JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.164.198

209.50.164.198 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.164.198

Whois 209.50.164.198

IP Abuse Reports for 209.50.164.198:

This IP address has been reported a total of 16 times from 10 distinct sources. 209.50.164.198 was first reported on September 29th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-08 12:10:22 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-06 19:12:10 (1 month ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-04-21 01:19:57 (2 months ago)	Malicious activity detected	Hacking Web App Attack
🇨🇭 backslash	2026-01-04 23:00:19 (5 months ago)	block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1	Bad Web Bot
Anonymous	2025-12-27 13:10:34 (6 months ago)	2025-12-27T15:10:34.043629+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt ... show more 2025-12-27T15:10:34.043629+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt for [email protected] from 209.50.164.198 ... show less	Web App Attack
Anonymous	2025-12-08 15:24:31 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 06:16:02 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.164.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.164.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:15:55.343401 2025] [security2:error] [pid 17284:tid 17284] [client 209.50.164.198:25523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lockyers.com"] [uri "/.svn/wc.db"] [unique_id "aSVJm-feofZcCVAbgqb6GAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:30:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.164.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.164.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:30:14.319934 2025] [security2:error] [pid 26371:tid 26371] [client 209.50.164.198:53121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eeeckythump.net"] [uri "/.git/HEAD"] [unique_id "aSU-5k8BYOtZG0WgScBx8gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:21:26 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.164.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.164.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:21:18.647642 2025] [security2:error] [pid 6362:tid 6362] [client 209.50.164.198:23077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cuetzpalin.org"] [uri "/.svn/wc.db"] [unique_id "aSUSnrE2gind3SJWZdKemgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 11:19:25 (7 months ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Hacking SQL Injection Web App Attack
Anonymous	2025-11-14 05:42:58 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-16 05:35:44 (8 months ago)	GlobalProtect login attempts with user jvharper.	VPN IP Brute-Force
Anonymous	2025-10-04 00:42:55 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.04 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 23:08:13 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-09-30 08:57:32 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.35

🇺🇸 162.216.150.247

🇸🇬 129.212.228.190

🇭🇰 118.26.153.102

🇮🇳 103.68.43.200

🇳🇱 45.148.10.240

🇬🇧 213.166.84.45

🇺🇸 162.216.150.24

🇻🇳 157.66.26.183

🇺🇸 147.185.132.32

🇮🇩 103.67.80.61

🇺🇸 71.6.199.23

🇮🇪 51.171.204.188

🇺🇸 47.251.90.59

🇳🇱 45.148.10.157

🇧🇪 34.156.147.99

🇰🇷 20.214.157.235

🇺🇸 20.169.106.93

🇨🇳 8.148.176.251

🇮🇱 2a02:26f7:df80:5216:0:1000::