User Just Cruising joined AbuseIPDB in June 2022 and has reported 228 IP addresses.
Standing (weight) is good.
INACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 192.236.193.206 |
Virus in the attachments dressed up like invoices.
|
Phishing Web Spam Email Spam | |
| 🇬🇧 193.46.254.155 |
The true source of this is Timisoara, Romania. Log4J attempts and spoofing.
|
Hacking Spoofing Web App Attack | |
| 🇬🇧 193.46.254.155 |
Log4J RCE attempts on port 80.
|
Hacking Web App Attack | |
| 🇳🇱 94.102.56.151 |
Malicious web requests and directory traversals.
|
Hacking Spoofing Web App Attack | |
| 🇬🇧 193.163.125.142 |
Hundreds of subdomains with "positive" words to throw you off. This is malicious.
|
DNS Compromise Phishing Web Spam Port Scan Spoofing | |
| 🇳🇱 193.142.146.213 |
Using DNS to do it's dirty work.
|
DNS Poisoning Web Spam Port Scan Hacking Spoofing Bad Web Bot Exploited Host Web App Attack | |
| 🇨🇦 162.216.47.26 |
Attempting to use buffer overflows to get in.
|
Port Scan Hacking Brute-Force Bad Web Bot Web App Attack | |
| 🇨🇦 138.197.149.174 |
Log4J RCE attempts on port 8080
|
Hacking Web App Attack | |
| 🇲🇩 217.12.118.123 |
Spamming the crap out of users with viral attachments.
|
Phishing Web Spam Email Spam | |
| 🇨🇦 178.128.237.62 |
Apache.Log4j.Error.Log.Remote.Code.Execution" dstport=8888 url="/
|
Hacking Web App Attack | |
| 🇩🇪 130.61.102.8 |
PHP.diescan attacks and apache RCE attacks.
|
Hacking Web App Attack | |
| 🇰🇷 15.164.5.209 |
|
DNS Compromise DNS Poisoning Port Scan Hacking | |
| 🇵🇱 178.211.139.4 |
Attempted Log4J attempts over port 8443
|
Hacking Web App Attack | |
| 🇫🇷 2.1.3.43 |
|
DNS Poisoning Phishing Web Spam Spoofing | |
| 🇩🇪 46.101.138.136 |
Port scan of TCP port 8888 and attempted an apache web exploit.
|
Port Scan Hacking Web App Attack | |
| 🇨🇭 179.43.182.165 |
Phishing with a Voicemail-like attachment email.
|
Phishing Spoofing | |
| 🇺🇸 146.88.240.248 |
unauthorized scan of port 500.
|
Port Scan | |
| 🇧🇩 103.83.207.18 |
Utilizing Think.php and apache exploits.
|
Hacking Web App Attack | |
| 🇺🇸 146.88.240.4 |
Scanning port 500.
|
Port Scan | |
| 🇰🇷 15.164.5.209 |
Spoofing another IP address for port scanning and other attempts. (94.102.61.30) Same DNS records.
|
Port Scan Hacking Spoofing | |
| 🇳🇱 94.102.61.30 |
Port scan of 520.
|
Port Scan | |
| 🇭🇰 39.109.117.24 |
php identity web exploit attempts to port 80.
|
Hacking Web App Attack | |
| 🇩🇪 131.159.24.205 |
Linux.Kernel.TCP.SACK.Panic.DoS
|
DDoS Attack | |
| 🇻🇳 103.99.0.176 |
High level of email traffic attempting to come in from this one IP. Same thing, different day.
|
DDoS Attack Phishing Email Spam | |
| 🇺🇸 165.227.30.225 |
Multiple web exploits attempted. Nearly 100 with newer Atlassian exploit included.
|
DDoS Attack Port Scan Hacking Web App Attack |