Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
58.104.142.127 has a threat confidence score of 87%. This IP address from Australia (AS4804, Microplex PTY LTD) has been observed in 2 honeypot sessions targeting HTTP protocols. Detected attack patterns include http get ping cgi command injection wget arm7, http ping command injection download execute arm7. First observed on April 6, 2026, most recently active April 6, 2026.
HTTP GET request to /ping.cgi with command injection payload downloading and executing ARM7 binary via wget.
HTTP GET request exploiting pingIpAddress parameter command injection to download an ARM7 binary via wget, write it to /tmp, set executable permissions, and execute it.