User Scriptkitty joined AbuseIPDB in December 2022 and has reported 126 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇮🇳 117.206.101.45 |
mirai botnet
|
IoT Targeted Hacking | |
| 🇮🇩 125.165.62.124 |
Possible Apache Struts OGNL Expression Injection (CVE-2017-5638)
|
Hacking | |
| 🇺🇸 34.19.127.184 |
attempted Palo Alto GlobalProtect Session Cookie Command Injection Attempt
|
Hacking | |
| 🇺🇸 192.210.134.90 |
Phishing email origin
|
Phishing | |
| 🇩🇪 86.38.98.17 |
Possible Oracle SQL Injection utl_inaddr call in URI
|
Web App Attack Hacking | |
| 🇺🇸 8.34.210.36 |
|
Port Scan | |
| 🇺🇸 3.144.1.156 |
enumerating UAs against /mail and /webmail uris
|
Hacking | |
| 🇺🇸 34.19.127.189 |
CVE-2024-3400 attempts
|
Web App Attack | |
| 🇺🇸 8.34.210.61 |
Scanning for sensitive files
|
Hacking | |
| 🇺🇸 34.19.127.196 |
Session Cookie Command Injection Attempt
|
Hacking | |
| 🇸🇬 129.150.46.190 |
Local File Inclusion Attempt
|
Hacking | |
| 🇺🇸 34.19.127.185 |
Palo Alto GlobalProtect Session Cookie Command Injection Attempt
|
Hacking | |
| 🇺🇸 155.94.133.153 |
User-Agent: libredtail-http
attempting connections to hXXp://178[.]16[.]55[.]224/sh
|
Hacking | |
| 🇫🇷 172.232.43.23 |
scanning for backdoors
|
Hacking | |
| 🇩🇪 172.105.80.201 |
scanning for backdoors
|
Hacking | |
| 🇮🇳 117.215.53.218 |
mirai botnet activity
|
Hacking | |
| 🇺🇸 18.232.177.132 |
enum'ing subdomains, bind version, ports
|
Hacking | |
| 🇳🇱 196.251.118.83 |
web app exploit attempts
|
Hacking | |
| 🇷🇺 94.243.9.237 |
Mirai botnet hack attempts
|
Hacking | |
| 🇨🇦 142.44.241.246 |
scanning for sftp.json files
|
Hacking | |
| 🇺🇸 44.213.66.235 |
subdomain enumeration, bind version checks, etc
|
Hacking | |
| 🇺🇸 3.223.254.187 |
attempted sqli injection
|
Hacking | |
| 🇺🇸 46.21.157.200 |
scanning w/ fasthttp
|
Hacking | |
| 🇺🇸 143.198.190.57 |
ET Threatview.io High Confidence Cobalt Strike C2 IP group
Scanning Ports
|
Port Scan | |
| 🇳🇱 45.144.212.238 |
attempted webapp exploits
|
Web App Attack |