shell activity against TCP/23. sessions=2. username ... show more Telnet honeypot observed unclassified post-login shell activity against TCP/23. sessions=2. username=root. Commands: uname, cat. show less	Hacking Brute-Force IoT Targeted
🇦🇱 77.247.91.37	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray against TCP/23. username=root.	Brute-Force IoT Targeted
🇨🇳 42.234.47.84	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload stag ... show more Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=10. username=mother. Echo signature(s): FWNYQI, QIGORRZT. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇨🇳 122.96.50.152	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload stag ... show more Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=190. username=root. Echo signature(s): IIYEEZ, KGKJFGBC. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇨🇳 122.97.212.213	03 Nov 2026	Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=192. ... show more Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=192. username=root. Echo signature(s): IIYEEZ, KGKJFGBC. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇨🇴 179.32.51.17	03 Nov 2026	Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Comma ... show more Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Commands: enable, system, shell, sh, linuxshell, ping, busybox. show less	Hacking Brute-Force IoT Targeted
🇺🇦 213.174.21.59	03 Nov 2026	Telnet honeypot observed a Gafgyt/Bashlite malware loader attempt against TCP/23. username=admin. Ec ... show more Telnet honeypot observed a Gafgyt/Bashlite malware loader attempt against TCP/23. username=admin. Echo signature(s): GAYFGT. Commands: enable, system, shell, sh, linuxshell, enablelinuxshell, ping, echo, cd, cat. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇨🇳 61.52.83.174	03 Nov 2026	Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=14. u ... show more Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=14. username=1234. Echo signature(s): WICAQJ, POFYVKZQ. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇺🇸 97.211.236.174	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray against TCP/23. username=root.	Brute-Force IoT Targeted
🇨🇳 123.8.62.248	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload stag ... show more Telnet honeypot observed an automated Telnet credential spray, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=5. username=cunmgadmin. Echo signature(s): ILHKNQ, ILTQADMV. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇺🇦 37.53.41.0	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray against TCP/23. username=root.	Brute-Force IoT Targeted
🇨🇳 49.79.167.210	03 Nov 2026	Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Comma ... show more Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Commands: enable, system, shell, sh, linuxshell, ping, busybox. show less	Hacking Brute-Force IoT Targeted
🇮🇳 59.180.148.43	03 Nov 2026	Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=5. us ... show more Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=5. username=gdcuadmin. Echo signature(s): RTSWXD, KIOXQSBB. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇧🇷 201.139.216.39	03 Nov 2026	Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=e8ehomeasb. ... show more Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=e8ehomeasb. Commands: enable, system, shell, sh, linuxshell, ping, busybox. show less	Hacking Brute-Force IoT Targeted
🇹🇷 85.100.25.167	03 Nov 2026	Telnet honeypot observed an automated Telnet credential spray against TCP/23. username=root.	Brute-Force IoT Targeted
🇵🇰 139.135.45.1	03 Nov 2026	Telnet honeypot observed a Mirai-style shell probe, and a Mirai/Gafgyt-style payload staging attempt ... show more Telnet honeypot observed a Mirai-style shell probe, and a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=92. username=root. Echo signature(s): FEXHOO, OQSSFVQM. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
🇧🇷 200.252.141.201	03 Nov 2026	Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Comma ... show more Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Commands: enable, system, shell, sh, linuxshell, ping, busybox. show less	Hacking Brute-Force IoT Targeted
🇰🇪 102.204.176.41	03 Nov 2026	Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Comma ... show more Telnet honeypot observed unclassified post-login shell activity against TCP/23. username=root. Commands: enable, system, shell, sh, linuxshell, ping, busybox. show less	Hacking Brute-Force IoT Targeted