JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.162.206

209.50.162.206 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.162.206

Whois 209.50.162.206

IP Abuse Reports for 209.50.162.206:

This IP address has been reported a total of 14 times from 7 distinct sources. 209.50.162.206 was first reported on September 27th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-07 02:13:53 (1 month ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2026-05-06 01:35:32 /jeecg-boot/actuator/ 2026-05-06 01:35:31 /actuator show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-22 01:44:47 (1 month ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2026-04-21 16:23:17 /mysql/main.php show less	Web App Attack
🇨🇳 ThreatBook.io	2026-02-01 01:54:22 (4 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2026-01-31 13:01:16 /?debug=command&expression=%23f=%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess%27%29,%23f.setAccessible%28true%29,%23f.set%28%23_memberAccess,true%29,%[email protected]@getRequest%28%29,%[email protected]@getResponse%28%29.getWriter%28%29,%23a=%28new%20java.lang.ProcessBuilder%28new%20java.lang.String[]{%27netstat%27}%29%29.start%28%29,%23b=%23a.getInputStream%28%29,%23c=new%20java.io.InputStreamReader%28%23b%29,%23d=new%20java.io.BufferedReader%28%23c%29,%23e=new%20char[4000],%23d.read%28%23e%29,%23resp.println%28%23e%29,%23resp.close%28%29 2026-01-31 13:01:14 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-27 02:28:16 (4 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2026-01-26 21:28:39 /nacos/v1/auth/users?search=accurate&pageNo=1&pageSize=99 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-18 00:59:42 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/209.50.162.206 2025-12-17 03:57:15 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2025-12-17 08:27:33 /docs/appdev/sample/web/WEB-INF/web.xml 2025-12-17 03:57:15 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:13:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:13:45.928342 2025] [security2:error] [pid 30992:tid 31086] [client 209.50.162.206:14685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.propertyinspectorsinc.com"] [uri "/.env"] [unique_id "aSVXKQiHdlTmqu0bsgswDgAAAJQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:15:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:15:18.043486 2025] [security2:error] [pid 4691:tid 4691] [client 209.50.162.206:10703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "equitymaxrealestate.com"] [uri "/.env"] [unique_id "aSVJdlDHUmvGwLf8oeEeAwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-07 17:25:01 (7 months ago)	suspicious request in access.log	Web App Attack
🇩🇪 ps-center	2025-10-25 23:10:05 (7 months ago)	C2-W: TCP-Scanner. Port: 22	Port Scan
Anonymous	2025-10-18 08:34:48 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-15 00:58:57 (7 months ago)	GlobalProtect login attempts with user rdurkin.	VPN IP Brute-Force
Anonymous	2025-10-01 10:55:02 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-30 12:35:37 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-27 03:46:13 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.215.245.175

🇳🇱 178.16.54.74

🇵🇱 87.251.64.147

🇩🇪 69.5.169.241

🇺🇸 64.62.156.169

🇳🇱 45.148.10.157

🇷🇴 2.57.122.177

🇺🇸 192.178.119.215

🇮🇳 175.100.177.195

🇺🇸 153.75.83.238

🇮🇳 117.200.88.105

🇨🇳 112.31.109.13

🇨🇳 101.249.62.176

🇷🇴 92.118.39.62

🇩🇪 64.89.163.91

🇺🇸 64.62.156.223

🇺🇸 64.62.156.80

🇳🇱 45.153.34.117

🇳🇱 45.140.222.139

🇸🇬 188.166.246.68