🇳🇱
Savvii
2025-12-04 05:40:32
UTC ·
(11 months ago)
10 attempts against mh-pma-try-ban on cedar
Web App Attack
Anonymous
2025-12-02 06:49:15
UTC ·
(11 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack
Anonymous
2025-11-30 16:41:00
UTC ·
(11 months ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
🇷🇸
Smel
2025-11-28 10:45:17
UTC ·
(11 months ago)
MH/MP Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
donarev419
2025-11-26 07:00:54
UTC ·
(11 months ago)
Abused http on 80
2025-11-26T07:00:54Z client "GET /sql/phpmyadmin4/index.php?lang=en HTTP/1.1"
2025-11-26T07:00:54Z client "Host: 104.250.239.52"
2025-11-26T07:00:54Z client "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Abused http on 80
2025-11-26T07:00:54Z client "GET /sql/phpmyadmin4/index.php?lang=en HTTP/1.1"
2025-11-26T07:00:54Z client "Host: 104.250.239.52"
2025-11-26T07:00:54Z client "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
2025-11-26T07:00:54Z client "Accept-Encoding: gzip"
2025-11-26T07:00:54Z server "HTTP/1.1 200 OK"
show less
Port Scan
Bad Web Bot
🇩🇪
Dadelinux
2025-11-25 12:43:38
UTC ·
(11 months ago)
Nov 25 13:43:36 phpmyadmin: user denied: wordpress (mysql-denied) from 50.7.158.195
Nov 25 13:43:36 phpmyadmin: user denied: wordpress (mysql-denied) from 50.7.158.195
Nov 25 13:43:37 phpmyadmin: user denied: wordpress (mysql-denied) from 50.7.158.19 ...
show more
Nov 25 13:43:36 phpmyadmin: user denied: wordpress (mysql-denied) from 50.7.158.195
Nov 25 13:43:36 phpmyadmin: user denied: wordpress (mysql-denied) from 50.7.158.195
Nov 25 13:43:37 phpmyadmin: user denied: wordpress (mysql-denied) from 50.7.158.195
show less
SQL Injection
Brute-Force
🇨🇳
ThreatBook.io
2025-11-23 23:56:02
UTC ·
(11 months ago)
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/50.7.158.195
2025-11-23 12:31:02 /sql/php-myadmin/index.php?lang=en
2025-11-23 12:31:01 /_phpMyAdmin/index.php?lang=en
2025-11-23 12:31:01 /phpMyAdmin5.1/index.php?lang=en
...
show more
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/50.7.158.195
2025-11-23 12:31:02 /sql/php-myadmin/index.php?lang=en
2025-11-23 12:31:01 /_phpMyAdmin/index.php?lang=en
2025-11-23 12:31:01 /phpMyAdmin5.1/index.php?lang=en
2025-11-23 12:31:02 /phpmyadmin2017/index.php?lang=en
2025-11-23 12:31:02 /db/phpmyadmin/index.php?lang=en
2025-11-23 12:31:01 /db/myadmin/index.php?lang=en
2025-11-23 12:31:01 /mysql/mysqlmanager/index.php?lang=en
2025-11-23 12:31:02 /phpMyAdmin-5.1.3/index.php?lang=en
2025-11-23 12:31:02 /shopdb/index.php?lang=en
show less
Web App Attack
🇵🇱
swiszczu
2025-11-21 14:58:17
UTC ·
(11 months ago)
Fail2Ban automatic report:
Multiple forbidden requests in short amount of time:
50.7.158.195 - - [21/Nov/2025:15:58:11 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ...
show more
Fail2Ban automatic report:
Multiple forbidden requests in short amount of time:
50.7.158.195 - - [21/Nov/2025:15:58:11 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
50.7.158.195 - - [21/Nov/2025:15:58:12 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
50.7.158.195 - - [21/Nov/2025:15:58:12 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
50.7.158.195 - - [21/Nov/2025:15:58:13 +0100] "GET /_phpmyadmin_/index.php?lang=en HTTP/1.1" 403 555 "-" "Moz
show less
Hacking
Web App Attack
🇺🇸
xmission.com
2025-11-21 08:12:56
UTC ·
(11 months ago)
Blocked by UFW (TCP on 80)
Source port: 33466
TTL: 56
Packet length: 60
TOS: 0x00
This report (for 50.7.158.195) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Web App Attack
🇺🇸
jkhorvath
2025-11-20 22:36:52
UTC ·
(11 months ago)
Request for URL /MyAdmin/index.php?lang=en
Phishing
Brute-Force
Web App Attack
🇺🇸
MPL
2025-11-20 15:37:43
UTC ·
(11 months ago)
tcp/80 (4 or more attempts)
Port Scan
🇺🇸
MPL
2025-11-20 15:37:43
UTC ·
(11 months ago)
tcp/80 (2 or more attempts)
Port Scan
🇩🇪
DaleCooper
2025-11-20 14:21:15
UTC ·
(11 months ago)
50.7.158.195 - - [20/Nov/2025:15:21:12 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 139 "http://185.244.195.191/phpMyAdmin-3/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137. ...
show more
50.7.158.195 - - [20/Nov/2025:15:21:12 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 139 "http://185.244.195.191/phpMyAdmin-3/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
50.7.158.195 - - [20/Nov/2025:15:21:14 +0100] "GET /phpMyAdmin-5/index.php?lang=en HTTP/1.1" 404 139 "http://185.244.195.191/phpMyAdmin-5/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
...
show less
Brute-Force
🇬🇧
rori.rapidtravelgroup.com
2025-11-17 19:40:15
UTC ·
(11 months ago)
Fail2Ban+ban+on+nginx-botsearch
Brute-Force
Web App Attack
🇩🇪
ps-center
2025-11-17 11:22:24
UTC ·
(11 months ago)
HHV: Web Attack GET /db/phpmyadmin4/index.php?lang=en
Web Spam
Hacking
Bad Web Bot
Web App Attack