JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.161.70

209.50.161.70 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.161.70

Whois 209.50.161.70

IP Abuse Reports for 209.50.161.70:

This IP address has been reported a total of 36 times from 20 distinct sources. 209.50.161.70 was first reported on September 27th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-07 17:35:20 (2 days ago)	Web App Attack	Web App Attack
🇩🇪 Holger	2026-06-06 00:47:25 (1 month ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇩🇪 Holger	2026-06-04 11:13:52 (1 month ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇩🇪 Holger	2026-05-30 14:57:31 (1 month ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇩🇪 4server	2026-04-21 13:19:46 (2 months ago)	[TueApr2115:19:40.0720052026][security2:error][pid3025358:tid3025368][client209.50.161.70:0]ModSecur ... show more [TueApr2115:19:40.0720052026][security2:error][pid3025358:tid3025368][client209.50.161.70:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"casacarmen.ch\"][uri\"/database.sql\"][unique_id\"aed5bBhJ3UcICK2T19yVNgAAAQc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 HERA - Operations	2026-04-20 07:53:04 (2 months ago)	bau-arge - searching for vulnerable scripts: dump.sql 2026/04/20 09:53:04	Web App Attack
🇩🇪 Lino Project	2026-04-06 08:41:39 (3 months ago)	209.50.161.70 - - [06/Apr/2026:10:41:38 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.prim ... show more 209.50.161.70 - - [06/Apr/2026:10:41:38 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 cyfordtechnologies.com	2026-03-23 20:14:36 (3 months ago)	High-abuse ASN prefix: 209.50. : Reported by Cyford API	Web App Attack
🇫🇮 as211431.net	2026-03-19 13:59:12 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /user/register/ UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 LRob	2026-02-18 22:51:14 (4 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:27:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:27:12.686558 2025] [security2:error] [pid 32687:tid 32687] [client 209.50.161.70:26279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertbanis.com"] [uri "/.svn/wc.db"] [unique_id "aVIfQPSMIDQSQpnzsMlVQgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 20:45:26 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-28 20:14:47 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 07:44:24 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.161.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.161.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:44:18.571606 2025] [security2:error] [pid 31648:tid 31648] [client 209.50.161.70:17721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firstsuez.net"] [uri "/.env"] [unique_id "aSVeUle6hqyNcZzaz6j4zgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.139

🇺🇸 173.194.103.18

🇫🇮 147.185.133.58

🇷🇺 82.114.241.98

🇨🇳 14.103.115.208

🇳🇱 195.178.110.227

🇫🇷 173.212.194.70

🇩🇪 167.235.70.72

🇯🇵 139.162.120.104

🇺🇸 71.6.135.131

🇺🇸 71.6.134.232

🇺🇸 50.188.204.213

🇬🇧 35.203.211.223

🇨🇳 14.103.112.56

🇳🇱 2.58.56.112

🇧🇴 181.188.176.242

🇫🇮 147.185.133.155

🇮🇶 138.124.158.150

🇩🇪 130.12.182.25

🇨🇳 123.160.221.156