User UndergroundExplorer joined AbuseIPDB in December 2024 and has reported 55 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 34.69.72.229 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.70.244.119 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.171.251.200 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇧🇪 35.189.207.86 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 35.196.244.131 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.26.129.240 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 35.237.76.201 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.24.194.221 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.23.125.105 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.138.167.37 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 136.108.4.72 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.139.8.35 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇺🇸 34.24.28.92 |
Attempting to exploit The Next.js Middleware Authorization Bypass Vulnerability
|
Web App Attack | |
| 🇨🇳 175.19.54.132 |
Maliciously reported IP address based on TAXII feeds attempting to Brute Force Logins
|
Brute-Force | |
| 🇺🇸 198.12.110.109 |
Attempted brute forcing on web applications
|
Brute-Force Web App Attack | |
| 🇳🇱 93.123.109.127 |
Attempted brute force of account via SMTP.
|
Brute-Force | |
| 🇨🇭 179.43.150.26 |
Attempted SQL Injection with the intention of gaining access to credentials
|
SQL Injection | |
| 🇫🇷 185.177.72.61 |
Continuously scanning infrastructure
|
Port Scan SQL Injection | |
| 🇺🇸 216.144.226.214 |
Aggressive web scan
|
Web App Attack SQL Injection | |
| 🇺🇸 216.144.226.214 |
Aggressive web scan
|
Web App Attack SQL Injection | |
| 🇳🇱 5.255.106.68 |
12,000 brute force attempts
|
Brute-Force | |
| 🇱🇹 185.169.4.201 |
12,000 brute force attempts
|
Brute-Force | |
| 🇳🇱 77.83.39.34 |
12,000 brute force attempts
|
Brute-Force | |
| 🇺🇸 155.94.173.117 |
Aggressive web scan
|
Port Scan SQL Injection Web App Attack | |
| 🇷🇴 193.32.162.71 |
Attempted brute-force of SaaS accounts.
|
Brute-Force |