User THP SecurityTeam joined AbuseIPDB in July 2021 and has reported 553 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 136.107.16.215 |
25 Apache Shiro Improper Authentication Vulnerability
|
Hacking Web App Attack | |
| 🇬🇧 185.253.98.52 |
Browser watchTowrwatchTowrwatchTowrwatchTowrwatchTowrwatchTowrwatchTowr. 08-23-2026; 09:35:46
|
Hacking Web App Attack | |
| 🇺🇸 104.222.31.70 |
"host.name.com/jnoj/web/polygon/problem/viewfile?id=1&name=../../../../../../../etc/passwd"
|
Hacking Web App Attack | |
| 🇺🇸 71.6.158.166 |
password spray
|
Hacking Web App Attack | |
| 🇺🇸 54.237.234.26 |
UPDATE: Looking for "/terraform.tfstate"
|
Hacking Web App Attack | |
| 🇺🇸 54.237.234.26 |
Directory traversal attempts. /../../../../../../../app/service-account.json.
|
Hacking | |
| 🇺🇸 2.24.104.121 |
Phishing payload running on host actionmadezone.top, which is this IP.
|
Phishing Hacking | |
| 🇸🇨 196.251.121.142 |
|
Hacking Web App Attack | |
| 🇺🇸 52.146.20.92 |
React Server Components Remote Code Execution Vulnerability
|
Hacking Web App Attack | |
| 🇺🇸 172.104.17.15 |
I believe this is the scanner from SecurityScorecard.com. Not malicious.
|
Port Scan | |
| 🇪🇸 87.106.229.210 |
|
Phishing Hacking | |
| 🇺🇸 162.158.79.192 |
|
Hacking | |
| 🇺🇸 172.233.183.40 |
hitting TCP 1981, 5567, 9999, 2201, 3101, 3067, 2018, 38589, 89, 86, 11, 8448, etc...
|
Port Scan Hacking | |
| 🇦🇺 134.199.149.1 |
Microsoft Windows HTTP.sys Remote Code Execution Vulnerability
|
Hacking Web App Attack | |
| 🇩🇪 43.157.43.100 |
Apache HTTP Server Path Traversal Vulnerability
|
Hacking Web App Attack | |
| 🇩🇪 144.31.236.17 |
password spray attack
|
Hacking Brute-Force Web App Attack | |
| 🇺🇸 207.231.105.137 |
|
Hacking Web App Attack | |
| 🇩🇪 85.215.192.100 |
Fired "/../../../../../../../../../bin/sh" at my host.
|
Hacking Web App Attack | |
| 🇺🇸 74.207.237.5 |
Host is searching for webserver vulnerabilities. For example, "/human.aspx?arg12=infotech"
|
Hacking Web App Attack | |
| 🇯🇵 210.238.109.136 |
smtp server sending docusign phishing emails.
|
Phishing Hacking | |
| 🇺🇸 66.23.230.182 |
Apache HTTP Server Path Traversal Vulnerability
|
Hacking | |
| 🇩🇪 144.31.236.17 |
Persistent password spray attacks.
|
Hacking Web App Attack | |
| 🇧🇪 80.200.28.28 |
Reports this IP is part of C2 network assoc with NPM supply chain attack according to OX Research.
|
Hacking | |
| 🇬🇧 91.109.118.85 |
This host is SMTP server sending phishing attacks.
|
Phishing Hacking | |
| 🇫🇷 98.98.144.135 |
phishing attack from fujiiinsurance.com had this IP in a C2 connection.
|
Phishing Hacking Exploited Host |