AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Anonymous joined AbuseIPDB in March 2022 and has reported 137 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇷🇺 138.124.186.221	30 Jun 2022	According to CISA.gov Many of these observed IP addresses are several years old and have been his ... show more According to CISA.gov Many of these observed IP addresses are several years old and have been historically linked to MedusaLocker ransomware. We recommend these IP addresses be investigated or vetted by organizations prior to taking action, such as blocking. Email spam and phishing is a common initial intrusion vector for MedusLocker 195.123.246.138 138.124.086.221 159.223.0.9 45.146.164.141 185.220.101.35 185.220.100.249 50.80.219.149 185.220.101.146 185.220.101.252 179.60.150.97 84.38.189.52 94.232.43.63 108.11.30.103 194.61.55.94 198.50.233.202 40.92.90.105 188.68.216.23 87.251.75.71 196.240.57.20 198.0.198.5 194.5.220.122 194.5.250.124 194.5.220.124 104.210.72.161 show less	DDoS Attack Phishing Email Spam
🇨🇿 195.123.246.138	30 Jun 2022	According to CISA.gov Many of these observed IP addresses are several years old and have been his ... show more According to CISA.gov Many of these observed IP addresses are several years old and have been historically linked to MedusaLocker ransomware. We recommend these IP addresses be investigated or vetted by organizations prior to taking action, such as blocking. Email spam and phishing is a common initial intrusion vector for MedusLocker 195.123.246.138 138.124.186.221 159.223.0.9 45.146.164.141 185.220.101.35 185.220.100.249 50.80.219.149 185.220.101.146 185.220.101.252 179.60.150.97 84.38.189.52 94.232.43.63 108.11.30.103 194.61.55.94 198.50.233.202 40.92.90.105 188.68.216.23 87.251.75.71 196.240.57.20 198.0.198.5 194.5.220.122 194.5.250.124 194.5.220.124 104.210.72.161 show less	DDoS Attack Phishing Email Spam
🇧🇪 185.180.143.146	29 Jun 2022	[DoS Attack: TCP/UDP Echo] from source: 185.180.143.146, port 54820, Wednesday, June 29, 2022 16:52: ... show more [DoS Attack: TCP/UDP Echo] from source: 185.180.143.146, port 54820, Wednesday, June 29, 2022 16:52:38 show less	DDoS Attack
🇺🇸 23.10.240.130	29 Jun 2022	[DoS Attack: SYN/ACK Scan] from source: 23.10.240.130, port 80, Wednesday, June 29, 2022 16:51:35 [ ... show more [DoS Attack: SYN/ACK Scan] from source: 23.10.240.130, port 80, Wednesday, June 29, 2022 16:51:35 [DoS Attack: SYN/ACK Scan] from source: 23.10.240.130, port 80, Wednesday, June 29, 2022 16:51:35 Logged twice almost instantaneously show less	DDoS Attack
🇺🇸 23.10.240.129	29 Jun 2022	[DoS Attack: SYN/ACK Scan] from source: 23.10.240.129, port 80, Wednesday, June 29, 2022 16:50:36	DDoS Attack
🇩🇪 3.49.59.202	29 Jun 2022	DoS attack on Port 443	DDoS Attack
🇺🇸 23.10.240.120	29 Jun 2022	[DoS Attack: SYN/ACK Scan] from source: 23.10.240.120, port 80, Wednesday, June 29, 2022 09:28:07	DDoS Attack
🇷🇴 2.57.122.225	28 Jun 2022	[DoS Attack: SYN/ACK Scan] from source: 2.57.122.225, port 27745, Tuesday, June 28, 2022 16:38:15 ... show more [DoS Attack: SYN/ACK Scan] from source: 2.57.122.225, port 27745, Tuesday, June 28, 2022 16:38:15 Antiy-AVL Malicious Comodo Valkyrie Verdict Malicious CRDF Malicious Cyble Malicious CyRadar Malicious Fortinet Malware alphaMountain.ai Suspicious http://2.57.122.225/ 2.57.122.225 2022-06-28 21:14:13 Compromised Host Known compromised or Hostile IPs 100 IP: 2.57.122.225 Last Analysis Date: 2022-06-28 17:14:12 ( 3 minutes ago ) ASN: Country: IP Range: 2.57.122.0 - 2.57.122.255 IP Range Owner: DMZHOST show less	DDoS Attack
🇺🇸 172.232.7.195	28 Jun 2022	https://letsencrypt.org/docs/lencr.org/ These connections are not considered malicious. This is con ... show more https://letsencrypt.org/docs/lencr.org/ These connections are not considered malicious. This is considered an advertising injector However, Comodo Valkyrie Verdict detects this site as Malware show less	Web Spam
🇺🇸 23.64.114.214	28 Jun 2022	[DoS Attack: SYN/ACK Scan] from source: 2.57.122.225, port 27745, Tuesday, June 28, 2022 16:38:15 ... show more [DoS Attack: SYN/ACK Scan] from source: 2.57.122.225, port 27745, Tuesday, June 28, 2022 16:38:15 Antiy-AVL Malicious Comodo Valkyrie Verdict Malicious CRDF Malicious Cyble Malicious CyRadar Malicious Fortinet Malware alphaMountain.ai Suspicious show less	DDoS Attack
🇺🇸 34.149.211.227	28 Jun 2022	DoS attack port 443	DDoS Attack
🇺🇸 34.117.254.173	28 Jun 2022	DoS port 443	DDoS Attack
🇺🇸 3.94.191.212	28 Jun 2022	Port 443 several times in a row	DDoS Attack
🇺🇸 23.33.44.73	27 Jun 2022	reported as a certificate site (lencr.org) that "infects a computer" but only for advertising purpos ... show more reported as a certificate site (lencr.org) that "infects a computer" but only for advertising purposes. However, Lencr claims anything that goes through their site is for authentication purposes only. See: https://letsencrypt.org/docs/lencr.org/ site the IP whois report brought up was r3.o.lencr.org show less	DDoS Attack
🇺🇸 23.64.114.214	27 Jun 2022	port 80	DDoS Attack
🇨🇳 49.234.145.254	27 Jun 2022	Null Scan on Port 26574	DDoS Attack
🇺🇸 35.224.170.165	27 Jun 2022	SYN/ACK attack on port 80	DDoS Attack
🇩🇪 168.119.232.76	26 Jun 2022	port 443 syn/ack	DDoS Attack
🇺🇸 74.119.119.129	26 Jun 2022	Port 443 RST Scan	DDoS Attack
🇺🇸 64.74.236.31	24 Jun 2022	RST Scan Port 443	DDoS Attack
🇳🇱 45.82.64.230	24 Jun 2022	DoS Port 22 SYN/ACK Scan	DDoS Attack
🇺🇸 50.31.142.127	24 Jun 2022	dos rst scan	DDoS Attack
🇨🇳 113.204.208.2	24 Jun 2022	dos	DDoS Attack
🇺🇸 104.22.48.81	24 Jun 2022	port 2095	DDoS Attack
🇺🇸 67.23.145.220	24 Jun 2022	DoS attack on ports 35819, 39216, 39222 and 39216 all in the same time frame	DDoS Attack