AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User OperatorXoR joined AbuseIPDB in August 2025 and has reported 86 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 66.235.114.141	05 Feb 2026	Cisco.Smart.Install.Feature.Enable.Scanner This IP address has been observed in the wild attempti ... show more Cisco.Smart.Install.Feature.Enable.Scanner This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 69.57.160.214	04 Feb 2026	AiTM attack Infrastructure - spreading WeTransfer Links and malicious signins from this IP address. ... show more AiTM attack Infrastructure - spreading WeTransfer Links and malicious signins from this IP address. This IP should be considered Malicious show less	Phishing Hacking
🇺🇸 66.235.114.44	03 Feb 2026	This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relate ... show more This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relates to an attack attempt against an XML External Entity (XXE) vulnerability in Apache Camel. The vulnerability is due to an design weakness when a vulnerable module handles a crafted XML file. A remote attacker can exploit this to gain unauthorized access to sensitive information via a crafted XML file. Affected products: Apache Software Foundation Camel 2.11.0 to 2.11.3 Apache Software Foundation Camel 2.12.0 to 2.12.2 Further information available here: https://www.fortiguard.com/encyclopedia/ips/38143 https://vulert.com/vuln-db/CVE-2014-0002 https://app.opencve.io/cve/CVE-2014-0002 show less	Hacking
🇺🇸 162.255.119.152	25 Jan 2026	Newly created clone domain - suspected for use in credential harvesting, C2 Infrastructure and/or co ... show more Newly created clone domain - suspected for use in credential harvesting, C2 Infrastructure and/or company brand and image impact show less	Hacking
🇺🇸 66.235.114.238	25 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relate ... show more This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relates to an attack attempt against an XML External Entity (XXE) vulnerability in Apache Camel. The vulnerability is due to an design weakness when a vulnerable module handles a crafted XML file. A remote attacker can exploit this to gain unauthorized access to sensitive information via a crafted XML file. Affected products: Apache Software Foundation Camel 2.11.0 to 2.11.3 Apache Software Foundation Camel 2.12.0 to 2.12.2 Further information available here: https://www.fortiguard.com/encyclopedia/ips/38143 https://vulert.com/vuln-db/CVE-2014-0002 https://app.opencve.io/cve/CVE-2014-0002 show less	Hacking
🇺🇸 66.235.114.63	23 Jan 2026	Cisco.Smart.Install.Feature.Enable.Scanner This IP address has been observed in the wild attempti ... show more Cisco.Smart.Install.Feature.Enable.Scanner This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.63	23 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relate ... show more This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relates to an attack attempt against an XML External Entity (XXE) vulnerability in Apache Camel. The vulnerability is due to an design weakness when a vulnerable module handles a crafted XML file. A remote attacker can exploit this to gain unauthorized access to sensitive information via a crafted XML file. Affected products: Apache Software Foundation Camel 2.11.0 to 2.11.3 Apache Software Foundation Camel 2.12.0 to 2.12.2 Further information available here: https://www.fortiguard.com/encyclopedia/ips/38143 https://vulert.com/vuln-db/CVE-2014-0002 https://app.opencve.io/cve/CVE-2014-0002 show less	Hacking
🇺🇸 66.235.114.55	21 Jan 2026	Cisco.Smart.Install.Feature.Enable.Scanner This IP address has been observed in the wild attempti ... show more Cisco.Smart.Install.Feature.Enable.Scanner This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.213	19 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇸🇰 149.102.232.25	18 Jan 2026	This IP address has been observed attempting the exploitation of CVE-2016-0703 relating to SSLv2.Ope ... show more This IP address has been observed attempting the exploitation of CVE-2016-0703 relating to SSLv2.Openssl.Get.Shared.Ciphers.Buffer.Overflow This is a buffer overflow vulnerability related to OpenSSL and its implementation of the SSLv2 protocol https://nvd.nist.gov/vuln/detail/CVE-2016-0703 IP addresses observed relating to this activity: 146.70.98.26 (VPN) Brazil 79.127.181.65 (VPN) Greece 98.159.234.57 (non VPN) Great Britain 98.159.234.30 (non VPN) Great Britain 138.199.59.45 (VPN) Poland 5.182.110.166 (VPN) USA 91.90.120.147 (tor) Poland 193.239.84.60 (Non VPN) Great Britain 185.94.190.206 (VPN) Hungary 173.239.217.153 (VPN) Andorra 146.70.38.46 (VPN) Argentina 149.102.232.31 (VPN) Slovakia 176.125.228.37 (VPN) Algeria 77.81.142.62 (Non VPN) Mexico 212.102.49.190 (Non VPN) Spain 179.61.197.19 (non VPN) Canada 178.128.66.254 (Non VPN) USA 196.196.53.58 (VPN) Latvia 77.81.142.236 (Non VPN) Mexico 149.102.232.25 (VPN) Slovakia show less	Hacking
🇯🇵 103.163.220.37	18 Jan 2026	This IP address is involved in hostile threat actor activity	Hacking
🇺🇸 66.235.114.208	15 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relate ... show more This IP address has been observed in the wild attempting to exploit CVE-2014-0002 This CVE relates to an attack attempt against an XML External Entity (XXE) vulnerability in Apache Camel. The vulnerability is due to an design weakness when a vulnerable module handles a crafted XML file. A remote attacker can exploit this to gain unauthorized access to sensitive information via a crafted XML file. Affected products: Apache Software Foundation Camel 2.11.0 to 2.11.3 Apache Software Foundation Camel 2.12.0 to 2.12.2 Further information available here: https://www.fortiguard.com/encyclopedia/ips/38143 https://vulert.com/vuln-db/CVE-2014-0002 https://app.opencve.io/cve/CVE-2014-0002 show less	Hacking
🇺🇸 138.68.234.142	12 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.62	12 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.101	12 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.189	08 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.126	06 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.72	04 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.158	04 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.109	02 Jan 2026	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇦🇺 16.176.169.115	31 Dec 2025		Hacking Web App Attack
🇺🇸 66.235.114.127	29 Dec 2025	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
🇺🇸 66.235.114.167	21 Dec 2025	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Port Scan Hacking
🇺🇸 66.235.114.32	21 Dec 2025	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Port Scan Hacking
🇺🇸 173.255.229.190	20 Dec 2025	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Port Scan Hacking