🇺🇸
LSPCCU
2026-06-16 05:43:12
(2 weeks ago)
TSEC Honeypot Network report. Threat score: 79/100. Categories: Hacking. Honeypot: ssh-telnet, cowri ...
show more
TSEC Honeypot Network report. Threat score: 79/100. Categories: Hacking. Honeypot: ssh-telnet, cowrie. Context: 209.
show less
Hacking
🇬🇧
PeravixGroup
2026-05-07 11:58:30
(1 month ago)
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show more
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇨🇳
ThreatBook.io
2026-05-05 23:07:52
(1 month ago)
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.160.153
2026-05 ...
show more
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.160.153
2026-05-05 16:04:58 /management/tenant-monitoring/servers
2026-05-05 16:04:56 /weblogic/ready
2026-05-05 16:04:55 /console/login/LoginForm.jsp
show less
Web App Attack
2026-04-28 16:21:22
(2 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-04-12 08:59:33
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇳🇱
DrLex0
2026-03-20 03:26:28
(3 months ago)
Web spam on hidden bait web form
Web Spam
🇺🇸
cyfordtechnologies.com
2026-03-14 17:36:27
(3 months ago)
High-abuse ASN prefix: 209.50. : Reported by Cyford API
Web App Attack
2026-03-06 12:20:19
(3 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-02-19 03:02:44
(4 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2026-02-09 21:56:09
(4 months ago)
209.50.160.153 - - [09/Feb/2026:21:55:58 +0000] "GET /dev/.git/config HTTP/1.1" 302 503 "-" "Mozilla ...
show more
209.50.160.153 - - [09/Feb/2026:21:55:58 +0000] "GET /dev/.git/config HTTP/1.1" 302 503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 17:28:52
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:28:44.282041 2026] [security2:error] [pid 26333:tid 26333] [client 209.50.160.153:32013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundaciondamashcc.org.ec"] [uri "/.env.local"] [unique_id "aYoZTNkiSPpMYk695CyfHQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 10:38:20
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:38:14.219799 2026] [security2:error] [pid 174336:tid 174355] [client 209.50.160.153:18921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gafm.org"] [uri "/backend/.env"] [unique_id "aYm5FjkUZSKWtzNZvFhfOQAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 10:01:50
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:01:45.023891 2026] [security2:error] [pid 9251:tid 9251] [client 209.50.160.153:22555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabosoftware.com"] [uri "/dev/.git/config"] [unique_id "aYmwib9F7eBfAAIqWd0xlwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 06:14:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:14:15.461673 2026] [security2:error] [pid 9228:tid 9230] [client 209.50.160.153:14485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.co.uk"] [uri "/api/.env"] [unique_id "aYl7N_PB4v8yofJIFtX-uAAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 19:18:34
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:18:29.982294 2025] [security2:error] [pid 21039:tid 21039] [client 209.50.160.153:26803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthonyanimalclinic.net"] [uri "/.svn/wc.db"] [unique_id "aSikBagPwg2nw6l2ATpjTwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack