Lynn Reem - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Lynn Reem joined AbuseIPDB in July 2021 and has reported 75 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 72.21.91.29	13 Dec 2022	Hackers	DDoS Attack FTP Brute-Force Port Scan Hacking Brute-Force
🇺🇸 40.83.247.108	13 Dec 2022	Attempted hacking	DDoS Attack FTP Brute-Force Port Scan Hacking Brute-Force
🇺🇸 13.107.42.254	13 Dec 2022	Attempted hacking	DDoS Attack FTP Brute-Force Port Scan Hacking Brute-Force
🇺🇸 204.79.197.222	13 Dec 2022	Attempted hacking	FTP Brute-Force Port Scan Hacking Brute-Force
🇮🇩 103.119.144.59	04 Nov 2022	MALWAREBYTES BLOCKED: 103.119.144.59 Inbound Connection Port 135 VIRUSTOTAL 6 security vendo ... show more MALWAREBYTES BLOCKED: 103.119.144.59 Inbound Connection Port 135 VIRUSTOTAL 6 security vendors flagged this URL as malicious Malware, Malicious, Suspicious MALTIVERSE SSH Attacker ET CINS Active Threat Intelligence Poor Reputation IP UDP ET CINS Active Threat Intelligence Poor Reputation IP TCP Malicious, Host Spam, Bots, Scanning IPs WHOIS Indonesia Jakarta Pt Bali Towerindo Sentra Tbk ASN Indonesia AS136119 BALIFIBERNET-AS-ID PT Bali Towerindo Sentra, Tbk, ID (registered Dec 05, 2016) Resolve Host ip-144-59.balifiber.id route:103.119.144.0/24 Internet Service Provider Jakarta SPAMHAUS A device using 103.119.144.59 is infected with malware: 103.119.144.59 initiated a connection to a goznym command and control server, with contents unique to goznym C&C command protocols. Technical details of the goznym detection 103.119.144.59 initiated a tcp connection from 103.119.144.59 using source port 53470, to the sinkhole IP address 64.71.188.178 on destination port 80. show less	Phishing Port Scan Hacking Spoofing Bad Web Bot Exploited Host SSH
🇨🇳 118.123.105.85	02 Nov 2022	MALWAREBYTES Port: 5357 Inbound Connection VIRUSTOTAL 4 security vendors flagged this URL as m ... show more MALWAREBYTES Port: 5357 Inbound Connection VIRUSTOTAL 4 security vendors flagged this URL as malicious ABUSEIPDB IP was reported 10,178 times. Confidence of Abuse is 100% ISP ChinaNet Sichuan Province Network Usage Type Data Center/Web Hosting/Transit Domain Name chinatelecom.com.cn Country China City Deyang, Sichuan MALTIVERSE Malicious Host Mail Spammer Unauthorized scanning of hosts IMAP Attacker SSH Attacker SPAMHAUS The machine using this IP is infected with malware that is emitting spam or is sharing a connection with an infected device. As a result, this IP address is listed in the eXploits Blocklist (XBL) 118.123.105.85 is infected with satori, which is a malware in the family of mirai. Satori primarily infects Huawei and D-Link routers, though it can infect most devices that are connected to the internet. Technical details of the satori detection 118.123.105.85 initiated a tcp connection from 118.123.105.85 from port 37394 to port 37215. show less	FTP Brute-Force Phishing Port Scan Hacking Brute-Force Bad Web Bot Exploited Host SSH
🇺🇸 72.21.81.200	01 Nov 2022	MALTIVERSE 72.21.81.200 AS15133 MCI Communications Services Inc d b a Verizon Business Blackli ... show more MALTIVERSE 72.21.81.200 AS15133 MCI Communications Services Inc d b a Verizon Business Blacklist Cobalt Strike adware,nsis evasive,msil,toolbar Malicious host msil,pua,toolbar exploit banbra ,banker ,banload ,keylogger bundlore evasive hacktool HTML_PHISH.AUSEJY RiskTool.UltraSurf SGeneric Adware.Linkury Virus.Neshta Trojan.Patched.SAP Gen:Variant.Fugrafa DFI Gen:NN.ZexaF.32515 JS:Trojan.Cryxos Malware Download Phishing site Phishing Outlook Malware site Generic.PwShell.Rozena.1 Malicious Host Heur.BZC.YAX.Pantera.68 Malicious site Trojan.Ole2.Vbs Generic.Malware - Unauthorized scanning of hosts Spam Malware show less	DDoS Attack FTP Brute-Force Phishing Web Spam Email Spam Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host SSH
🇨🇳 202.105.238.155	01 Nov 2022	MALTIVERSE Unauthorized scanning of hosts Malicious Host IPQUALITYSCORE 202.105.238.155 is an ... show more MALTIVERSE Unauthorized scanning of hosts Malicious Host IPQUALITYSCORE 202.105.238.155 is an IP address located in Meizhou, Guangdong, CN that is assigned to China Telecom (ASN: 4134). The IP Reputation for 202.105.238.155 is rated as medium risk and occasionally may allow IP tunneling for suspicious or malicious behavior. This IP address (202.105.238.155) is a proxy connection and is associated with recent SPAM blacklist activity or abusive behavior. Fraud Score 83 China Telecom Meizhou, CN DNSLYTICS netname: CHINANET-GD descr: CHINANET Guangdong province network descr: Data Communication Division descr: China Telecom country: CN admin-c: CH93-AP tech-c: IC83-AP abuse-c: AC1573-AP status: ALLOCATED PORTABLE Traceroute for : 202.105.238.155 IPv4 Traceroute of 202.105.238.155 Hop Ip RTT Location 1 45.79.12.0 0.461 Texas, United States 2 213.248.83.174 1.065 Sweden 3 154.24.11.149 1.128 United States 4 62.115.118.247 show less	Phishing Port Scan Hacking Brute-Force Exploited Host SSH
🇳🇱 89.248.165.70	01 Nov 2022	MALWAREBYTES* Port: 5357 Inbound Connection VIRUSTOTAL* 6 security vendors flagged this URL ... show more MALWAREBYTES* Port: 5357 Inbound Connection VIRUSTOTAL* 6 security vendors flagged this URL as malicious MALTIVERSE* ET CINS Active Threat Intelligence Poor Reputation IP UDP Malicious Host Mail Spammer SSH Attacker Malicious Host SSH Attacker ET COMPROMISED Known Compromised or Hostile Host Traffic UDP, TCP DNSLYTICS* PTR record recyber.net ASN number 202425 ASN name (ISP) IP Volume inc IP-range/subnet 89.248.165.0/24 89.248.165.0 - 89.248.165.255 Number of SPAM hosts on 89.248.165.0/24 - 11 country: NL org: ORG-IVI1-RIPE organisation: ORG-IVI1-RIPE org-name: IP Volume inc address: Victoria, Mahe address: Seychelles ALIENVAULT*** Location: United Kingdom of Great Britain and Northern Ireland flagUnited Kingdom of Great Britain and Northern Ireland webscanner, bruteforce, badrequest, probing, webscan, tsec, tpot19, honeypot, la-safe.org, Port scan, tcp, Malicious IP, botnet, mirai, blacklist, show less	Phishing Web Spam Port Scan Hacking Brute-Force Bad Web Bot Exploited Host SSH
🇳🇱 94.102.61.45	01 Nov 2022	MALWAREBYTES RTP Detection Port 5357 Inbound Connection VIRUSTOTAL 5 security vendors flagged ... show more MALWAREBYTES RTP Detection Port 5357 Inbound Connection VIRUSTOTAL 5 security vendors flagged this URL as malicious WHOIS IP Location: Netherlands Netherlands Amsterdam Criminal Ip Collector Aispera ASN: Netherlands AS202425 INT-NETWORK, SC (registered May 17, 2018) Resolve Host: security.criminalip.com inetnum: 94.102.61.0 - 94.102.61.255 netname: AISPERA descr: Criminal IP Collector AiSpera remarks: Criminal IP collects port information for only security/research purposes. remarks: It only reads the response data from basic port requests, remarks: and never utilizes vulnerability scanning or other exploit scripts. remarks: Our internet-wide, non-intrusive port scanning does not target specific IP addresses. It differs from malicious acts such as DDoS attacks in that it simply surveys by knocking on the door(port). show less	Port Scan Exploited Host IoT Targeted
🇺🇸 76.217.92.231	01 Nov 2022	Malwarebytes* Blocked Website Details: Trojan Outbound Connection Port: 1030 VirusTotal* ... show more Malwarebytes* Blocked Website Details: Trojan Outbound Connection Port: 1030 VirusTotal* 5 security vendors flagged this URL as malicious Maltiverse* Mail Spammer Malicious Host ET CINS Active Threat Intelligence Poor Reputation IP TCP ET CINS Active Threat Intelligence Poor Reputation IP UDP Malware Download DNSlytics* Location: Miami, Florida, United States (US) PTR record: 76-217-92-231.lightspeed.miamfl.sbcglobal.net ASN number: 7018 ASN name (ISP) AT&T Services, Inc. IP-range/subnet 76.216.0.0/14 76.216.0.0 - 76.219.255.255 Number of SPAM hosts on 76.216.0.0/14 2 RegDate: 2006-09-15 Updated: 2018-07-19 show less	Phishing Hacking SSH
🇺🇸 107.182.237.14	01 Nov 2022	VirusTotal 6 security vendors flagged this URL as malicious Phishing and Other Frauds Whois IP ... show more VirusTotal 6 security vendors flagged this URL as malicious Phishing and Other Frauds Whois IP Location: United States New York Hosting Services Inc. ASN: United States AS32780 HOSTINGSERVICES-INC, US (registered Mar 26, 2008) NetRange: 107.182.224.0 - 107.182.239.255 CIDR: 107.182.224.0/20 NetName: HSI-NET-107-182-224-0-1 NetHandle: NET-107-182-224-0-1 Parent: NET107 (NET-107-0-0-0-0) NetType: Direct Allocation OriginAS: AS29854 Organization: Hosting Services, Inc. (HOSTI-20) RegDate: 2015-06-29 Updated: 2015-07-01 Malwarebytes Riskware Outbound Connection Port 6672 InfoByIp Mtr report Hop IP Packet loss Round trip Location 1 45.79.12.0 0.0 0.5 ms Texas, United States 2 154.24.11.149 0.0 1.0 ms United States 3 154.54.3.105 0.0 2.6 ms United States 4 154.54.44.229 0.0 7.6 ms United States 5 154.54.28.129 0.0 20.8 ms United States 6 154.54.24.221 0.0 39.8 ms United St show less	Phishing Port Scan
🇺🇸 100.8.130.37	01 Nov 2022	Malwarebytes Category: Trojan Port: 6672 Type: Outbound VirusTotal 5 security vendors flagged ... show more Malwarebytes Category: Trojan Port: 6672 Type: Outbound VirusTotal 5 security vendors flagged this URL as malicious InfoByIp Domain pool-100-8-130-37.nwrknj.fios.verizon.net ISP UUNET ASN 701 State/region New Jersey City Matawan Postal code 07747 Traceroute of 100.8.130.37 IPv4 Hop Ip RTT Location 1 45.79.12.2 0.418 Texas, United States 2 213.248.83.174 1.212 Sweden Hop Ip RTT Location 1 45.79.12.6 8.300 Texas, United States 2 213.248.83.174 1.003 Sweden 3 62.115.136.82 1.383 Sweden Mtr report tool Hop IP Packet loss Round trip Location 1 45.79.12.4 0.0 1.8 ms Texas, United States 2 213.248.83.174 0.0 1.2 ms Sweden 3 140.222.10.213 0.0 43.0 ms United States 4 140.222.4.107 0.0 43.1 ms United States 5 100.41.195.113 0.0 42.7 ms United States 6 100.8.130.37 0.0 44.8 ms New Jersey, United States show less	FTP Brute-Force Port Scan SSH
🇺🇸 71.6.232.20	01 Nov 2022	VirusTotal 6 security vendors flagged this URL as malicious Malwarebytes PORT: 135 Inbound Con ... show more VirusTotal 6 security vendors flagged this URL as malicious Malwarebytes PORT: 135 Inbound Connection Whois IP Location: United States Henderson Carinet Inc. ASN: United States AS10439 CARINET, US (registered Aug 05, 1997) OrgName: CariNet, Inc. OrgId: CARIN-6 Address: 170 S Green Valley Parkway, Suite 300 City: Henderson StateProv: NV PostalCode: 89012 Country: US RegDate: 2009-11-17 Updated: 2019-08-28 Ref: https://rdap.arin.net/registry/entity/CARIN-6 Domain zx2.quadmetrics.com Traceroute of 71.6.232.4 Hop Ip RTT Location 1 45.79.12.4 0.460 Texas, United States 2 45.79.12.8 0.491 Texas, United States 3 154.24.31.217 1.070 United States 4 154.54.1.109 2.895 United States 5 154.54.44.229 7.350 United States 6 154.54.30.162 23.257 United States 7 154.54.42.65 31.253 United States 8 154.54.42.65 31.075 United States 9 154.54.6.121 40.382 United States 10 216.98.153.44 41.885 United States show less	Port Scan
