User Scriptkitty joined AbuseIPDB in December 2022 and has reported 128 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇸🇬 157.245.201.195 |
probing for unconfigured/incomplete WordPress installs for takeover
|
Web App Attack | |
| 🇬🇧 192.145.126.115 |
vpn password spray
|
Brute-Force | |
| 🇺🇸 68.235.35.124 |
vpn password spray
|
Brute-Force | |
| 🇺🇸 64.42.179.51 |
vpn password spray
|
Brute-Force | |
| 🇺🇸 68.235.52.68 |
vpn password spray
|
Brute-Force | |
| 🇺🇸 64.42.179.51 |
password spraying
|
Brute-Force | |
| 🇺🇸 137.184.222.199 |
probing for CMS vulnerabilities
|
Hacking | |
| 🇺🇸 45.61.166.167 |
Unauthorized VPN login attempts
|
Brute-Force | |
| 🇺🇸 45.137.213.64 |
VPN bruteforcing
|
Brute-Force | |
| 🇩🇪 38.240.58.81 |
phishing
|
Phishing Spoofing | |
| 🇩🇪 193.111.248.148 |
POST /cgi-bin/supervisor/Factory.cgi HTTP/1.1
|
Hacking | |
| 🇨🇳 43.136.38.59 |
Scanning for SOCKS/Squid proxies
|
Port Scan | |
| 🇫🇷 80.75.212.46 |
Method: POST
URL: /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh
|
Hacking | |
| 🇰🇷 104.28.249.217 |
Apache OFBiz Pre-Auth Remote Code Execution Attempt (CVE-2024-38856)
|
Hacking | |
| 🇫🇷 104.28.155.117 |
attempted CVE 2024-27956
|
Hacking SQL Injection Web App Attack | |
| 🇺🇸 23.95.173.12 |
SQLi via User-Agent: Fuzz Faster U Fool v1.5.0-dev
|
SQL Injection Web App Attack | |
| 🇫🇷 51.68.46.249 |
CVE-2023-23752
|
Hacking | |
| 🇺🇸 23.179.32.237 |
several php://input and other webapp attacks
|
Hacking Web App Attack | |
| 🇺🇸 13.64.172.144 |
Mirai Botnet
|
Hacking IoT Targeted | |
| 🇺🇸 104.167.223.198 |
URL: /php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input
|
Hacking Web App Attack | |
| 🇵🇱 94.232.44.125 |
Checkpoint Quantum Security Gateway Arbitrary File Read Attempt (CVE-2024-24919)
|
Hacking Web App Attack | |
| 🇺🇸 23.224.81.4 |
Web app attacks, sqli
|
Hacking SQL Injection Web App Attack | |
| 🇫🇷 45.88.186.168 |
scanning for sensitive info, GraphQL Introspection Query Attempt
|
Port Scan Hacking Web App Attack | |
| 🇩🇪 45.142.182.101 |
ZTE Cable Modem RCE Attempt (CVE-2014-2321)
POST /web_shell_cmd.gch
|
Hacking | |
| 🇺🇸 129.146.126.156 |
|
Hacking |