CSIRT.UMinho - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User CSIRT.UMinho joined AbuseIPDB in March 2025 and has reported 51 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇸🇮 31.57.184.190	22 Apr 2026	FortiGate detected 1085 brute force login attempts from IP 31.57.184.190 --- countryCode TR count ... show more FortiGate detected 1085 brute force login attempts from IP 31.57.184.190 --- countryCode TR countryName Turkey region Bursa city Bursa latitude 40.18853 longitude 29.06096 malwareGroups 1 match ---- incidents 1085 matches ruleName Multiple Logon Failures: VPN incidentTitle 8 VPN logon failures for user olga from 31.57.184.190 on server ********* firstSeenTime 04/21/2026 23:41:15 UTC lastSeenTime 04/21/2026 23:41:15 UTC severityCat MEDIUM ---- incidentId ____ ruleName Multiple Logon Failures: VPN incidentTitle 4 VPN logon failures for user antonio from 31.57.184.190 on server ******* firstSeenTime 04/21/2026 23:41:15 UTC lastSeenTime 04/21/2026 23:41:15 UTC severityCat MEDIUM ---- incidentId ____ ruleName Multiple Logon Failures: VPN incidentTitle 12 VPN logon failures for user fatima from 31.57.184.190 on server ********* firstSeenTime 04/21/2026 23:41:15 UTC lastSeenTime 04/21/2026 23:41:15 UTC severityCat MEDIUM show less	FTP Brute-Force VPN IP Hacking Brute-Force
🇸🇮 31.57.184.191	22 Apr 2026	FortiGate detected 1324 brute force login attempts from IP 31.57.184.191 --- countryCode TR count ... show more FortiGate detected 1324 brute force login attempts from IP 31.57.184.191 --- countryCode TR countryName Turkey region Bursa city Bursa latitude 40.18853 longitude 29.06096 malwareGroups 1 match ---- incidents 1324 matches ruleName Multiple Logon Failures: VPN incidentTitle 8 VPN logon failures for user ben from 31.57.184.191 on server ********* firstSeenTime 04/21/2026 23:41:15 UTC lastSeenTime 04/21/2026 23:41:15 UTC severityCat MEDIUM ---- incidentId ____ ruleName Multiple Logon Failures: VPN incidentTitle 7 VPN logon failures for user me from 31.57.184.191 on server ******* firstSeenTime 04/21/2026 23:41:15 UTC lastSeenTime 04/21/2026 23:41:15 UTC severityCat MEDIUM ---- incidentId ____ ruleName Multiple Logon Failures: VPN incidentTitle 8 VPN logon failures for user eric from 31.57.184.191 on server ********* firstSeenTime 04/21/2026 23:41:15 UTC lastSeenTime 04/21/2026 23:41:15 UTC severityCat MEDIUM show less	FTP Brute-Force VPN IP Hacking Brute-Force
🇺🇸 84.239.37.16	16 Mar 2026	FortiGate detected 344 brute force login attempts from IP 84.239.37.16 --- ruleName Failed VPN Log ... show more FortiGate detected 344 brute force login attempts from IP 84.239.37.16 --- ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from ***** at IP 84.239.37.16 from outside my country firstSeenTime 03/16/2026 15:04:30 UTC lastSeenTime 03/16/2026 15:04:30 UTC severityCat MEDIUM show less	FTP Brute-Force VPN IP Hacking Brute-Force
🇳🇬 41.58.214.146	09 Jan 2026	IP used to compromise and send phishing emails with malicious URLs (multiple)	FTP Brute-Force Phishing Email Spam Hacking Brute-Force
🇩🇪 162.19.161.205	09 Jan 2026	IP used to compromise and send phishing emails with malicious URLs (multiple)	FTP Brute-Force Email Spam Hacking Brute-Force
