Semaj - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Semaj , the webmaster of mangrum.net, joined AbuseIPDB in May 2024 and has reported 10 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 172.245.182.109	23 Jan 2026	12,000+ DNS REFUSED Queries in 24 hours Multiple IDS alerts for same id: Snort[34571] [136:1: ... show more 12,000+ DNS REFUSED Queries in 24 hours Multiple IDS alerts for same id: Snort[34571] [136:1:1] (spp_reputation) packets block-list [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 172.245.182.109:44673 -> X.X.X.X:53 show less	Hacking
🇫🇷 193.41.206.24	02 Jan 2025	Multiple 404 requests to apache server from IP.	Web App Attack
🇺🇸 104.156.155.14	14 Jun 2024	Jun 14 06:58:09 panthro.mangrum.lan filterlog[37050] 8,,,1000000103,vtnet1,match,block,in,4,0x0,,235 ... show more Jun 14 06:58:09 panthro.mangrum.lan filterlog[37050] 8,,,1000000103,vtnet1,match,block,in,4,0x0,,235,28415,0,none,6,tcp,40,104.156.155.14,...,56162,3005,0,S,2440460929,,1024,, Jun 14, 2024 @ 06:55:19.659cheetaraMultiple pfSense firewall blocks events from same source. 10 87702104.156.155.14 Jun 14, 2024 @ 06:51:17.390cheetaraMultiple pfSense firewall blocks events from same source. 10 87702104.156.155.14 Jun 14, 2024 @ 06:43:58.905cheetaraMultiple pfSense firewall blocks events from same source. 10 87702104.156.155.14 Jun 14, 2024 @ 06:33:58.268cheetaraMultiple pfSense firewall blocks events from same source. 10 87702104.156.155.14 show less	Port Scan Port Scan Hacking Hacking
🇺🇸 165.154.134.141	02 Jun 2024	Jun 2 17:54:14 mail postfix/smtpd[12070]: improper command pipelining after EHLO from unknown[165.1 ... show more Jun 2 17:54:14 mail postfix/smtpd[12070]: improper command pipelining after EHLO from unknown[165.154.134.141]: help\r\n\r\n show less	Hacking
🇺🇸 104.152.52.100	24 May 2024	2024-05-23T21:05:18.550619-05:00 L4 FIREWALL[10078]: nflog_log_fw(), action=DROP reason=FLOOD limit ... show more 2024-05-23T21:05:18.550619-05:00 L4 FIREWALL[10078]: nflog_log_fw(), action=DROP reason=FLOOD limit 25pps burst 50 hook=PREROUTING mark=136314880 IN=br2 OUT= MAC=SRC=104.152.52.100 DST= LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=38220 PROTO=TCP SPT=56239 DPT=1645 SEQ=2143063265 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Hacking
🇸🇬 206.189.37.170	24 May 2024	206.189.37.170 - - [23/May/2024:01:13:55 -0500] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ... show more 206.189.37.170 - - [23/May/2024:01:13:55 -0500] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" Multiple web server 400 error codes from same source ip. show less	Hacking Web App Attack
🇮🇳 149.129.147.213	24 May 2024	149.129.147.213 - - [23/May/2024:16:56:06 -0500] "POST /resolve HTTP/1.1" 404 515 "-" "Go-http-clien ... show more 149.129.147.213 - - [23/May/2024:16:56:06 -0500] "POST /resolve HTTP/1.1" 404 515 "-" "Go-http-client/1.1" 149.129.147.213 - - [23/May/2024:16:56:06 -0500] "GET /resolve?name=example.com&type=A HTTP/1.1" 404 515 "-" "Go-http-client/1.1" Multiple web server 400 error codes from same source ip. show less	Hacking Web App Attack
🇺🇸 83.147.52.37	24 May 2024	Web server 400 error code. - Multiple web server 400 error codes from same source ip. 83.147.52.37 ... show more Web server 400 error code. - Multiple web server 400 error codes from same source ip. 83.147.52.37 - - [23/May/2024:19:15:33 -0500] "GET /backend/.git/config HTTP/1.1" 404 3759 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3887.7 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 73.208.82.227	23 May 2024	15,873 reported blocked attempts on my network firewall to various IPs and port in a 6 hour period ... show more 15,873 reported blocked attempts on my network firewall to various IPs and port in a 6 hour period Aprox from: May 22, 2024 @ 14:04:34.456 - May 22, 2024 @ 20:18:26.513 full_log May 22 20:09:18 *..* filterlog[35639] 8,,,1000000103,vtnet1,match,block,in,4,0x0,,235,54982,0,none,6,tcp,40,73.208.82.227,*...*,9426,25,0,A,,0,8192,, show less	Hacking