🇳🇱 185.156.73.131	01 Nov 2022	VirusToal 5 security vendors flagged this URL as malicious Port: 5040 Whois inetnum: ... show more VirusToal 5 security vendors flagged this URL as malicious Port: 5040 Whois inetnum: 185.156.73.0 - 185.156.73.255 netname: Reldas-net country: NL admin-c: ACRO20646-RIPE tech-c: ACRO20646-RIPE status: ASSIGNED PA org: ORG-OS297-RIPE mnt-by: protonserv-mnt created: 2019-10-04T13:57:22Z last-modified: 2021-11-09T03:54:34Z source: RIPE organisation: ORG-OS297-RIPE org-name: OOO SibirInvest org-type: OTHER country: RU address: GOROD KRASNOYARSK, ULICA KALININA, DOM 51 G, OFIS 104 show less	Port Scan
🇳🇱 89.248.163.189	01 Nov 2022	VirusTotal 4 security vendors flagged this URL as malicious Final URL: http://openportstats.com/in ... show more VirusTotal 4 security vendors flagged this URL as malicious Final URL: http://openportstats.com/info Whois IP Location: Netherlands Netherlands Amsterdam Ip Volume Inc ASN: Netherlands AS202425 INT-NETWORK, SC (registered May 17, 2018) Resolve Host: recyber.net 89.248.163.128 - 89.248.163.255 netname: NET-3-163 descr: RECYBER PROJECT NETBLOCK remarks: +----------------------------------------------- remarks: \| This net-block is not trying to hack you, we are only scanning remarks: \| for LEGIT purposes ONLY. This scanning is done by multiple remarks: \| security organizations. remarks: \| Please use https://www.recyber.net/opt-out remarks: \| to have your ip-address and/or netblock/as number white-listed remarks: \| and excluded from this project. remarks: \| If you have any further questions please contact show less	Port Scan
🇨🇦 68.183.200.45	01 Nov 2022	Malwarebytes Protection Event Date: 11/1/22 Malicious Website: 1 Category: Compromised Domain: ... show more Malwarebytes Protection Event Date: 11/1/22 Malicious Website: 1 Category: Compromised Domain: IP Address: 68.183.200.45 Port: 443 VirusTotal Outgoing links http://httpd.apache.org/docs/2.4/mod/mod_userdir.html https://bugs.launchpad.net/ubuntu/+source/apache2 WHOIS 68.183.0.0 - 68.183.255.255 CIDR: 68.183.0.0/16 NetName: DIGITALOCEAN-68-183-0-0 NetHandle: NET-68-183-0-0-1 Parent: NET68 (NET-68-0-0-0-0) NetType: Direct Allocation OriginAS: AS14061 Organization: DigitalOcean, LLC (DO-13) RegDate: 2018-09-18 Updated: 2020-04-03 Comment: Routing and Peering Policy can be found at https://www.as14061.net OrgName: DigitalOcean, LLC OrgId: DO-13 Address: 101 Ave of the Americas Address: FL2 City: New York StateProv: NY PostalCode: 10013 Country: US RegDa show less	Port Scan
🇳🇱 139.45.197.239	02 Jul 2022	Redirect From: https://www.amoyshare.com/free-youtube-downloader/ TO: https://ugroocuw.net/4/5117 ... show more Redirect From: https://www.amoyshare.com/free-youtube-downloader/ TO: https://ugroocuw.net/4/5117843/?var=4934155&ab2r=0&prfrev=false&rhd=false And TO: https://www.gxpowered.com/ef/?tl=aHR0cHM6Ly93d3cuZ2V0Z3gubmV0L2NtcC9CWDdKRjgvUDVIUEhCLwo=&sub1=SUBID&sub2=CLICKID&btn=2&sub1=4934155&sub2=567124649151045876 IP Information for 139.45.197.239 https://whois.domaintools.com/139.45.197.239 IP Location: Netherlands Netherlands Eindhoven netname: Propeller-Ads country: NL VIRUSTOTAL: Dr.Web known infection source/not recommended site Comodo Valkyrie Verdict unknown VIRUSTOTAL ON THIS URL: https://ugroocuw.net/4/5117843/?var=4934155&ab2r=0&prfrev=false&rhd=false ugroocuw.net 9 security vendors flagged this URL as malicious Dr.Web known infection source Forcepoint ThreatSeeker malicious web sites. information technology Sophos spyware and malware Comodo Valkyrie Verdict media sharing Webroot Phishing and Other Frauds show less	Phishing Web Spam Port Scan Spoofing Bad Web Bot Exploited Host
🇳🇱 139.45.197.239	02 Jul 2022	Redirect	DNS Compromise Web Spam Hacking Spoofing Bad Web Bot Exploited Host