🇫🇷 91.238.181.54	20 Oct 2025	FortiGate detected brute force login from IP 91.238.181.54 ---- incidents 12451 matches in the las ... show more FortiGate detected brute force login from IP 91.238.181.54 ---- incidents 12451 matches in the last 24 hours incidentId 2569342 ruleName Suspicious Logon Failure without following successful login incidentTitle sgarcia from 91.238.181.54 failed to logon to v-**-* and did not succeed within 2 hours firstSeenTime 10/15/2025 03:40:30 UTC lastSeenTime 10/19/2025 16:30:45 UTC severityCat MEDIUM ------ incidentId 2569753 ruleName Suspicious Logon Failure without following successful login incidentTitle lhernandez from 91.238.181.54 failed to logon to v-**-* and did not succeed within 2 hours firstSeenTime 10/15/2025 03:40:30 UTC lastSeenTime 10/19/2025 14:50:45 UTC severityCat MEDIUM ------ incidentId 2569435 ruleName Suspicious Logon Failure without following successful login incidentTitle blong from 91.238.181.54 failed to logon to v-**-* and did not succeed within 2 hours firstSeenTime 10/15/2025 03:40:30 UTC lastSeenTime 10/19/2025 17:55:00 UTC severityCat MEDIUM show less	FTP Brute-Force VPN IP Hacking Brute-Force
🇺🇦 178.165.30.7	17 Oct 2025	FortiGate detected brute force login from IP 178.165.30.7 --- incidentId 2621889 ruleName Failed ... show more FortiGate detected brute force login from IP 178.165.30.7 --- incidentId 2621889 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from ***@@mail.pt at IP 178.165.30.7 from outside my country firstSeenTime 10/17/2025 09:45:30 UTC lastSeenTime 10/17/2025 09:45:30 UTC severityCat MEDIUM ------- incidentId 2621883 ruleName Multiple Logon Failures: VPN incidentTitle 14 VPN logon failures for user *@mail.pt from 178.165.30.7 on server v--* firstSeenTime 10/17/2025 09:45:30 UTC lastSeenTime 10/17/2025 09:45:30 UTC severityCat MEDIUM show less	VPN IP Hacking Brute-Force
🇫🇷 91.238.181.51	15 Oct 2025	FortiGate detected brute force login from IP 91.238.181.51 ---- incidents 3589 matches in the last ... show more FortiGate detected brute force login from IP 91.238.181.51 ---- incidents 3589 matches in the last 24 hours incidentId 2569279 ruleName Suspicious Logon Failure without following successful login incidentTitle sgarcia from 91.238.181.51 failed to logon to v-**-* and did not succeed within 2 hours firstSeenTime 10/11/2025 06:10:15 UTC lastSeenTime 10/14/2025 14:50:45 UTC severityCat MEDIUM ------ incidentId 2569309 ruleName Suspicious Logon Failure without following successful login incidentTitle lhernandez from 91.238.181.51 failed to logon to v-**-* and did not succeed within 2 hours firstSeenTime 10/11/2025 06:13:15 UTC lastSeenTime 10/14/2025 14:50:45 UTC severityCat MEDIUM ------ incidentId 2569290 ruleName Suspicious Logon Failure without following successful login incidentTitle blong from 91.238.181.51 failed to logon to v-**-* and did not succeed within 2 hours firstSeenTime 10/11/2025 06:11:30 UTC lastSeenTime 10/14/2025 14:51:00 UTC severityCat MEDIUM show less	VPN IP Hacking Brute-Force
🇺🇸 74.115.51.9	09 Oct 2025	This IP is being used to phish University users credentials. URL: hXXps://shorturl[.]at/36yrT \| - re ... show more This IP is being used to phish University users credentials. URL: hXXps://shorturl[.]at/36yrT \| - redirected to -> \| hXXps://outlookuminho[.]weebly[.]com show less	Phishing Email Spam Hacking
