149.7.16.23
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- GLOBALTELEHOST CORP.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS63023
- Hostname(s)
- 23-16-7-149.clients.gthost.com
- Domain Name
- globaltelehost.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- London, England
Abuse Reports
Total reports
13 from
11 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RonnieGas |
Automated scanning and API/path probing against a web application (login, API and path enumeration, proxy pool). Blocked by firewall.
|
Web App Attack Bad Web Bot Brute-Force Hacking | |
| 🇳🇱 e.fierstra |
ModSecurity hits exceeded
|
Bad Web Bot Web App Attack | |
| 🇺🇸 SX Communications |
Blocked abusive HTTP application-layer DoS / botnet traffic from 149.7.16.23: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/http-sensitive-files - events: 5
|
Web App Attack Hacking | |
| 🇺🇸 SX Communications |
Web vulnerability scanning / probing from 149.7.16.23: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 8 hits; paths: /.git.tar.gz, /.git.zip, /.git/HEAD, /app/.git/HEAD, /html/.git/HEAD.
|
Port Scan Hacking Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇺🇸 SX Communications |
Web vulnerability scanning / probing from 149.7.16.23: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 3 hits; paths: /.svn/wc.db, /.svn/entries.
|
Port Scan Hacking Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇧🇪 voormedia |
Accessed trap at '/.git/HEAD'
|
Web App Attack | |
| Anonymous |
GET /.git/HEAD HTTP/1.1
...
|
Web App Attack | |
| 🇮🇩 aaKenshin |
|
Hacking | |
| 🇿🇦 conure.sh |
csagent: score 20.0: secrets grab x2; 2 domain(s) in 10m47s
|
Web App Attack | |
| 🇳🇱 Mangelot Hosting |
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 149.7.16.23 (GB/United Kingdom/23-16-7-149.clients.gthost.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown