JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.162.224

209.50.162.224 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 8%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.162.224

Whois 209.50.162.224

IP Abuse Reports for 209.50.162.224:

This IP address has been reported a total of 31 times from 15 distinct sources. 209.50.162.224 was first reported on September 27th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 aglenday	2026-05-14 00:53:15 (1 month ago)	Honeypot hit: MSSQL traffic (on 1433) without login credentials	Port Scan
🇬🇧 PeravixGroup	2026-05-08 06:45:44 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-07 04:44:59 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇭 backslash	2026-01-24 21:00:11 (4 months ago)	block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1	Bad Web Bot
Anonymous	2025-11-29 04:36:15 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.29 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇸🇪 Johan Finn	2025-11-29 01:05:55 (6 months ago)	malicious activity	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:48:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:47:58.893370 2025] [security2:error] [pid 26898:tid 26898] [client 209.50.162.224:41679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dougrhodes.com"] [uri "/.svn/wc.db"] [unique_id "aSa-vpJPHYBTyxxvzhRVvwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRNP	2025-11-26 05:14:28 (6 months ago)	_:80 209.50.162.224 - - [26/Nov/2025:05:14:27 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 ( ... show more _:80 209.50.162.224 - - [26/Nov/2025:05:14:27 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:20:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:20:42.757870 2025] [security2:error] [pid 1321:tid 1321] [client 209.50.162.224:28479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.daterapebook.com"] [uri "/.git/HEAD"] [unique_id "aSZV6iWwAEtbG11XaqGmAwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:50:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:50:06.654750 2025] [security2:error] [pid 1582:tid 1582] [client 209.50.162.224:35293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.weedifyit.com"] [uri "/.git/HEAD"] [unique_id "aSZOvj5eNl4wRjOkBuAaZQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:51:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:51:55.154969 2025] [security2:error] [pid 13044:tid 13044] [client 209.50.162.224:27423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dimitri.daras.name"] [uri "/.env"] [unique_id "aSUn287ySgfCd2JWjQcOdgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:15:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:15:27.177725 2025] [security2:error] [pid 8208:tid 8208] [client 209.50.162.224:16815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delta-pizza.com"] [uri "/.git/HEAD"] [unique_id "aSUfT0ntNFSNSc_IDUyYfAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:32:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:32:05.292841 2025] [security2:error] [pid 28765:tid 28765] [client 209.50.162.224:18559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.abneyfoundation.org"] [uri "/.svn/wc.db"] [unique_id "aSQmFe5KBoOrFuE2imOFpwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:27:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.162.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:27:56.773517 2025] [security2:error] [pid 29529:tid 29529] [client 209.50.162.224:34511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.zoboz.com"] [uri "/.git/HEAD"] [unique_id "aSPs3CDmRqnATPHYGo9hegAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-16 14:08:00 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.235

🇹🇼 198.235.24.110

🇹🇼 198.235.24.19

🇺🇸 198.62.1.133

🇸🇬 129.226.213.238

🇨🇳 113.125.165.132

🇳🇱 85.11.167.11

🇧🇬 78.128.114.102

🇺🇸 66.132.195.123

🇰🇷 59.8.107.113

🇺🇸 50.6.228.32

🇺🇸 23.95.137.106

🇺🇸 18.218.108.253

🇺🇸 2602:80d:1007::54

🇨🇭 213.221.155.84

🇬🇷 194.63.239.143

🇰🇿 193.31.200.85

🇸🇬 172.188.89.41

🇧🇩 103.171.69.68

🇳🇱 91.92.40.13