AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Yer Momma joined AbuseIPDB in July 2023 and has reported 6,769 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 198.199.98.133	03 Apr 2024	198.199.98.133 - - [03/Apr/2024:12:28:29 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show more 198.199.98.133 - - [03/Apr/2024:12:28:29 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Port Scan Hacking
🇺🇸 66.175.213.4	03 Apr 2024	66.175.213.4 - - [03/Apr/2024:11:46:20 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03\xD0\xF1\ ... show more 66.175.213.4 - - [03/Apr/2024:11:46:20 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03\xD0\xF1\xDA\x01\x99\x15\xAE\xBF:[\xC7c\xB1\xFA\xD4R" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 162.142.125.213	03 Apr 2024	162.142.125.213 - - [03/Apr/2024:11:34:16 +0200] "PRI * HTTP/2.0" 400 157 "-" "-" ...	Port Scan Hacking
🇺🇸 71.6.232.24	03 Apr 2024	2024-04-03T11:17:58.400713+02:00 mx postfix/smtpd[53946]: improper command pipelining after CONNECT ... show more 2024-04-03T11:17:58.400713+02:00 mx postfix/smtpd[53946]: improper command pipelining after CONNECT from unknown[71.6.232.24]: EHLO zx14.quadmetrics.com\r\n ... show less	Port Scan Hacking
🇺🇸 66.240.205.34	03 Apr 2024	66.240.205.34 - - [03/Apr/2024:10:54:50 +0200] "145.ll\|'\|'\|SGFjS2VkX0Q0OTkwNjI3\|'\|'\|WIN-JNAPIER0859\| ... show more 66.240.205.34 - - [03/Apr/2024:10:54:50 +0200] "145.ll\|'\|'\|SGFjS2VkX0Q0OTkwNjI3\|'\|'\|WIN-JNAPIER0859\|'\|'\|JNapier\|'\|'\|19-02-01\|'\|'\|\|'\|'\|Win 7 Professional SP1 x64\|'\|'\|No\|'\|'\|0.7d\|'\|'\|..\|'\|'\|AA==\|'\|'\|112.inf\|'\|'\|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act\|'\|'\|AA==" 400 157 "-" "-" ... show less	Port Scan Hacking
🇳🇬 152.32.141.202	03 Apr 2024	2024-04-03T10:27:13.012736+02:00 mx dovecot: imap-login: Disconnected: Connection closed (auth faile ... show more 2024-04-03T10:27:13.012736+02:00 mx dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<>, method=NTLM, rip=152.32.141.202, lip=83.229.86.116, session=<JutR/SwVhKCYII3K> ... show less	Port Scan Hacking
🇺🇸 64.62.197.224	03 Apr 2024	64.62.197.224 - - [03/Apr/2024:09:40:43 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03}ne+\xEA\xAB\x ... show more 64.62.197.224 - - [03/Apr/2024:09:40:43 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03}ne+\xEA\xAB\x1CV\x81\x0E\xCD\x15\x83\xAC\xC3\x10ml\xC6\xFA" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 216.218.206.68	03 Apr 2024	2024-04-03T05:47:34.466854+02:00 mx postfix/smtpd[53489]: improper command pipelining after CONNECT ... show more 2024-04-03T05:47:34.466854+02:00 mx postfix/smtpd[53489]: improper command pipelining after CONNECT from scan-07.shadowserver.org[216.218.206.68]: GET / HTTP/1.1\r\nHost: 83.229.86.116:25\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ... show less	Port Scan Hacking
🇺🇸 66.240.192.138	03 Apr 2024	66.240.192.138 - - [03/Apr/2024:04:44:06 +0200] "" 400 0 "-" "-" ...	Port Scan Hacking
🇨🇳 202.107.226.2	03 Apr 2024	2024-04-03T04:32:41.617670+02:00 mx postfix/smtpd[53402]: improper command pipelining after CONNECT ... show more 2024-04-03T04:32:41.617670+02:00 mx postfix/smtpd[53402]: improper command pipelining after CONNECT from unknown[202.107.226.2]: EHLO\r\n ... show less	Port Scan Hacking
