JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.163.61

209.50.163.61 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.163.61

Whois 209.50.163.61

IP Abuse Reports for 209.50.163.61:

This IP address has been reported a total of 30 times from 15 distinct sources. 209.50.163.61 was first reported on September 27th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-09-02 02:59:47 (2 hours ago)	[02:59] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [02:59] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 drewf.ink	2026-09-02 01:09:29 (4 hours ago)	[01:09] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [01:09] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 drewf.ink	2026-08-29 11:10:19 (3 days ago)	[11:10] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [11:10] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇫🇷 Sklurk	2026-08-10 07:02:37 (3 weeks ago)	Web App Attack	Web App Attack
🇸🇬 securejdprop	2026-05-23 12:26:27 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 62). Ip 209.50.163.61 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-23 12:26:25.683315637 +0000 UTC show less	Hacking Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (5 months ago)	"DDoS against public endpoint"	DDoS Attack
🇱🇻 garmtech.com	2026-03-23 10:53:10 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2026-03-23 10:53:03 (5 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:12:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:12:45.681304 2026] [security2:error] [pid 25496:tid 25496] [client 209.50.163.61:55761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnairdenterprisesllc.com"] [uri "/new/.git/config"] [unique_id "aYqiLSDKd_xwNdbJ1JQClwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:05:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:05:24.902676 2026] [security2:error] [pid 18178:tid 18178] [client 209.50.163.61:17619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentuckianacordcutters.com"] [uri "/admin/.git/config"] [unique_id "aYp2RLFesTyNpi85hYmIRgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:44:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:44:31.473685 2026] [security2:error] [pid 2428:tid 2428] [client 209.50.163.61:29025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houston-church-of-god.org"] [uri "/wp/.git/config"] [unique_id "aYpjT8jacDm5mv1ZUWWN9gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:03:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.163.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:03:21.339567 2026] [security2:error] [pid 23542:tid 23542] [client 209.50.163.61:19805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathiehazlett.com"] [uri "/api/.git/config"] [unique_id "aYpZqbMnosa8siHBr6Qu8QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-09 20:06:29 (6 months ago)	Blocking for trying to access an exploit file: /.env.production	Hacking
🇱🇻 garmtech.com	2026-01-11 00:19:00 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-18.209.50.163.61.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-18.209.50.163.61.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:18 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.98.30.206

🇮🇳 168.220.253.106

🇫🇷 147.79.21.59

🇰🇷 112.121.24.155

🇺🇸 107.174.159.19

🇩🇪 91.92.240.229

🇩🇪 64.89.163.90

🇸🇬 8.219.248.226

🇬🇧 2.57.17.195

🇧🇷 206.62.122.199

🇧🇾 178.121.66.198

🇩🇪 157.90.238.67

🇺🇸 147.185.132.86

🇺🇸 147.185.132.69

🇺🇸 147.185.132.36

🇺🇸 136.111.86.115

🇮🇳 124.123.125.62

🇨🇳 121.40.161.223

🇰🇷 119.207.31.101

🇷🇺 91.244.113.178