ernestr - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ernestr joined AbuseIPDB in May 2017 and has reported 497 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 207.90.244.14	17 Dec 2023	Dec 17 12:51:46 conductor sshd[2289568]: Connection closed by 207.90.244.14 port 43382 [preauth] Dec ... show more Dec 17 12:51:46 conductor sshd[2289568]: Connection closed by 207.90.244.14 port 43382 [preauth] Dec 17 12:51:47 conductor sshd[2289566]: Connection closed by 207.90.244.14 port 43376 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 71.6.135.131	09 Dec 2023	Dec 9 00:59:58 conductor sshd[843583]: Connection closed by 71.6.135.131 port 54016 [preauth] Dec ... show more Dec 9 00:59:58 conductor sshd[843583]: Connection closed by 71.6.135.131 port 54016 [preauth] Dec 9 00:59:59 conductor sshd[843581]: Connection closed by 71.6.135.131 port 53720 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 207.90.244.5	16 Nov 2023	Nov 16 04:21:28 conductor sshd[2607559]: Connection closed by 207.90.244.5 port 59988 [preauth] Nov ... show more Nov 16 04:21:28 conductor sshd[2607559]: Connection closed by 207.90.244.5 port 59988 [preauth] Nov 16 04:21:29 conductor sshd[2607561]: Connection closed by 207.90.244.5 port 59996 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 104.156.155.30	10 Nov 2023	Nov 10 01:52:51 conductor sshd[3545423]: Unable to negotiate with 104.156.155.30 port 36090: no matc ... show more Nov 10 01:52:51 conductor sshd[3545423]: Unable to negotiate with 104.156.155.30 port 36090: no matching host key type found. Their offer: ssh-dss [preauth] Nov 10 01:52:51 conductor sshd[3545427]: Unable to negotiate with 104.156.155.30 port 36176: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 143.198.120.25	21 Oct 2023	Oct 21 01:24:11 conductor sshd[1756361]: Disconnected from authenticating user root 143.198.120.25 p ... show more Oct 21 01:24:11 conductor sshd[1756361]: Disconnected from authenticating user root 143.198.120.25 port 37988 [preauth] Oct 21 01:24:12 conductor sshd[1756366]: Invalid user geloth from 143.198.120.25 port 45918 ... show less	Port Scan Bad Web Bot SSH
🇺🇸 207.90.244.3	18 Oct 2023	Oct 18 11:31:34 conductor sshd[3026435]: Connection closed by 207.90.244.3 port 54784 [preauth] Oct ... show more Oct 18 11:31:34 conductor sshd[3026435]: Connection closed by 207.90.244.3 port 54784 [preauth] Oct 18 11:31:34 conductor sshd[3026433]: Connection closed by 207.90.244.3 port 54778 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 174.207.232.109	03 Oct 2023	Oct 2 20:26:46 conductor sshd[2662213]: Connection closed by 174.207.232.109 port 11815 [preauth] O ... show more Oct 2 20:26:46 conductor sshd[2662213]: Connection closed by 174.207.232.109 port 11815 [preauth] Oct 2 20:27:55 conductor sshd[2662618]: Connection closed by 174.207.232.109 port 14000 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 185.165.190.17	01 Oct 2023	Oct 1 14:58:36 conductor sshd[1717555]: Connection closed by 185.165.190.17 port 52658 [preauth] Oc ... show more Oct 1 14:58:36 conductor sshd[1717555]: Connection closed by 185.165.190.17 port 52658 [preauth] Oct 1 14:58:36 conductor sshd[1717557]: Connection closed by 185.165.190.17 port 52866 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 207.90.244.6	22 Sep 2023	Sep 