JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.161.19

209.50.161.19 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.161.19

Whois 209.50.161.19

IP Abuse Reports for 209.50.161.19:

This IP address has been reported a total of 24 times from 16 distinct sources. 209.50.161.19 was first reported on September 26th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-09 04:17:57 (5 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 FeG Deutschland	2026-07-08 11:56:15 (6 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇫🇷 pm33	2026-07-08 01:20:54 (6 days ago)	Wordpress login attempts	Brute-Force
🇲🇽 octageeks.com	2026-07-07 04:20:46 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-07-04 15:43:55 (1 week ago)	209.50.161.19 - - [04/Jul/2026:17:43:54 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 209.50.161.19 - - [04/Jul/2026:17:43:54 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-07-01 22:57:26 (1 week ago)	(y4) Failed scan -byebye- from 209.50.161.19 (US/United States/-): (CF_ENABLE)	Hacking
🇺🇸 mnsf	2026-06-10 00:09:59 (1 month ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇩🇪 Ad Ministrator	2026-05-15 00:29:32 (1 month ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
🇮🇹 VHosting	2025-12-24 08:25:18 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-08 22:32:18 (7 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 02:58:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:58:21.014824 2025] [security2:error] [pid 21098:tid 21098] [client 209.50.161.19:34045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.nilestree.com"] [uri "/.git/HEAD"] [unique_id "aSUbTWryJh8e02-tEkJS4wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:12:56 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:12:52.772535 2025] [security2:error] [pid 27466:tid 27466] [client 209.50.161.19:45969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.friendlyfarmfun.daisydoesoap.com"] [uri "/.env"] [unique_id "aSUQpOjEJgh-Muizd0enAAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:13:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:13:21.553908 2025] [security2:error] [pid 18307:tid 18307] [client 209.50.161.19:53871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ferrarapanfitness.com"] [uri "/.git/HEAD"] [unique_id "aSUCsUNsGx77hLwuYn5l8wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:28:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:28:21.797052 2025] [security2:error] [pid 21652:tid 21652] [client 209.50.161.19:43463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kdgsf.xyz"] [uri "/.git/HEAD"] [unique_id "aSQlNd7qh-2Ls6tIMo3nkAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:59:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:59:11.516962 2025] [security2:error] [pid 16250:tid 16250] [client 209.50.161.19:48955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.compupackinc.com"] [uri "/.svn/wc.db"] [unique_id "aSQeX10WSUO0b44zHG0eNAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 36.113.46.80

🇮🇳 20.204.136.58

🇧🇷 205.210.31.181

🇺🇸 147.185.132.63

🇨🇳 117.29.44.86

🇯🇵 115.179.102.180

🇨🇳 106.13.114.235

🇧🇬 87.227.220.164

🇷🇺 85.174.182.226

🇬🇧 81.111.223.51

🇷🇴 80.94.92.145

🇳🇱 64.225.72.42

🇨🇦 54.39.136.243

🇨🇦 51.161.65.253

🇳🇱 45.148.10.152

🇳🇱 45.148.10.67

🇺🇸 44.218.146.159

🇲🇦 41.143.140.27

🇮🇳 20.40.58.232

🇺🇸 2600:1f18:3120:f504:47c3:ebea:a4f1:5b0