User Scriptkitty joined AbuseIPDB in December 2022 and has reported 86 IP addresses.
Standing (weight) is good.
INACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇮🇳 117.215.53.218 |
mirai botnet activity
|
Hacking | |
| 🇺🇸 18.232.177.132 |
enum'ing subdomains, bind version, ports
|
Hacking | |
| 🇳🇱 196.251.118.83 |
web app exploit attempts
|
Hacking | |
| 🇷🇺 94.243.9.237 |
Mirai botnet hack attempts
|
Hacking | |
| 🇨🇦 142.44.241.246 |
scanning for sftp.json files
|
Hacking | |
| 🇺🇸 44.213.66.235 |
subdomain enumeration, bind version checks, etc
|
Hacking | |
| 🇺🇸 3.223.254.187 |
attempted sqli injection
|
Hacking | |
| 🇺🇸 46.21.157.200 |
scanning w/ fasthttp
|
Hacking | |
| 🇺🇸 143.198.190.57 |
ET Threatview.io High Confidence Cobalt Strike C2 IP group
Scanning Ports
|
Port Scan | |
| 🇳🇱 45.144.212.238 |
attempted webapp exploits
|
Web App Attack | |
| 🇮🇳 117.206.107.151 |
Miria agent wget to /tmp in logs,
User-Agent: Hello, world
|
Hacking IoT Targeted | |
| 🇺🇸 128.31.0.13 |
web app scanning
|
Web App Attack | |
| 🇺🇸 74.82.47.194 |
web app attack
|
Web App Attack | |
| 🇳🇱 93.123.109.58 |
WP Plugin Gravity Forms Exploitation Attempt (Shell Upload)
|
Web App Attack | |
| 🇺🇸 3.129.128.50 |
port scanning
|
Port Scan | |
| 🇳🇱 87.121.79.85 |
telnet port scanning
|
Port Scan | |
| 🇸🇬 68.183.188.161 |
probing/scanning for webapp vulns
|
Port Scan Hacking Web App Attack | |
| 🇺🇸 185.150.189.25 |
Scanning with masscan
|
Port Scan | |
| 🇺🇸 185.121.176.240 |
phishing
|
Phishing | |
| 🇺🇸 173.245.202.76 |
impersonation/gift card scam emails
|
Fraud Orders | |
| 🇺🇸 23.175.50.142 |
ownCloud Information Disclosure Attempt (CVE-2023-49103)
|
Web App Attack | |
| 🇺🇸 40.112.192.103 |
Mirai Botnet indicators
|
Hacking | |
| 🇺🇸 181.214.107.7 |
probing for CMS vulns via python-requests UA
|
Hacking | |
| 🇺🇸 79.127.148.139 |
python UA - unauthorized probing for Joomla vulnerabilities
|
Web App Attack | |
| 🇺🇸 45.61.140.74 |
vpn password spraying
|
Brute-Force |