22 04:06:32 conductor sshd[1681883]: Connection closed by 207.90.244.6 port 56530 [preauth] Sep ... show more Sep 22 04:06:32 conductor sshd[1681883]: Connection closed by 207.90.244.6 port 56530 [preauth] Sep 22 04:06:32 conductor sshd[1681885]: Connection closed by 207.90.244.6 port 40330 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 71.6.158.166	17 Sep 2023	Sep 17 16:09:00 conductor sshd[2700161]: Connection closed by 71.6.158.166 port 38394 [preauth] Sep ... show more Sep 17 16:09:00 conductor sshd[2700161]: Connection closed by 71.6.158.166 port 38394 [preauth] Sep 17 16:09:03 conductor sshd[2700125]: Connection closed by 71.6.158.166 port 36852 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 207.90.244.4	28 Aug 2023	Aug 28 19:07:45 conductor sshd[1649054]: Connection closed by 207.90.244.4 port 42746 [preauth] Aug ... show more Aug 28 19:07:45 conductor sshd[1649054]: Connection closed by 207.90.244.4 port 42746 [preauth] Aug 28 19:07:46 conductor sshd[1649056]: Connection closed by 207.90.244.4 port 42756 [preauth] ... show less	Port Scan Bad Web Bot SSH
🇺🇸 172.104.4.17	17 Aug 2023	Aug 17 02:58:38 conductor sshd[1295006]: Unable to negotiate with 172.104.4.17 port 47130: no matchi ... show more Aug 17 02:58:38 conductor sshd[1295006]: Unable to negotiate with 172.104.4.17 port 47130: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] Aug 17 02:58:38 conductor sshd[1295004]: Invalid user mypiy from 172.104.4.17 port 47128 ... show less	Port Scan Bad Web Bot SSH
🇺🇸 38.98.217.150	01 Aug 2022	{"reqId":"woh75HghLQNb6yX5r9HP","level":2,"time":"2021-12-04T23:21:30+00:00","remoteAddr":"38.98.217 ... show more {"reqId":"woh75HghLQNb6yX5r9HP","level":2,"time":"2021-12-04T23:21:30+00:00","remoteAddr":"38.98.217.150","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: tests (Remote IP: 38.98.217.150)","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/94.0","version":"21.0.4.1"} {"reqId":"bZlVATLc7V8lro5lnrlo","level":2,"time":"2021-12-04T23:21:36+00:00","remoteAddr":"38.98.217.150","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: tests (Remote IP: 38.98.217.150)","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/94.0","version":"21.0.4.1"} {"reqId":"wDLBGMTVxfCDDq1sOgUp","level":2,"time":"2021-12-04T23:22:26+00:00","remoteAddr":"38.98.217.150","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: derp (Remote IP: 38.98.217.150)","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/94.0","versi ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 174.198.215.166	01 Aug 2022	{"reqId":"dHp6Uwq0shvjl1dc1eTz","level":2,"time":"2021-11-18T00:54:13+00:00","remoteAddr":"174.198.2 ... show more {"reqId":"dHp6Uwq0shvjl1dc1eTz","level":2,"time":"2021-11-18T00:54:13+00:00","remoteAddr":"174.198.215.166","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: ass (Remote IP: 174.198.215.166)","userAgent":"Mozilla/5.0 (Android 12; Mobile; rv:94.0) Gecko/94.0 Firefox/94.0","version":"21.0.4.1"} {"reqId":"Kj9HXjtNP2KIQTYP4RJl","level":2,"time":"2021-11-18T00:54:17+00:00","remoteAddr":"174.198.215.166","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: ass (Remote IP: 174.198.215.166)","userAgent":"Mozilla/5.0 (Android 12; Mobile; rv:94.0) Gecko/94.0 