🇩🇪 45.88.90.65	03 Apr 2024	2024-04-03T04:17:23.850380+02:00 mx postfix/smtpd[53365]: NOQUEUE: reject: RCPT from unknown[45.88.9 ... show more 2024-04-03T04:17:23.850380+02:00 mx postfix/smtpd[53365]: NOQUEUE: reject: RCPT from unknown[45.88.90.65]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-4TTI4DH7SGH> ... show less	Port Scan Hacking
🇺🇸 107.170.245.4	03 Apr 2024	2024-04-03T03:33:19.213208+02:00 mx postfix/smtpd[53299]: improper command pipelining after CONNECT ... show more 2024-04-03T03:33:19.213208+02:00 mx postfix/smtpd[53299]: improper command pipelining after CONNECT from unknown[107.170.245.4]: EHLO apzg-0720e-016\r\n ... show less	Port Scan Hacking
🇺🇸 162.243.146.58	02 Apr 2024	162.243.146.58 - - [03/Apr/2024:01:51:57 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show more 162.243.146.58 - - [03/Apr/2024:01:51:57 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Port Scan Hacking
🇨🇦 178.128.237.218	02 Apr 2024	178.128.237.218 - - [03/Apr/2024:00:57:50 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x036U\x09M\xB6\ ... show more 178.128.237.218 - - [03/Apr/2024:00:57:50 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x036U\x09M\xB6\x82\xE03\xAA\x89\xEB\|\x11\x80C\xA0\x8E\xF3\xD4\xD0N\xB6\xBC\xC8\x86\xE3\x1BN\x16`\xC4\xD1\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 167.94.138.125	02 Apr 2024	2024-04-02T20:59:32.950415+02:00 mx postfix/submission/smtpd[52694]: lost connection after CONNECT f ... show more 2024-04-02T20:59:32.950415+02:00 mx postfix/submission/smtpd[52694]: lost connection after CONNECT from scanner-27.ch1.censys-scanner.com[167.94.138.125] 2024-04-02T20:59:33.302495+02:00 mx postfix/submission/smtpd[52694]: lost connection after CONNECT from scanner-27.ch1.censys-scanner.com[167.94.138.125] 2024-04-02T20:59:33.568402+02:00 mx postfix/submission/smtpd[52694]: lost connection after CONNECT from scanner-27.ch1.censys-scanner.com[167.94.138.125] 2024-04-02T20:59:33.860060+02:00 mx postfix/submission/smtpd[52694]: lost connection after CONNECT from scanner-27.ch1.censys-scanner.com[167.94.138.125] 2024-04-02T20:59:34.087980+02:00 mx postfix/submission/smtpd[52694]: lost connection after CONNECT from scanner-27.ch1.censys-scanner.com[167.94.138.125] 2024-04-02T20:59:34.210547+02:00 mx postfix/submission/smtpd[52694]: lost connection after CONNECT from scanner-27.ch1.censys-scanner.com[167.94.138.125] 2024-04-02T20:59:34.541798+02:00 mx postfix/submission/smtpd[52694]: lost co ... show less	Port Scan Hacking
🇹🇭 165.154.118.169	02 Apr 2024	2024-04-02T20:07:41.746323+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT f ... show more 2024-04-02T20:07:41.746323+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT from unknown[165.154.118.169] 2024-04-02T20:07:51.091909+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT from unknown[165.154.118.169] 2024-04-02T20:07:53.361636+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT from unknown[165.154.118.169] 2024-04-02T20:07:55.963901+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT from unknown[165.154.118.169] 2024-04-02T20:07:58.589985+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT from unknown[165.154.118.169] 2024-04-02T20:08:01.436854+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT from unknown[165.154.118.169] 2024-04-02T20:08:03.120345+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNECT from unknown[165.154.118.169] 2024-04-02T20:08:06.721593+02:00 mx postfix/submission/smtpd[52620]: lost connection after CONNEC ... show less	Port Scan Hacking