🇷🇺 178.22.24.46	19 Sep 2025	IP related to ransomware attacks, using "Makop" ransom.	FTP Brute-Force Phishing Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇸 91.233.1.15	05 Sep 2025	FortiGate detected brute force login from IP 91.233.1.15 ---- incidents 142 matches incidentId 23 ... show more FortiGate detected brute force login from IP 91.233.1.15 ---- incidents 142 matches incidentId 2383681 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from paloalto at IP 91.233.1.13 from outside my country firstSeenTime 09/05/2025 01:47:30 UTC lastSeenTime 09/05/2025 01:47:30 UTC severityCat MEDIUM ------ incidentId 2384197 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from paloalto at IP 91.233.1.16 from outside my country firstSeenTime 09/05/2025 05:07:45 UTC lastSeenTime 09/05/2025 05:07:45 UTC severityCat MEDIUM ------ incidentId 2384382 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from paloalto at IP 91.233.1.12 from outside my country firstSeenTime 09/05/2025 06:27:30 UTC lastSeenTime 09/05/2025 07:06:15 UTC severityCat MEDIUM show less	VPN IP Hacking Brute-Force
🇷🇺 178.22.24.32	05 Sep 2025	FortiGate detected brute force login from IP 178.22.24.32 ---- incidents 298 matches incidentId 2 ... show more FortiGate detected brute force login from IP 178.22.24.32 ---- incidents 298 matches incidentId 2379033 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from hpfadmin at IP 178.22.24.32 from outside my country firstSeenTime 09/04/2025 05:48:15 UTC lastSeenTime 09/04/2025 10:08:30 UTC severityCat MEDIUM ----- incidentId 2373779 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from tzdadmin at IP 178.22.24.32 from outside my country firstSeenTime 09/03/2025 08:11:00 UTC lastSeenTime 09/04/2025 10:09:15 UTC severityCat MEDIUM ----- incidentId 2373791 ruleName Multiple Logon Failures: VPN incidentTitle 8 VPN logon failures for user tzdadmin from 178.22.24.32 on server ***-s-__**-lis firstSeenTime 09/03/2025 08:13:15 UTC lastSeenTime 09/04/2025 10:09:15 UTC severityCat MEDIUM show less	VPN IP Brute-Force
🇷🇺 45.134.26.41	13 Aug 2025	FortiGate detected brute force login from IP 45.134.26.41 ---- incidents = 893 matches incidentId ... show more FortiGate detected brute force login from IP 45.134.26.41 ---- incidents = 893 matches incidentId 2291110 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from APAUL at IP 45.134.26.41 from outside my country firstSeenTime 08/12/2025 09:06:30 UTC lastSeenTime 08/12/2025 09:06:30 UTC severityCat MEDIUM --- incidentId 2291118 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from AMCCARTHY at IP 45.134.26.41 from outside my country firstSeenTime 08/12/2025 09:12:00 UTC lastSeenTime 08/12/2025 09:12:00 UTC severityCat MEDIUM --- incidentId 2291134 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from AGUERRERO at IP 45.134.26.41 from outside my country firstSeenTime 08/12/2025 09:17:15 UTC lastSeenTime 08/12/2025 09:17:15 UTC severityCat MEDIUM show less	VPN IP Hacking Brute-Force Exploited Host Web App Attack
🇻🇳 203.171.27.179	08 Aug 2025	hXXps://www.moingaydeunhuvay.click/7732471 ---> URL present in phishing campaigns across Facebook an ... show more hXXps://www.moingaydeunhuvay.click/7732471 ---> URL present in phishing campaigns across Facebook and Meta platforms show less	Phishing Hacking Spoofing
🇻🇳 113.20.119.11	08 Aug 2025	URL present in phishing campaigns across Facebook and Meta platforms	Phishing Hacking Spoofing
🇺🇸 64.29.17.195	07 Aug 2025	Phishing activity: hXXps://000uminho.vercel.app/	Phishing Email Spam
