User GAJim joined AbuseIPDB in August 2023 and has reported 49 IP addresses.
Standing (weight) is good.
INACTIVE USER
WEBMASTER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 52.96.63.173 |
Repeated attempts to sign in to webmail interface. Apparent credential stuffing attack.
|
Brute-Force | |
| 🇩🇪 87.106.119.98 |
Probing for AndroxGh0st and other web app vulnerabilities
|
Hacking Web App Attack | |
| 🇺🇸 20.121.114.214 |
AndroxGh0st IoC: probing for /.env
|
Hacking Brute-Force Web App Attack | |
| 🇳🇱 141.98.81.47 |
|
Brute-Force | |
| 🇩🇪 95.142.121.35 |
AndroxGh0st IoCs
|
Hacking Web App Attack | |
| 🇺🇸 108.175.0.190 |
Multiple AndroxGh0st IoCs.
|
Hacking Web App Attack | |
| 🇺🇸 38.68.48.24 |
Multiple AndroxGh0st IoCs (POST to "/", "/.env" requests)
|
Hacking Web App Attack | |
| 🇺🇸 4.227.154.58 |
Multiple AndroxGh0st IoCs (probing for vulnerable files)
|
Hacking Web App Attack | |
| 🇩🇪 95.156.225.4 |
Triggering SMB/RPC replies (reflection attack) via inbound port 443.
|
DDoS Attack Hacking Web App Attack | |
| 🇺🇸 66.165.243.218 |
Multiple thousand (more than 4,000) AndroxGh0st IoCs in the span of 3 minutes.
|
Hacking Web App Attack | |
| 🇩🇪 194.48.251.12 |
AndroxGh0st IoCs
|
Hacking Web App Attack | |
| 🇺🇸 72.182.165.164 |
Attempted SMB reflection attack
|
DDoS Attack Port Scan Hacking | |
| 🇺🇸 172.245.21.149 |
AndroxGh0st IOCs
|
Hacking Web App Attack | |
| 🇸🇬 178.128.23.69 |
Multiple AndroxGh0st IoCs
|
Hacking Web App Attack | |
| 🇺🇸 43.153.103.56 |
Multiple requests for "/image/pressroom.jpg" and other port scanning activity.
|
Port Scan Web App Attack | |
| 🇺🇸 69.167.28.211 |
AndroxGh0st IoC: probing web server for "/backup"
|
Hacking Web App Attack | |
| 🇨🇭 185.196.8.126 |
AndroxGh0st IoC: probing for "/.aws/credentials"
|
Hacking Web App Attack | |
| 🇺🇸 69.167.28.213 |
AndroxGh0st IoC: probing for /backup
|
Hacking Web App Attack | |
| 🇺🇸 191.96.103.17 |
AndroxGh0st IoCs: probing for ./env, /admin, /app, /phpinfo.php, and others.
|
Hacking Web App Attack | |
| 🇺🇸 34.220.231.16 |
Probing for /.env (AndroxGh0st IoC)
|
Hacking Web App Attack | |
| 🇩🇪 178.128.197.251 |
Banner grabbing with zgrabber
|
Hacking Web App Attack | |
| 🇧🇷 131.196.199.101 |
SMB reflection attack
|
DDoS Attack Hacking Spoofing | |
| 🇺🇸 5.62.114.7 |
Observed probing ports 443 and 80, triggering SMB reflection attacks over several days.
|
DDoS Attack Hacking Spoofing | |
| 🇺🇸 24.144.93.228 |
Zgrab scan on port 80, 55+ attempts within a minute
|
Port Scan Hacking | |
| 🇺🇸 151.236.22.82 |
Probed web server for "/.env" on port 443
|
Web App Attack |