Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
91.54.174.214 has a threat confidence score of 86%. This IP address from Germany (AS3320, Deutsche Telekom AG) has been observed in 1 honeypot sessions targeting HTTP protocols. Detected attack patterns include http get ping cgi command injection wget arm7, http ping command injection download execute arm7. First observed on April 5, 2026, most recently active April 5, 2026.
HTTP GET request to /ping.cgi with command injection payload downloading and executing ARM7 binary via wget.
HTTP GET request exploiting pingIpAddress parameter command injection to download an ARM7 binary via wget, write it to /tmp, set executable permissions, and execute it.