JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.165.19

209.50.165.19 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.165.19

Whois 209.50.165.19

IP Abuse Reports for 209.50.165.19:

This IP address has been reported a total of 22 times from 10 distinct sources. 209.50.165.19 was first reported on September 26th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 00:53:31 (16 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 04:33:02 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-17 05:45:22 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-16 02:46:47 (3 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-04-12 05:43:25 (2 months ago)	Attempt to scan vulnerabilities	Hacking
🇺🇸 TPI-Abuse	2026-02-19 03:10:15 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:10:08.394464 2026] [security2:error] [pid 13220:tid 13220] [client 209.50.165.19:9531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrywood.com"] [uri "/api/.env"] [unique_id "aZZ_EAlB1AarFONBIHwTzgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 01:42:27 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:42:24.488516 2026] [security2:error] [pid 28163:tid 28163] [client 209.50.165.19:34011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karakostasconstruction.com"] [uri "/app/.git/config"] [unique_id "aZZqgEkoctiVRQk7p7p_-AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-02-18 22:25:03 (4 months ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-02-18 18:48:39 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:48:33.712621 2026] [security2:error] [pid 18124:tid 18124] [client 209.50.165.19:46015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thoughtage.com"] [uri "/config/.env"] [unique_id "aZYJgeoe8DN2AZxNHjhOPQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:32:42 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:32:36.616049 2026] [security2:error] [pid 9761:tid 9761] [client 209.50.165.19:28311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewanderinghermit.com"] [uri "/api/.git/config"] [unique_id "aZYFxPYDk69euMYVIVhNrgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-18 14:05:46 (4 months ago)	Too many Status 40X (11) Scanning/Probing (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 12:36:29 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:36:25.310801 2026] [security2:error] [pid 17424:tid 17424] [client 209.50.165.19:15383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wedeliverstrippers.com"] [uri "/dev/.git/config"] [unique_id "aZWySdFH55jhBWBEV4U43gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 11:57:08 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:57:02.428542 2026] [security2:error] [pid 19486:tid 19486] [client 209.50.165.19:62013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "warshaw1.com"] [uri "/admin/.git/config"] [unique_id "aZWpDrTK8i-_z96iOTW2TAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 05:05:03 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 15:50:47 (8 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:48:10	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 198.52.179.196

🇭🇰 150.5.169.176

🇹🇭 122.154.74.205

🇺🇸 147.185.132.8

🇺🇸 47.251.91.214

🇳🇱 45.148.10.147

🇧🇷 177.44.71.121

🇫🇮 147.185.133.209

🇨🇳 123.160.223.73

🇧🇩 103.131.144.53

🇨🇦 20.48.255.163

🇺🇸 2607:f8b0:4023:1006::125

🇺🇸 192.204.137.219

🇩🇴 190.167.99.210

🇩🇪 167.94.146.75

🇳🇱 104.28.217.137

🇹🇼 198.235.24.12

🇧🇷 191.237.255.150

🇵🇭 161.49.89.39

🇨🇳 118.196.38.83