JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.161.208

209.50.161.208 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 57%: ?

57%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.161.208

Whois 209.50.161.208

IP Abuse Reports for 209.50.161.208:

This IP address has been reported a total of 27 times from 17 distinct sources. 209.50.161.208 was first reported on September 27th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-06-18 14:08:35 (8 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 ELYAZ	2026-06-18 10:02:42 (12 hours ago)	(y4) Failed scan -byebye- from 209.50.161.208 (US/United States/-): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-06-18 03:51:26 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 23:51:19.019991 2026] [security2:error] [pid 19532:tid 19532] [client 209.50.161.208:43747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelprussin.com"] [uri "/.git/config"] [unique_id "ajNrN9uaCz2tSb-Sp8F5iwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-18 02:05:14 (20 hours ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇮🇹 Inartis	2026-06-18 01:27:32 (21 hours ago)	209.50.161.208 - - [18/Jun/2026:03:27:31 +0200] "GET /.git/config HTTP/1.1" 403 5001 "-" "Mozilla/4. ... show more 209.50.161.208 - - [18/Jun/2026:03:27:31 +0200] "GET /.git/config HTTP/1.1" 403 5001 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0)" ... show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-06-18 01:09:34 (21 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 01:01:59 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 21:01:55.259383 2026] [security2:error] [pid 16155:tid 16155] [client 209.50.161.208:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earscript.net"] [uri "/.git/config"] [unique_id "ajNDg0VuXjgkpZYBcVgBPAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-16 04:59:43 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇩🇪 georgengelmann	2026-06-15 18:22:15 (3 days ago)	Failed login attempt for dev_profile	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-05-04 15:08:44 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-08.209.50.161.208.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-08.209.50.161.208.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-04 02:24:49 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-24.209.50.161.208.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-24.209.50.161.208.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-18 01:40:18 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-40.209.50.161.208.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-40.209.50.161.208.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 inspectorgdgt	2025-12-24 22:00:00 (5 months ago)	VPN brute-force login attempts observed (bulk report).	Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 07:20:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:20:11.198010 2025] [security2:error] [pid 3862:tid 3862] [client 209.50.161.208:45535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tupansetc.com"] [uri "/.git/HEAD"] [unique_id "aSQHK_Naifnylcp3KCqKqgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-11 12:05:52 (7 months ago)	(From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models with ... show more (From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models with All Versions + All Upcoming Future Versions… Without Spending A Penny … https://bravo-333.site/MultiverseAI to UNSUBSCRIBE: https://bravo-333.site/unsubscribe?domain=feldhunchiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 34.88.219.138

🇹🇼 211.75.210.109

🇧🇷 189.50.142.82

🇺🇸 172.217.107.144

🇨🇳 171.217.92.33

🇩🇪 164.92.140.160

🇺🇸 162.216.149.166

🇨🇳 120.77.177.223

🇮🇳 103.130.91.125

🇹🇼 198.235.24.107

🇹🇼 198.235.24.76

🇫🇮 178.20.210.152

🇮🇳 122.170.201.139

🇨🇳 120.48.150.20

🇨🇳 106.63.26.27

🇺🇸 52.168.141.47

🇳🇱 45.148.10.151

🇮🇶 185.166.25.150

🇻🇳 171.233.234.84

🇩🇪 159.89.20.134