🇷🇺 185.244.180.100	01 Aug 2025	FortiGate detected brute force login from IP 185.244.180.100 + IP related to phishing campaign + Inf ... show more FortiGate detected brute force login from IP 185.244.180.100 + IP related to phishing campaign + InfoStealer Lumma --- incidents 6 matches ---- incidentId 2265386 ruleName Suspicious Logon Failure without following successful login incidentTitle [email protected] from 185.244.180.100 failed to logon to vpn-s0-scom-glt and did not succeed within 2 hours firstSeenTime 07/30/2025 19:17:45 UTC lastSeenTime 07/31/2025 17:53:00 UTC severityCat MEDIUM --- incidentId 2265146 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from [email protected] at IP 185.244.180.100 from outside my country firstSeenTime 07/30/2025 19:09:30 UTC lastSeenTime 07/31/2025 19:20:45 UTC severityCat MEDIUM --- incidentId 2268080 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from [email protected] at IP 185.244.180.100 from outside my country firstSeenTime 07/31/2025 17:52:15 UTC lastSeenTime 07/31/2025 19:21:15 UTC severityCat MEDIUM show less	FTP Brute-Force Phishing Email Spam VPN IP Hacking Brute-Force Exploited Host
🇺🇦 176.46.158.46	30 Jul 2025	FortiGate detected brute force login from IP 176.46.158.46 --- incidents 16 matches -------- inc ... show more FortiGate detected brute force login from IP 176.46.158.46 --- incidents 16 matches -------- incidentId 2260399 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from svc.test at IP 176.46.158.46 from outside my country firstSeenTime 07/29/2025 10:15:30 UTC lastSeenTime 07/29/2025 10:15:30 UTC severityCat MEDIUM ---- incidentId 2260746 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from marius at IP 176.46.158.46 from outside my country firstSeenTime 07/29/2025 11:44:15 UTC lastSeenTime 07/29/2025 11:44:15 UTC severityCat MEDIUM ---- incidentId 2261022 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from vsemaint at IP 176.46.158.46 from outside my country firstSeenTime 07/29/2025 13:19:45 UTC lastSeenTime 07/29/2025 13:19:45 UTC severityCat MEDIUM show less	VPN IP Hacking Brute-Force
🇳🇱 93.174.95.106	29 Jul 2025	IP related to malware/spyware	Phishing VPN IP Hacking Brute-Force
🇳🇱 89.248.167.131	29 Jul 2025	IP related to malware/spyware	Phishing VPN IP Hacking Brute-Force
🇬🇧 193.163.125.138	29 Jul 2025	IP related to malware/spyware	Phishing VPN IP Hacking Brute-Force
🇳🇱 204.76.203.41	28 Jul 2025	IP related to malware/spyware	Phishing Hacking Brute-Force Exploited Host
🇳🇱 92.63.197.79	28 Jul 2025	FortiGate detected brute force login from IP 92.63.197.79 --- incidentId 2254801 ruleName Failed ... show more FortiGate detected brute force login from IP 92.63.197.79 --- incidentId 2254801 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from uc_client at IP 92.63.197.79 from outside my country firstSeenTime 07/27/2025 11:25:00 UTC lastSeenTime 07/27/2025 11:25:00 UTC severityCat MEDIUM ----- incidentId 2254959 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from test_admin2 at IP 92.63.197.79 from outside my country firstSeenTime 07/27/2025 12:49:30 UTC lastSeenTime 07/27/2025 12:49:30 UTC severityCat MEDIUM ----- incidentId 2255070 ruleName Failed VPN Logon From Outside My Country incidentTitle Failed VPN login from ivpm1 at IP 92.63.197.79 from outside my country firstSeenTime 07/27/2025 14:09:30 UTC lastSeenTime 07/27/2025 14:09:30 UTC severityCat MEDIUM show less	FTP Brute-Force VPN IP Hacking Brute-Force
🇺🇸 76.223.54.146	14 Jul 2025	IP related to malware botnet " sunburst ".	Phishing Email Spam Hacking
🇫🇷 217.70.184.38	14 Jul 2025	IP related to malware botnet " bumblebee ".	DDoS Attack Phishing Hacking