🇫🇷
Sklurk
2026-09-01 02:36:59
(21 hours ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-21 15:07:45
(1 week ago)
ccideas.com.au:443 209.50.166.93 - - [22/Aug/2026:01:07:41 +1000] "GET /?author=3 HTTP/1.1" 404 2113 ...
show more
ccideas.com.au:443 209.50.166.93 - - [22/Aug/2026:01:07:41 +1000] "GET /?author=3 HTTP/1.1" 404 211347 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-21 08:47:30
(1 week ago)
shotbysuzanne.com.au:443 209.50.166.93 - - [21/Aug/2026:18:47:28 +1000] "GET /?author=4 HTTP/1.1" 40 ...
show more
shotbysuzanne.com.au:443 209.50.166.93 - - [21/Aug/2026:18:47:28 +1000] "GET /?author=4 HTTP/1.1" 404 123918 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇫🇷
Sklurk
2026-08-17 03:53:22
(2 weeks ago)
Web App Attack
Web App Attack
🇲🇽
octageeks.com
2026-08-16 04:13:54
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-08-14 18:06:33
(2 weeks ago)
Trying to access config files
Web App Attack
🇲🇹
Malta
2026-08-14 07:25:40
(2 weeks ago)
209.50.166.93 - - [14/Aug/2026:09:25:40 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ...
show more
209.50.166.93 - - [14/Aug/2026:09:25:40 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
show less
Hacking
Web App Attack
🇫🇷
Sklurk
2026-07-29 00:46:11
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-20 02:03:01
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
LSPCCU
2026-05-04 16:14:38
(3 months ago)
TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: ssh-telnet, cowri ...
show more
TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: ssh-telnet, cowrie. Context: 209.
show less
Hacking
🇸🇬
securejdprop
2026-05-03 15:22:42
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 62). Ip 209.50.166.93 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-03 15:22:41.542087258 +0000 UTC
show less
Hacking
Web App Attack
🇮🇩
Burayot
2026-02-23 16:52:34
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 209.50.166.93 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 209.50.166.93 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 21:22:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.166.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.166.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:22:47.917632 2026] [security2:error] [pid 1063091:tid 1063091] [client 209.50.166.93:10025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garbothemusical.net"] [uri "/backup/.git/config"] [unique_id "aYpQJ_2qCJgLTm3BIseMjwAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:08:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.166.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.166.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:08:41.368857 2026] [security2:error] [pid 5643:tid 5643] [client 209.50.166.93:63383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galengetting.com"] [uri "/admin/.git/config"] [unique_id "aYo-yVzqnd5QcvoMuguNHgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 18:53:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.166.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.166.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:53:48.145645 2026] [security2:error] [pid 30641:tid 30641] [client 209.50.166.93:21269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxztrader.com"] [uri "/test/.git/config"] [unique_id "aYotPODNBNt6JIrLKDxYlQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack