JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.164.57

209.50.164.57 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.164.57

Whois 209.50.164.57

IP Abuse Reports for 209.50.164.57:

This IP address has been reported a total of 34 times from 17 distinct sources. 209.50.164.57 was first reported on September 26th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-20 05:18:23 (5 days ago)	Web App Attack	Web App Attack
🇸🇮 administrator	2026-06-02 22:14:36 (3 weeks ago)	2026-06-02 00:06:22,167 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 209.50.164.57 20 ... show more 2026-06-02 00:06:22,167 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 209.50.164.57 2026-06-02 00:06:22,167 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 209.50.164.57 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
Anonymous	2026-05-30 19:21:50 (3 weeks ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anasta ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anastasiadis.gr.log; samples=site_wide=true \| distinct_ips=64 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 oncord	2026-05-29 02:07:55 (4 weeks ago)	Form spam	Web Spam
🇺🇸 lostswordfish.com	2026-05-23 10:42:04 (1 month ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇦🇺 oncord	2026-05-14 06:16:19 (1 month ago)	Form spam	Web Spam
🇸🇮 administrator	2026-05-04 16:33:43 (1 month ago)	2026-04-09 22:48:06,293 fail2ban.actions [1026]: NOTICE [ninjafirewall] Ban 209.50.164.57 20 ... show more 2026-04-09 22:48:06,293 fail2ban.actions [1026]: NOTICE [ninjafirewall] Ban 209.50.164.57 2026-04-10 19:25:02,525 fail2ban.actions [530353]: NOTICE [ninjafirewall] Ban 209.50.164.57 2026-05-04 18:22:01,660 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 209.50.164.57 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-04-01 22:28:58 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-28.209.50.164.57.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-28.209.50.164.57.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇱🇻 garmtech.com	2026-03-06 05:11:16 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-11.209.50.164.57.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-11.209.50.164.57.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇭 filou812	2026-02-10 07:07:52 (4 months ago)	url tried is "/.env.local"	Web App Attack
Anonymous	2026-02-09 21:56:08 (4 months ago)	209.50.164.57 - - [09/Feb/2026:21:55:57 +0000] "GET /backend/.env HTTP/1.1" 302 3409 "-" "Mozilla/5. ... show more 209.50.164.57 - - [09/Feb/2026:21:55:57 +0000] "GET /backend/.env HTTP/1.1" 302 3409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 21:20:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.164.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.164.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:20:23.071413 2026] [security2:error] [pid 16199:tid 16199] [client 209.50.164.57:56899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garantaconsulting.com"] [uri "/.env.local"] [unique_id "aYpPl2JsOvXAr91JrT-_JwAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 18:43:14 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.164.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.164.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:43:01.936076 2026] [security2:error] [pid 32298:tid 32298] [client 209.50.164.57:36681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fwa51.com"] [uri "/site/.git/config"] [unique_id "aYoqtcfLDGT6jMcjai66HQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 06:14:16 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.164.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.164.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:14:08.484420 2026] [security2:error] [pid 9391:tid 9417] [client 209.50.164.57:11885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.co.uk"] [uri "/.env.production"] [unique_id "aYl7MPs_3pHPOpv8vXVzVwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.98.33.216

🇺🇸 172.98.33.215

🇺🇸 162.216.149.153

🇺🇸 147.185.132.156

🇰🇷 119.203.231.121

🇸🇬 103.189.234.96

🇫🇮 77.105.161.120

🇺🇸 45.33.94.76

🇺🇸 34.193.119.44

🇺🇸 18.119.209.50

🇨🇳 220.197.85.145

🇺🇸 172.98.33.214

🇺🇸 172.98.33.213

🇺🇸 158.94.187.136

🇺🇸 151.244.95.49

🇫🇮 147.185.133.163

🇨🇳 120.233.151.169

🇫🇷 91.231.89.115

🇫🇷 91.231.89.13

🇺🇸 64.62.197.154