User THP SecurityTeam joined AbuseIPDB in July 2021 and has reported 562 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 45.61.144.161 |
watchTowr identified this IP as attacking Citrix Netscalers related to CVE-2026-88771.
|
Hacking | |
| 🇩🇪 213.209.159.25 |
Attacking Netscalers.
|
Web App Attack | |
| 🇺🇸 146.190.63.248 |
Trying RDP logins. Password spray.
|
Web App Attack Hacking | |
| 🇯🇵 149.104.78.141 |
|
Web App Attack Hacking | |
| 🇱🇻 194.152.32.89 |
This is an SMTP server sending phish from [email protected].
|
Phishing Hacking | |
| 🇺🇸 144.225.6.182 |
Apache HTTP Server Path Traversal Vulnerability
|
Web App Attack Hacking | |
| 🇺🇸 35.252.102.78 |
Apache Shiro Improper Authentication Vulnerability
|
Web App Attack Hacking | |
| 🇺🇸 103.215.74.26 |
React Server Components Remote Code Execution Vulnerability
|
Web App Attack Hacking | |
| 🇳🇱 77.239.124.117 |
Ruckus Wireless Admin Remote Code Execution Vulnerability
|
Web App Attack Hacking | |
| 🇺🇸 136.107.16.215 |
25 Apache Shiro Improper Authentication Vulnerability
|
Web App Attack Hacking | |
| 🇬🇧 185.253.98.52 |
Browser watchTowrwatchTowrwatchTowrwatchTowrwatchTowrwatchTowrwatchTowr. 08-23-2026; 09:35:46
|
Web App Attack Hacking | |
| 🇺🇸 104.222.31.70 |
"host.name.com/jnoj/web/polygon/problem/viewfile?id=1&name=../../../../../../../etc/passwd"
|
Web App Attack Hacking | |
| 🇺🇸 71.6.158.166 |
password spray
|
Web App Attack Hacking | |
| 🇺🇸 54.237.234.26 |
UPDATE: Looking for "/terraform.tfstate"
|
Web App Attack Hacking | |
| 🇺🇸 54.237.234.26 |
Directory traversal attempts. /../../../../../../../app/service-account.json.
|
Hacking | |
| 🇺🇸 2.24.104.121 |
Phishing payload running on host actionmadezone.top, which is this IP.
|
Phishing Hacking | |
| 🇸🇨 196.251.121.142 |
|
Web App Attack Hacking | |
| 🇺🇸 52.146.20.92 |
React Server Components Remote Code Execution Vulnerability
|
Web App Attack Hacking | |
| 🇺🇸 172.104.17.15 |
I believe this is the scanner from SecurityScorecard.com. Not malicious.
|
Port Scan | |
| 🇪🇸 87.106.229.210 |
|
Phishing Hacking | |
| 🇺🇸 162.158.79.192 |
|
Hacking | |
| 🇺🇸 172.233.183.40 |
hitting TCP 1981, 5567, 9999, 2201, 3101, 3067, 2018, 38589, 89, 86, 11, 8448, etc...
|
Port Scan Hacking | |
| 🇦🇺 134.199.149.1 |
Microsoft Windows HTTP.sys Remote Code Execution Vulnerability
|
Web App Attack Hacking | |
| 🇩🇪 43.157.43.100 |
Apache HTTP Server Path Traversal Vulnerability
|
Web App Attack Hacking | |
| 🇩🇪 144.31.236.17 |
password spray attack
|
Brute-Force Web App Attack Hacking |