🇯🇵 164.52.0.94	02 Apr 2024	164.52.0.94 - - [02/Apr/2024:18:05:45 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xD2\xCB@B ... show more 164.52.0.94 - - [02/Apr/2024:18:05:45 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xD2\xCB@B<\x82\x7F\xD7i\xCENp\xD2-\x92\xCB\x94\x1C\x85\x8B\xD1\xDB:OPS}\x95\xE3~?\x02 $\xDD\xCEu#\x83\xE3\xD8\xBD\xE9\xAC\x02\x8A\xBA}\xF8\x0C\xF5\x1C\xCC\xF8\x18\x11\xE2\xC8k\xD9\xF9\xD1\x94\x17\xE3\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 50.116.48.10	02 Apr 2024	50.116.48.10 - - [02/Apr/2024:17:05:03 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4ra ... show more 50.116.48.10 - - [02/Apr/2024:17:05:03 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-" ... show less	Port Scan Hacking
🇦🇺 45.146.240.73	02 Apr 2024	2024-04-02T16:41:18.116210+02:00 mx sshd[52410]: Invalid user from 45.146.240.73 port 56922 ...	Port Scan Hacking
🇺🇸 206.168.34.38	02 Apr 2024	2024-04-02T16:16:56.871451+02:00 mx postfix/smtpd[52359]: improper command pipelining after CONNECT ... show more 2024-04-02T16:16:56.871451+02:00 mx postfix/smtpd[52359]: improper command pipelining after CONNECT from unknown[206.168.34.38]: \026\003\003\001\246\001\000\001\242\003\003\244\300\223\376\357\324/\023\373O=R\272\031V\256f\344\272\366\020\264H\233\203\245W\230\t\302\253\313 0=\333?*TX{4\225>}\2706^\224]3\213\377\024hj\224\350\b\330\326v/6\201\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 ... show less	Port Scan Hacking
🇦🇺 170.64.166.144	02 Apr 2024	170.64.166.144 - - [02/Apr/2024:15:48:13 +0200] "GET /aaa9 HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/ ... show more 170.64.166.144 - - [02/Apr/2024:15:48:13 +0200] "GET /aaa9 HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Port Scan Hacking
🇩🇪 81.209.179.158	02 Apr 2024	81.209.179.158 - - [02/Apr/2024:13:57:22 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03U\xC8\x ... show more 81.209.179.158 - - [02/Apr/2024:13:57:22 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03U\xC8\xBBm$\x0F\xC5\x9F\xA6\xF6s\x95\xF3\xF2\x91_" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 104.152.52.237	02 Apr 2024	2024-04-02T12:42:31.177929+02:00 mx postfix/smtpd[52150]: improper command pipelining after CONNECT ... show more 2024-04-02T12:42:31.177929+02:00 mx postfix/smtpd[52150]: improper command pipelining after CONNECT from unknown[104.152.52.237]: \026\003\001\000\352\001\000\000\346\003\003^tiWg\tp\204\001\017\000\022\370Aq\213\236`s=QK\334\0265\366r\361\363\226\317\315 \215\210\317\345&\020y\307~\376O\242\n\263\245B\244\212\220\334-\3650\200\376`\262m\213^\277u\000&\300+\300/\300,\3000\314\251\314\250\300\t\300\023\300\n\300\024\000\234 ... show less	Port Scan Hacking
🇺🇸 64.62.197.212	02 Apr 2024	64.62.197.212 - - [02/Apr/2024:11:40:02 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xEC\xD3w\xB1\ ... show more 64.62.197.212 - - [02/Apr/2024:11:40:02 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xEC\xD3w\xB1\x16\xD4\xEC&$\xF1\xE2~\xB9aT\xA0\x90\xBD8\xAA\xFA\x80<'\xD8\x82\xE8\x1C\xAD\xEF\xB5q\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 198.211.113.9	02 Apr 2024	2024-04-02T11:39:44.109650+02:00 mx postfix/smtpd[52067]: improper command pipelining after CONNECT ... show more 2024-04-02T11:39:44.109650+02:00 mx postfix/smtpd[52067]: improper command pipelining after CONNECT from portscanner-nyc1-04.prod.cyberresilience.io[198.211.113.9]: EHLO\r\n ... show less	Port Scan Hacking