User Scriptkitty joined AbuseIPDB in December 2022 and has reported 128 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 143.198.190.57 |
ET Threatview.io High Confidence Cobalt Strike C2 IP group
Scanning Ports
|
Port Scan | |
| 🇳🇱 45.144.212.238 |
attempted webapp exploits
|
Web App Attack | |
| 🇮🇳 117.206.107.151 |
Miria agent wget to /tmp in logs,
User-Agent: Hello, world
|
Hacking IoT Targeted | |
| 🇺🇸 128.31.0.13 |
web app scanning
|
Web App Attack | |
| 🇺🇸 74.82.47.194 |
web app attack
|
Web App Attack | |
| 🇳🇱 93.123.109.58 |
WP Plugin Gravity Forms Exploitation Attempt (Shell Upload)
|
Web App Attack | |
| 🇺🇸 3.129.128.50 |
port scanning
|
Port Scan | |
| 🇳🇱 87.121.79.85 |
telnet port scanning
|
Port Scan | |
| 🇸🇬 68.183.188.161 |
probing/scanning for webapp vulns
|
Port Scan Hacking Web App Attack | |
| 🇺🇸 185.150.189.25 |
Scanning with masscan
|
Port Scan | |
| 🇺🇸 185.121.176.240 |
phishing
|
Phishing | |
| 🇺🇸 173.245.202.76 |
impersonation/gift card scam emails
|
Fraud Orders | |
| 🇺🇸 23.175.50.142 |
ownCloud Information Disclosure Attempt (CVE-2023-49103)
|
Web App Attack | |
| 🇺🇸 40.112.192.103 |
Mirai Botnet indicators
|
Hacking | |
| 🇺🇸 181.214.107.7 |
probing for CMS vulns via python-requests UA
|
Hacking | |
| 🇺🇸 79.127.148.139 |
python UA - unauthorized probing for Joomla vulnerabilities
|
Web App Attack | |
| 🇺🇸 45.61.140.74 |
vpn password spraying
|
Brute-Force | |
| 🇺🇸 45.150.65.63 |
vpn password spraying
|
Brute-Force | |
| 🇺🇸 144.172.91.54 |
vpn password spraying
|
Brute-Force | |
| 🇺🇸 144.172.96.123 |
vpn password spraying
|
Brute-Force | |
| 🇺🇸 172.86.106.238 |
vpn password spraying
|
Brute-Force | |
| 🇦🇺 3.107.190.54 |
attempted LFI & other scanning & enumeration
|
Hacking | |
| 🇳🇱 191.96.207.171 |
phishing emails sent
|
Phishing | |
| 🇦🇪 146.70.102.204 |
port scanning
|
Hacking | |
| 🇺🇸 172.86.108.188 |
VPN password spray
|
Hacking Brute-Force |