AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ceyhun_kivanc_demir joined AbuseIPDB in April 2023 and has reported 224 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 142.93.187.22	23 Jan 2024	timezone_dayst="GMTg-3" type=traffic subtype="https" pri=notice proto=tcp service=https/tls1.2 statu ... show more timezone_dayst="GMTg-3" type=traffic subtype="https" pri=notice proto=tcp service=https/tls1.2 status=success reason=none policy=PortalTR_P original_src=142.93.187.22 src_port=40266 dst=10.0.0.124 dst_port=80 http_request_time=0 http_response_time=0 http_request_bytes=217 http_response_bytes=166 http_method=get http_url="/phpmyadmin/index.php" http_agent="Xenu Link Sleuth/1.3.8" show less	Hacking Web App Attack
🇳🇱 185.222.58.229	23 Jan 2024	SSH Attempts via Brute Force, lets say you guys broke the password how you will be able to bypass au ... show more SSH Attempts via Brute Force, lets say you guys broke the password how you will be able to bypass authenticator ? lets assume you also bypassed that how do you plan to bypass XDR and AV and privilege access manager ? show less	Brute-Force SSH
🇳🇱 104.223.35.146	23 Jan 2024	we are in 2024 and you guys still send malicious files via email, get a life	Phishing Email Spam
🇺🇸 23.94.64.81	23 Jan 2024	Sending malicious files, even firewall catches their dum dum trojans.	Hacking
🇳🇱 45.137.22.238	23 Jan 2024	SSH Attempts, give up mate..	Hacking SSH
🇮🇳 116.75.158.191	23 Jan 2024	classic scammers no surprise	Phishing Email Spam
🇳🇱 185.222.58.76	23 Jan 2024	ssh trials, come on we are in 2024	Hacking SSH
🇮🇳 43.230.202.55	23 Jan 2024	classic scammers no surprise	Phishing Email Spam
🇳🇱 185.222.57.70	23 Jan 2024	bad boys... trying ssh and trying to send malicious email	Phishing Hacking SSH
🇺🇸 107.173.104.74	23 Jan 2024	Naughty IP :)	Phishing Hacking SSH
🇷🇺 91.219.150.153	23 Jan 2024	Tries to open breach and tries ssh	Phishing Hacking SSH
🇷🇺 77.236.42.1	19 Dec 2023	<6>date=2023-12-19 time=14:45:29.420 log_id=0100002480 type=virus from="[email protected]" ... show more <6>date=2023-12-19 time=14:45:29.420 log_id=0100002480 type=virus from="[email protected]" client_name="ns.ezan.ac.ru" client_ip="77.236.42.1" session_id="3BJBjOH4002479-3BJBjOH6002479" msg="The file Payments Swift Paper.pdf.gz is infected with MSIL/Kryptik.AKCC!tr." show less	Phishing Email Spam
🇪🇸 46.27.49.180	19 Dec 2023	<6>date=2023-12-19 time=20:28:26.900 log_id=0100029070 type=virus from="solucionesnomina@santander ... show more <6>date=2023-12-19 time=20:28:26.900 log_id=0100029070 type=virus from="[email protected]" client_name="srv109.vpsecomputer.com" client_ip="46.27.49.180" session_id="3BJHSNYG029069-3BJHSNYI029069" msg="The file Contratos.xla is infected with MSExcel/CVE_2017_0199.DDOC!exploit." show less	Phishing Email Spam
🇳🇱 109.72.84.23	19 Dec 2023	<6>date=2023-12-19 time=23:55:15.587 log_id=0100005291 type=virus from="[email protected] ... show more <6>date=2023-12-19 time=23:55:15.587 log_id=0100005291 type=virus from="[email protected]"client_name="server01.kidscover.nl" client_ip="109.72.84.23" session_id="3BJKtE4o005290-3BJKtE4q005290" msg="The file 470000 TL Bankasi_pdf.rar is infected with PossibleThreat." show less	Phishing Email Spam
🇺🇸 54.240.27.23	08 Dec 2023	A scm sends phishing html file from this IP date=2023-12-08 time=23:37:50.946 log_id=0200015704 ... show more A scm sends phishing html file from this IP date=2023-12-08 time=23:37:50.946 log_id=0200015704 client_name="a27-23.smtp-out.us-west-2.amazonses.com" client_ip="54.240.27.23" client_cc="US" hfrom="[email protected]" src_type="ext" direction="in" virus="HTML/Phish.1873!tr" disposition="System Quarantine" classifier="Virus Signature" detail='Virus' show less	Phishing Email Spam