Firefox/94.0","version":"21.0.4.1"} {"reqId":"1OSlw1PuAigJgM1ojMMp","level":2,"time":"2021-11-18T00:54:21+00:00","remoteAddr":"174.198.215.166","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: ass (Remote IP: 174.198.215.166)","userAgent":"Mozilla/5.0 (Android 12; Mobile; rv:94.0) Gecko/94.0 Firefox/94.0","version ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 192.80.55.88	01 Aug 2022	{"reqId":"1OhSCozuutvXAjY3mggd","level":2,"time":"2021-11-10T01:54:27+00:00","remoteAddr":"192.80.55 ... show more {"reqId":"1OhSCozuutvXAjY3mggd","level":2,"time":"2021-11-10T01:54:27+00:00","remoteAddr":"192.80.55.88","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: test (Remote IP: 192.80.55.88)","userAgent":"Mozilla/5.0 (iPhone; CPU iPhone OS 14_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/93.0.961.83 Version/14.0 Mobile/15E148 Safari/604.1","version":"21.0.4.1"} {"reqId":"1WNyeSqAOczuW4ZGClAu","level":2,"time":"2021-11-10T01:54:34+00:00","remoteAddr":"192.80.55.88","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: test (Remote IP: 192.80.55.88)","userAgent":"Mozilla/5.0 (iPhone; CPU iPhone OS 14_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/93.0.961.83 Version/14.0 Mobile/15E148 Safari/604.1","version":"21.0.4.1"} {"reqId":"DW0epLYopbibVxB44o5d","level":2,"time":"2021-11-10T01:54:39+00:00","remoteAddr":"192.80.55.88","user":"--","app":"no app in context","method":"POS ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 108.52.210.205	01 Aug 2022	{"reqId":"4FRYhLgSYklxV8rY9tGR","level":2,"time":"2021-10-29T03:28:56+00:00","remoteAddr":"108.52.21 ... show more {"reqId":"4FRYhLgSYklxV8rY9tGR","level":2,"time":"2021-10-29T03:28:56+00:00","remoteAddr":"108.52.210.205","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: Mari Paz Russell (Remote IP: 108.52.210.205)","userAgent":"Mozilla/5.0 (Linux; Android 11; Pixel 4a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.85 Mobile Safari/537.36","version":"21.0.4.1"} {"reqId":"kfVPx69IyuF0G8KKL7aY","level":2,"time":"2021-10-29T03:31:50+00:00","remoteAddr":"108.52.210.205","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: MariPa z (Remote IP: 108.52.210.205)","userAgent":"Mozilla/5.0 (Linux; Android 11; Pixel 4a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.85 Mobile Safari/537.36","version":"21.0.4.1"} {"reqId":"qlNiBIjWDFvUQ1hnknQn","level":2,"time":"2021-10-29T03:32:34+00:00","remoteAddr":"108.52.210.205","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login faile ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 128.220.159.13	16 May 2022	2022-05-16T08:10:42.33679138-04:00 stderr F time="2022-05-16T12:10:42Z" level=warning msg="Unsuccess ... show more 2022-05-16T08:10:42.33679138-04:00 stderr F time="2022-05-16T12:10:42Z" level=warning msg="Unsuccessful login" request="map[Accept:[/] Accept-Encoding:[gzip, deflate, br] Accept-Language:[en-US,en;q=0.5] Authorization:[] Content-Length:[58] Content-Type:[application/json] Cookie:[X-ND-Client-Unique-Id=d08a1d35-ccdf-45e3-9c0b-7808d9c1db31; nd-player-646965676f=6b39f010-3a85-4920-a6c0-6b4c5a9092cf] Origin:[https://tune.haus] Referer:[https://tune.haus/app/] Sec-Fetch-Dest:[empty] Sec-Fetch-Mode:[cors] Sec-Fetch-Site:[same-origin] User-Agent:[Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0] X-Forwarded-For:[128.220.159.13] X-Forwarded-Host:[tune.haus] X-Forwarded-Port:[443] X-Forwarded-Proto:[https] X-Forwarded-Scheme:[https] X-Real-Ip:[128.220.159.13] X-Request-Id:[5a8f4cb115b49c90a4d46f2990389693] X-Scheme:[https]]" requestId=5a8f4cb115b49c90a4d46f2990389693 username=diego 2022-05-16T08:10:43.082703425-04:00 stderr F time="2022-05-16T12:10:43Z" level=w ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 52.96.44.165	01 Dec 2021	Randomly trying ports on my gateway	Port Scan
