JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.160.132

209.50.160.132 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.160.132

Whois 209.50.160.132

IP Abuse Reports for 209.50.160.132:

This IP address has been reported a total of 17 times from 9 distinct sources. 209.50.160.132 was first reported on September 27th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-06-14 19:15:31 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-05-17 05:07:03 (1 month ago)	Brute force	Brute-Force
🇺🇸 nowyouknow	2026-01-01 10:52:27 (6 months ago)	(From [email protected]) Hello there, Instead of paying high local rates, you can outso ... show more (From [email protected]) Hello there, Instead of paying high local rates, you can outsource digital marketing tasks to a dedicated assistant for $250/month—full-time support across SEO, Google & Meta Ads, Email Marketing, Social Media, and more. The first month is free. Submit the form below to start. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
🇮🇹 VHosting	2025-12-24 02:00:29 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇳🇱 jjnxpct	2025-11-25 04:54:06 (7 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:46:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:46:14.248136 2025] [security2:error] [pid 9420:tid 9420] [client 209.50.160.132:23485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berklie.com"] [uri "/.svn/wc.db"] [unique_id "aSQbVg3rv0N6NTRODqT_pQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:55:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:54:53.787419 2025] [security2:error] [pid 15451:tid 15451] [client 209.50.160.132:21413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alan-droege.com"] [uri "/.env"] [unique_id "aSPzLTT8IBtwNE1bqQOvHgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:25:57 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:25:53.616253 2025] [security2:error] [pid 3965259:tid 3965332] [client 209.50.160.132:12645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventistdeathconfusion.com"] [uri "/.git/HEAD"] [unique_id "aSPsYcHsvdKIeQe-cM8yfQAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:26:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.160.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:25:56.701571 2025] [security2:error] [pid 28778:tid 28778] [client 209.50.160.132:32779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.psychtraining.org"] [uri "/.git/HEAD"] [unique_id "aSPeVB1Df5-pa-nmSZEa2wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-08 02:25:56 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.08 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 20:47:34 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
🇵🇱 sefinek.net	2025-10-06 23:28:15 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-10-06 19:58:06 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 13:34:59 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 01:51:14 (9 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.02 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.247.247

🇺🇸 38.96.178.220

🇧🇪 198.235.24.159

🇧🇬 193.8.4.158

🇺🇸 172.214.209.153

🇧🇷 170.83.2.21

🇪🇸 149.86.233.213

🇺🇸 147.185.132.33

🇺🇸 103.79.79.243

🇩🇪 65.111.22.125

🇺🇸 65.49.1.121

🇨🇳 203.83.234.180

🇮🇩 163.7.14.248

🇷🇺 90.188.57.67

🇺🇸 68.225.62.19

🇺🇸 20.65.193.170

🇻🇳 14.232.125.232

🇦🇷 179.40.45.198

🇩🇪 104.207.51.85

🇵🇰 103.179.241.107