🇩🇰 194.255.110.8	06 Dec 2023	type=spam client_name="mailsvr.newera-books.com" client_ip="194.255.110.8" from="[email protected] ... show more type=spam client_name="mailsvr.newera-books.com" client_ip="194.255.110.8" from="[email protected]" subject="(9) Undelivered Mails" msg="FortiGuard-AntiSpam identified spam IP: 194.255.110.8 score: 2" show less	Phishing Email Spam
🇳🇱 91.92.245.118	29 Nov 2023	date=2023-11-29 time=03:04:37 eventtime=1701216276339714050 type="traffic" ip=91.92.245.118 srcp ... show more date=2023-11-29 time=03:04:37 eventtime=1701216276339714050 type="traffic" ip=91.92.245.118 srcport=61283 srcintf="port15" srcintfrole="wan" dstport=25 dstintf="port1" dstintfrole="lan" srccountry="Bulgaria" dstcountry="Turkey" service="SMTP" utmaction="block" dsthwvendor="Fortinet" dstdevtype="Network Generic" dstfamily="FortiMail" dstosname="FortiMail OS" show less	Phishing Email Spam
🇺🇸 216.9.224.241	28 Nov 2023	type=spam subtype=default client_name="awesome.hoverchamp.net" client_ip="216.9.224.241" dst_ip="10. ... show more type=spam subtype=default client_name="awesome.hoverchamp.net" client_ip="216.9.224.241" dst_ip="10.0.0.125" from="[email protected]" subject="27.11.2023 Dönemi MEVDUAT Ekstre Bilgileri" msg="FortiGuard-AntiSpam identified spam IP: 216.9.224.241, score: 2" show less	Phishing Email Spam
🇭🇷 88.209.206.45	28 Nov 2023	type=spam subtype=default client_name="cover.sykaixun.com" client_ip="88.209.206.45" dst_ip="10.0.0. ... show more type=spam subtype=default client_name="cover.sykaixun.com" client_ip="88.209.206.45" dst_ip="10.0.0.125" from="[email protected]" subject="Automatic Generated passwогd to your mailbox today!" msg="FortiGuard-AntiSpam identified spam IP: 88.209.206.45" show less	Phishing Email Spam Hacking
🇭🇷 88.209.206.53	24 Nov 2023	type=virus subtype=infected from="[email protected]" client_name="hella.securisor.com" client_ip="8 ... show more type=virus subtype=infected from="[email protected]" client_name="hella.securisor.com" client_ip="88.209.206.53" msg="The file inline-527-6357.html is infected with EML/Phishing.AB74!tr." show less	Phishing Email Spam Hacking
🇳🇱 185.222.57.136	20 Nov 2023	subtype="virus" eventtype="infected" level="warning" vd="root" policyid=8 msg="MIME header detected ... show more subtype="virus" eventtype="infected" level="warning" vd="root" policyid=8 msg="MIME header detected to have a virus and blocked." action="attachment-removed" service="SMTP" SourceIP=185.222.57.136 show less	Phishing Email Spam Hacking
🇳🇱 185.222.57.144	18 Nov 2023	Event Type : Virus Recieved By E-mail Action : Deny Source IP : 185.222.57.144	Phishing Email Spam Hacking
🇫🇷 163.172.32.246	14 Nov 2023	Attack Technique : Exfiltration Over C2 Channel Risk Name: Medium Risk Informational URL: Order Nr ... show more Attack Technique : Exfiltration Over C2 Channel Risk Name: Medium Risk Informational URL: Order Nr. 5012300233.bat Source IP: 163.172.32.246 Event Recieve Time : Nov 14, 2023, 12:20:30 PM show less	Phishing Email Spam Hacking
🇰🇿 194.4.56.120	11 Nov 2023	type=virus subtype=infected from="[email protected]" client_name="mail.f-avis.top" client_ip="194. ... show more type=virus subtype=infected from="[email protected]" client_name="mail.f-avis.top" client_ip="194.4.56.120" msg="The file RFQ2610203.GZ is infected with PossibleThreat." show less	Phishing Email Spam Hacking
🇪🇪 91.235.234.154	02 Nov 2023	SSH Trial From : 91.235.234.154 Recieve Time : 06-Mar-2023 Process : Windows Logon Application	Hacking SSH