🇨🇦 143.110.213.147	14 Nov 2021	2021-11-03T20:53:15.376850563-04:00 stdout F 143.110.213.147 - - [04/Nov/2021:00:53:15 +0000] "\x00\ ... show more 2021-11-03T20:53:15.376850563-04:00 stdout F 143.110.213.147 - - [04/Nov/2021:00:53:15 +0000] "\x00\x00\x00\xA4\xFFSMBr\x00\x00\x00\x00\x08\x01@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x06\x00\x00\x01\x00\x00\x81\x00\x02PC NETWORK PROGRAM 1.0\x00\x02MICROSOFT NETWORKS 1.03\x00\x02MICROSOFT NETWORKS 3.0\x00\x02LANMAN1.0\x00\x02LM1.2X002\x00\x02Samba\x00\x02NT LANMAN 1.0\x00\x02NT LM 0.12\x00" 400 150 "-" "-" 0 0.022 [] [] - - - - 6d29f55fe99d5d8cd433bc7e2edfc159 show less	Hacking Web App Attack IoT Targeted
🇨🇦 143.110.213.147	14 Nov 2021	2021-11-03T20:53:09.874475812-04:00 stdout F 143.110.213.147 - - [04/Nov/2021:00:53:09 +0000] ... show more 2021-11-03T20:53:09.874475812-04:00 stdout F 143.110.213.147 - - [04/Nov/2021:00:53:09 +0000] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 0 0.022 [] [] - - - - 7bbd82b9c65b721261e029774e9bb215 show less	Web App Attack IoT Targeted
🇸🇪 93.158.92.189	14 Nov 2021	2021-11-03T20:06:08.339736189-04:00 stdout F 93.158.92.189 - - [04/Nov/2021:00:06:08 +0000] "GET /ap ... show more 2021-11-03T20:06:08.339736189-04:00 stdout F 93.158.92.189 - - [04/Nov/2021:00:06:08 +0000] "GET /app/ HTTP/1.1" 200 3683 "https://tune.haus/ads.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 321 0.002 [navidrome-navidrome- 4533] [] 10.42.0.32:4533 3690 0.000 200 310fe65c94d84488de295885a6050c65 show less	Bad Web Bot
🇷🇺 45.146.164.110	14 Nov 2021	45.146.164.110 - - [14/Nov/2021:19:24:03 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" ... show more 45.146.164.110 - - [14/Nov/2021:19:24:03 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" 51 2.335 [] [] - - - - c6c683fd012067d18ede43bf52be2fe1 show less	Hacking Web App Attack
🇹🇭 124.156.241.39	09 Nov 2021	MBs of unwanted traffic.	SSH
🇺🇸 34.86.35.12	04 Nov 2021	34.86.35.12 - - [05/Nov/2021:00:00:03 +0000] "\x16\x03\x01\x00\xE2\x01\x00\x00\xDE\x03\x030\x9C\xE3 ... show more 34.86.35.12 - - [05/Nov/2021:00:00:03 +0000] "\x16\x03\x01\x00\xE2\x01\x00\x00\xDE\x03\x030\x9C\xE3\xE9\x94\xC0~\xD5\xE9f\x9A\xF5\xDE\xB2\xB2\xDD\x8Bk\x0Bq\x05\x97\x99~IG\xF5K\xD1\x14\xDA\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0'\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0" 400 150 "-" "-" 0 1.320 [] [] - - - - cc4b482ab0c86992144de2222bd6b82d show less	Web App Attack
🇺🇸 104.154.111.139	21 Oct 2021	104.154.111.139 - - [21/Oct/2021:00:27:12 -0400] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5 ... show more 104.154.111.139 - - [21/Oct/2021:00:27:12 -0400] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.154.111.139 - - [21/Oct/2021:00:27:12 -0400] "GET /wp-login.php HTTP/1.1" 302 5 "http://tune.haus/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Hacking Bad Web Bot Web App Attack