User Propsoft joined AbuseIPDB in January 2018 and has reported 234 IP addresses.

Standing (weight) is good.

ACTIVE USER
IP Date Comment Categories
🇩🇪 138.199.18.78
Uses TOR to attack servers from multiple IPs simultaneously. Not quite DDoS, but similar approach.
Hacking
🇪🇬 156.194.142.67
Failed shellshock attack
Exploited Host
🇳🇱 159.223.237.29
Attempted shellshock download.
Exploited Host
🇬🇧 31.111.43.123
Posting spam to different website "Contact Us" forms
Web Spam
🇪🇬 156.201.247.131
Trying to access cgi-bin (which doesn't exist)
Hacking
🇨🇳 120.85.112.72
Attempt to utilise the GPON vulnerability
Hacking
🇮🇳 139.59.68.184
Unauthorised access attempts
Hacking
🇦🇺 170.64.134.89
Unauthorised access attempt looking for 'aaa9'
Hacking
🇺🇸 64.62.197.213
Hacking
🇨🇦 172.83.47.114
Hacking
🇮🇳 117.195.88.183
HNAP vulnerability scanning
Hacking
🇺🇸 173.217.241.72
Unauthorised access attempts
Hacking
🇹🇷 147.78.47.249
Looking for Wordpress vulnerabilities on servers that do not use Wordpress
Hacking
🇺🇸 35.166.25.10
Hacking
🇫🇷 178.170.37.11
(France) Replaying API conversation from a UK client
Hacking
🇺🇸 35.160.166.139
Shellshock attempt
Exploited Host
🇪🇨 45.71.3.73
Unauthorised ssh access attempts
Hacking
🇺🇸 35.161.23.30
Hacking Exploited Host
🇺🇸 69.55.5.249
Honeypot server access
Hacking
🇷🇺 62.204.41.33
Russians looking around a honeypot server without permission
Hacking
🇬🇧 46.161.11.89
Constant posting same adverts to webform
Web Spam
🇨🇳 61.164.47.194
From China, unauthorised access to servers with stolen credentials
Hacking
🇬🇧 138.199.63.99
Scamming, claiming to be from UK (with a UK IP) but wasn't
Email Spam
🇷🇴 185.100.84.240
Replaying API conversations into our servers, as sourced from a valid client with spyware!
Spoofing
🇺🇸 192.241.213.154
Unauthorised attempts to access an FTP server
FTP Brute-Force