This IP address has been reported a total of
38
times from
31 distinct
sources.
50.116.37.80 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
France
with 2
reports;
Greece
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
14
times;
Bad Web Bot
5
times;
Brute-Force
3
times;
Hacking
3
times;
Port Scan
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
"GET /wp-content/plugins/shell/about.php HTTP/1.1" 404 9994 "www.google.com" "Mozlila/5.0 (Linux; An ...
show more"GET /wp-content/plugins/shell/about.php HTTP/1.1" 404 9994 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
show less
Bad Web Bot
Anonymous
Automated report (2026-10-13T07:20:37+00:00). User agent cited by various attack tools, rootkits, ba ...
show moreAutomated report (2026-10-13T07:20:37+00:00). User agent cited by various attack tools, rootkits, backdoors, webshells, and malware detected.
show less
Hacking
Bad Web Bot
Exploited Host
Web App Attack
Open Proxy
(mod_security) mod_security (id:1000001) triggered by 50.116.37.80 (US/United States/Georgia/Atlanta ...
show more(mod_security) mod_security (id:1000001) triggered by 50.116.37.80 (US/United States/Georgia/Atlanta/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:40:35.097635 2026] [security2:error] [pid 822764:tid 822880] [client 50.116.37.80:60588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/plugins/shell/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "gyrosplace.gr"] [uri "/wp-content/plugins/shell/about.php"] [unique_id "aszVQ3PuJOaZY5Jj2x7vCgAAAgE"], referer: www.google.com
show less
Port Scan
Anonymous
[ns19.kdns.gr] httpd-shell-path-probe: sites=www.t-support.gr; logs=/var/log/httpd/domains/t-support ...
show more[ns19.kdns.gr] httpd-shell-path-probe: sites=www.t-support.gr; logs=/var/log/httpd/domains/t-support.gr.log; samples=/wp-content/plugins/fix/up.php
show less
Not following 301 redirects — wasted requests | method: GET | path: /wp-content/plugins/shell/about. ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /wp-content/plugins/shell/about.php | ua: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.
show less
