Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
99.127.85.206 has a threat confidence score of 83%. This IP address from United States (AS7018, AT&T Enterprises, LLC) has been observed in 2 honeypot sessions targeting HTTP protocols. Detected attack patterns include http get ping cgi command injection wget arm7, http ping command injection download execute arm7. First observed on April 7, 2026, most recently active April 30, 2026.
HTTP GET request to /ping.cgi with command injection payload downloading and executing ARM7 binary via wget.
HTTP GET request exploiting pingIpAddress parameter command injection to download an ARM7 binary via wget, write it to /tmp, set executable permissions, and execute it.