cyfence007 - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User cyfence007 joined AbuseIPDB in December 2018 and has reported 94 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 5.34.207.171	13 Apr 2022	SMTP Brute force	Brute-Force
🇹🇭 161.82.232.196	06 Jan 2022	RDP Scan Attempt	Brute-Force
🇩🇪 35.198.104.221	22 Oct 2021	- web_app3: Nette.Framework.Callback.Parameter.Remote.Code.Execution - web_server: HTTP.Request.URI ... show more - web_app3: Nette.Framework.Callback.Parameter.Remote.Code.Execution - web_server: HTTP.Request.URI.Directory.Traversal - applications3: DVR.Manufacturers.Configuration.Information.Disclosure - applications3: Novell.File.Reporter.FSFUI.UICMD.126.Arbitrary.File.Retrieval - applications3: Novell.ZENworks.Asset.Management.Web.Information.Disclosure show less	Hacking
🇯🇵 167.179.65.77	22 Oct 2021	- applications3: Cisco.ASA.Web.Interface.Directory.Traversal - applications3: Plone.Zope.Remote.Com ... show more - applications3: Cisco.ASA.Web.Interface.Directory.Traversal - applications3: Plone.Zope.Remote.Command.Execution - applications3: Spring.Boot.Actuator.Unauthorized.Access - applications3: SugarCRM.Information.Disclosure - applications3: Web.Server.Password.Files.Access - backdoor: Linksys.Routers.Administrative.Console.Authentication.Bypass - web_app3: WordPress.REST.API.Username.Enumeration.Information.Disclosure - web_misc: Common.Gateway.Interface.common.cgi.Access - web_misc: NETGEAR.WNDAP350.Wireless.Access.Point.Information.Disclosure - web_server: HTPasswd.Access - web_server: HTTP.Request.URI.Directory.Traversal - web_server: IISadmin.ISM.DLL.Access - web_server: MS.IIS.admpwd.anot.Access show less	Hacking
🇯🇵 45.76.219.225	22 Oct 2021	- web_app3: Oracle.Forms.And.Reports.Remote.Code.Execution - web_server: MS.IIS.WebHits.Authenticat ... show more - web_app3: Oracle.Forms.And.Reports.Remote.Code.Execution - web_server: MS.IIS.WebHits.Authentication.Bypass - applications3: Yaws.Unauthenticated.HTTP.Directory.Traversal - applications3: Plone.Zope.Remote.Command.Execution - web_server: Oracle.WebLogic.Fusion.Middleware.Authentication.Bypass - web_app3: MS.Exchange.Server.CVE-2021-34473.Remote.Code.Execution - applications3: MobileIron.MDM.Unauthenticated.Remote.Code.Execution - email: MS.Exchange.Server.ProxyRequestHandler.Remote.Code.Execution - applications3: Lucee.Administrator.imgProcess.cfm.Arbitrary.File.Write - web_app3: Alibaba.Nacos.API.Use show less	Hacking SQL Injection Web App Attack
🇨🇳 124.133.215.126	22 Oct 2021	- apache: Apache.Struts.2.REST.Plugin.XStream.Handler.Code.Execution - web_server: PHPUnit.Eval-std ... show more - apache: Apache.Struts.2.REST.Plugin.XStream.Handler.Code.Execution - web_server: PHPUnit.Eval-stdin.PHP.Remote.Code.Execution - applications3: Laravel.Ignition.Phar.Stream.Wrapper.Insecure.Deserialization - web_server: HTTP.Post.Directory.Traversal.File.Upload - applications3: Cisco.HyperFlex.HX.storfs-asup.Handling.Command.Injection show less	Hacking
🇭🇰 192.254.89.155	22 Oct 2021	- HTTP.Request.URI.Directory.Traversal - This indicates detection of a directory traversal attack in ... show more - HTTP.Request.URI.Directory.Traversal - This indicates detection of a directory traversal attack in the HTTP URI - PhpStudy.Web.Server.Remote.Code.Execution - This indicates an attack attempt to exploit a Remote Code Execution Vulnerability in PhpStudy - Seeyon.Office.Anywhere.htmlofficeservlet.Arbitrary.File.Upload - SolarWinds.Orion.Local.File.Inclusion - This indicates an attack attempt to exploit a Local File Inclusion vulnerability in SolarWinds Orion - Alibaba.Nacos.AuthFilter.Authentication.Bypass - This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Alibaba Nacos show less	Hacking
🇭🇰 103.149.249.243	22 Oct 2021	web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbyn ... show more web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbynet.Type.Parameter.Remote.Command.Execution web_app3: YCCMS.Factory.File.Remote.Code.Execution web_server: HTTP.Request.URI.Directory.Traversal web_server: Oracle.WebLogic.Fusion.Middleware.Authentication.Bypass web_misc: HTTP.Referer.Header.SQL.Injection applications3: Web.Server.Password.Files.Access web_app3: phpMyAdmin.scripts.setup.php.Insecure.Deserialization show less	Hacking
🇭🇰 103.149.249.242	22 Oct 2021	web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbyn ... show more web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbynet.Type.Parameter.Remote.Command.Execution web_app3: YCCMS.Factory.File.Remote.Code.Execution web_server: HTTP.Request.URI.Directory.Traversal web_server: Oracle.WebLogic.Fusion.Middleware.Authentication.Bypass web_misc: HTTP.Referer.Header.SQL.Injection applications3: Web.Server.Password.Files.Access web_app3: phpMyAdmin.scripts.setup.php.Insecure.Deserialization show less	Hacking
