User T13nn3s joined AbuseIPDB in January 2021 and has reported 8 IP addresses.
Standing (weight) is good.
INACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 104.21.18.30 |
A malicious website that impersonates Citrix. MSFT believed that this is connected to DEV-1043.
|
Hacking | |
| 🇳🇱 45.85.190.75 |
Password Spray attack through the Authenticated SMTP protocol.
|
Hacking Brute-Force | |
| 🇷🇺 195.16.103.84 |
E-mail spam from 195.16.103.84 (spt.fsin.gov.ru)
|
Email Spam | |
| 🇮🇩 103.159.205.11 |
IP is being used to send spam/spoofed email messages.
|
Email Spam Spoofing | |
| 🇷🇴 109.166.129.48 |
Attack with Sodinokibi-ransomware (REvil). Initial access through RDP.
|
Hacking | |
| 🇵🇱 176.111.173.68 |
Attack with Sodinokibi-ransomware (REvil). Initial access through RDP.
|
Hacking | |
| 🇫🇷 51.38.239.189 |
Attack with Sodinokibi-ransomware (REvil). Initial access through RDP.
|
Hacking | |
| 🇷🇺 94.232.43.63 |
Attack with Sodinokibi-ransomware (REvil). Initial access through RDP.
|
Hacking |