AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User omelyko joined AbuseIPDB in October 2026 and has reported 5 IP addresses.

Standing (weight) is Unknown.

ACTIVE USER

IP	Date	Comment	Categories
🇫🇮 95.133.253.15	25 Oct 2026	First-stage downloader host for cryptojacking malware dropped via brute-forced exposed PostgreSQL (C ... show more First-stage downloader host for cryptojacking malware dropped via brute-forced exposed PostgreSQL (COPY FROM PROGRAM -> wget from this IP) at 2026-10-21 00:53 UTC. show less	Hacking Exploited Host
🇫🇮 31.22.104.54	25 Oct 2026	Malware payload server: http://31.22.104.54:18899/lx.sh fetched by watchdog of cryptojacking malware ... show more Malware payload server: http://31.22.104.54:18899/lx.sh fetched by watchdog of cryptojacking malware planted via brute-forced PostgreSQL. XMR wallet 47p1wUQNKMAiP2547VLSb8EAEgKEe2MDF9S71MPkhCcd8SZMjxQe9cpQtNcyc3V8CHFdbcP9dij31MWFAZHj5EtkL3tQvhp. Observed 2026-10-21..25. show less	Hacking Exploited Host
🇸🇬 139.99.69.109	25 Oct 2026	Monero mining pool/proxy (port 10001) used by cryptojacking malware planted via compromised PostgreS ... show more Monero mining pool/proxy (port 10001) used by cryptojacking malware planted via compromised PostgreSQL. XMR wallet 47p1wUQNKMAiP2547VLSb8EAEgKEe2MDF9S71MPkhCcd8SZMjxQe9cpQtNcyc3V8CHFdbcP9dij31MWFAZHj5EtkL3tQvhp. Miner SHA256 f68383181e81bc2d5c0528209d9d493f1c58dc1998da6df8f7f9097263050122. Observed 2026-10-21..25. show less	Hacking
🇳🇱 89.125.187.222	25 Oct 2026	Cryptojacking C2 (XMRig cc-server, TLS on 5432) controlling miners planted via brute-forced exposed ... show more Cryptojacking C2 (XMRig cc-server, TLS on 5432) controlling miners planted via brute-forced exposed PostgreSQL (COPY FROM PROGRAM). Miner disguised as 'pg_wal' in /var/run/postgresql/.kd/. XMR wallet 47p1wUQNKMAiP2547VLSb8EAEgKEe2MDF9S71MPkhCcd8SZMjxQe9cpQtNcyc3V8CHFdbcP9dij31MWFAZHj5EtkL3tQvhp. Miner SHA256 f68383181e81bc2d5c0528209d9d493f1c58dc1998da6df8f7f9097263050122. Observed 2026-10-21..25. show less	Hacking Exploited Host
🇩🇪 103.7.55.233	25 Oct 2026	Monero mining pool/proxy (port 10001) used by cryptojacking malware planted via compromised PostgreS ... show more Monero mining pool/proxy (port 10001) used by cryptojacking malware planted via compromised PostgreSQL. XMR wallet 47p1wUQNKMAiP2547VLSb8EAEgKEe2MDF9S71MPkhCcd8SZMjxQe9cpQtNcyc3V8CHFdbcP9dij31MWFAZHj5EtkL3tQvhp. Miner SHA256 f68383181e81bc2d5c0528209d9d493f1c58dc1998da6df8f7f9097263050122. Observed 2026-10-21..25. show less	Hacking