🇭🇰 103.149.249.239	22 Oct 2021	web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbyn ... show more web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbynet.Type.Parameter.Remote.Command.Execution web_app3: YCCMS.Factory.File.Remote.Code.Execution web_server: HTTP.Request.URI.Directory.Traversal web_server: Oracle.WebLogic.Fusion.Middleware.Authentication.Bypass web_misc: HTTP.Referer.Header.SQL.Injection applications3: Web.Server.Password.Files.Access web_app3: phpMyAdmin.scripts.setup.php.Insecure.Deserialization show less	Hacking
🇭🇰 103.149.249.240	22 Oct 2021	web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbyn ... show more web_server: Oracle.WebLogic.Server.wls9_async.Component.Code.Injection web_server: Zeroshell.Kerbynet.Type.Parameter.Remote.Command.Execution web_app3: YCCMS.Factory.File.Remote.Code.Execution web_server: HTTP.Request.URI.Directory.Traversal web_server: Oracle.WebLogic.Fusion.Middleware.Authentication.Bypass web_misc: HTTP.Referer.Header.SQL.Injection applications3: Web.Server.Password.Files.Access web_app3: phpMyAdmin.scripts.setup.php.Insecure.Deserialization show less	Hacking
🇩🇪 34.89.179.113	22 Oct 2021	- HTTP.Request.URI.Directory.Traversal - This indicates detection of a directory traversal attack in ... show more - HTTP.Request.URI.Directory.Traversal - This indicates detection of a directory traversal attack in the HTTP URI - Nette.Framework.Callback.Parameter.Remote.Code.Execution - Linksys.DirecTV.WVB.HTTP.Header.Remote.Command.Execution - Novell.ZENworks.Asset.Management.Web.Information.Disclosure - Novell.File.Reporter.FSFUI.UICMD.126.Arbitrary.File.Retrieval - DVR.Manufacturers.Configuration.Information.Disclosure - File.Upload.HTTP show less	Hacking Web App Attack
🇹🇼 60.249.19.5	22 Oct 2021	- WordPress.HTTP.Path.Traversal - WordPress.Web.API.Endpoint.Privilege.Escalation - File.Upload.HT ... show more - WordPress.HTTP.Path.Traversal - WordPress.Web.API.Endpoint.Privilege.Escalation - File.Upload.HTTP show less	Web App Attack
🇨🇦 34.130.135.146	22 Oct 2021	- HTTP.Request.URI.Directory.Traversal - Joomla.Plugin.Com.Fabrik.Arbitrary.File.Upload - Joomla. ... show more - HTTP.Request.URI.Directory.Traversal - Joomla.Plugin.Com.Fabrik.Arbitrary.File.Upload - Joomla.Plugin.Com.Jce.Arbitrary.File.Upload show less	Hacking Web App Attack
🇸🇬 178.128.122.95	22 Oct 2021	Signature: - HTTP.Request.URI.Directory.Traversal - HTTP.Referer.Header.SQL.Injection - HTTP.Hea ... show more Signature: - HTTP.Request.URI.Directory.Traversal - HTTP.Referer.Header.SQL.Injection - HTTP.Header.SQL.Injection - Apache.Struts.2.REST.Plugin.XStream.Handler.Code.Execution - Primetek.Primefaces.5.Remote.Code.Execution - Ruby.on.Rails.Action.View.Information.Disclosure show less	SQL Injection Exploited Host Web App Attack
🇺🇸 3.15.140.204	22 Oct 2021	web_server: HTTP.Request.URI.Directory.Traversal web_app3: Joomla!.com_fabrik.Plugin.Arbitrary.File ... show more web_server: HTTP.Request.URI.Directory.Traversal web_app3: Joomla!.com_fabrik.Plugin.Arbitrary.File.Upload web_app3: Joomla!.com_jce.Plugin.Arbitrary.File.Upload web_app3: Joomla!.Core.Account.Creation.Privilege.Escalation show less	Web App Attack
🇫🇷 20.199.90.141	22 Oct 2021	- PHP.Malicious.Shell - This indicates an attempt to use a malicious PHP page - HTTP.Request.URI.Di ... show more - PHP.Malicious.Shell - This indicates an attempt to use a malicious PHP page - HTTP.Request.URI.Directory.Traversal - Joomla.Core.Session.Remote.Code.Execution - Joomla.Plugin.Com.Fabrik.Arbitrary.File.Upload - Joomla.Plugin.Com.Jce.Arbitrary.File.Upload - Open.Flash.Chart.PHP.File.Upload show less	Hacking Exploited Host
🇨🇱 45.236.131.55	13 Oct 2021	Unauthorize access using ftp protocol	Hacking Brute-Force
218.208.110.162	21 Jun 2021	HTTP SQL Injection Attempt	SQL Injection
218.82.168.139	15 Jun 2021	Microhard Systems 4G Cellular Ethernet and Serial Gateway Information Disclosure Vulnerability	Exploited Host
192.236.193.8	08 Jun 2021	HTTP.URI.SQL.Injection	SQL Injection
131.159.24.205	30 May 2021	TCP SACK panic DOS	Exploited Host
203.150.84.221	30 May 2021	Suspicious Login Attempt	Brute-Force
205.185.122.102	30 Mar 2021	WebApp Unauthentication Remote Access	Hacking Web App Attack
185.193.91.42	17 Mar 2021	Hack	Port Scan Hacking Exploited Host Web App Attack