JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.165.250

209.50.165.250 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.165.250

Whois 209.50.165.250

IP Abuse Reports for 209.50.165.250:

This IP address has been reported a total of 45 times from 17 distinct sources. 209.50.165.250 was first reported on September 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-18 05:34:49 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-16 13:37:55 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 webgobe	2026-07-10 02:00:04 (1 week ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇷 Sklurk	2026-07-09 00:56:07 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 03:49:55 (3 weeks ago)	Web App Attack	Web App Attack
🇺🇸 fbarela	2026-06-17 22:00:02 (1 month ago)	FortiGate SSL VPN login failures.	Brute-Force Hacking
🇫🇷 Sklurk	2026-06-17 01:34:04 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-16 00:23:57 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-06-15 20:24:17 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇳🇱 ParaBug	2026-04-27 13:39:59 (2 months ago)	209.50.165.250 - - [27/Apr/2026:15:39:58 +0200] "GET http://51-15-23-24.rev.poneytelecom.eu/.aws/cre ... show more 209.50.165.250 - - [27/Apr/2026:15:39:58 +0200] "GET http://51-15-23-24.rev.poneytelecom.eu/.aws/credentials HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Phishing Brute-Force Web App Attack
Anonymous	2026-03-19 09:37:24 (4 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-19 03:02:58 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:02:52.299800 2026] [security2:error] [pid 26247:tid 26247] [client 209.50.165.250:41399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennythompson.com"] [uri "/admin/.git/config"] [unique_id "aZZ9XINbgUXkOPvP8jbW-QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 02:11:23 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:11:17.246165 2026] [security2:error] [pid 30276:tid 30276] [client 209.50.165.250:22997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathiehazlett.com"] [uri "/.git/config"] [unique_id "aZZxRVyDtoMAHDEZEhPHQQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:50:52 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:50:47.535720 2026] [security2:error] [pid 18765:tid 18765] [client 209.50.165.250:22673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wadenelson.com"] [uri "/.env"] [unique_id "aZZeZyEgHV15HqD04gA6LgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:52:56 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:52:50.278937 2026] [security2:error] [pid 25392:tid 25392] [client 209.50.165.250:51471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thugdoggsrecords.com"] [uri "/.env"] [unique_id "aZYKgj6uk1-BD6RiJed-4wAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.244.39.224

🇲🇽 187.187.202.192

🇧🇷 179.248.98.199

🇷🇺 178.67.197.48

🇿🇦 102.66.159.147

🇧🇬 91.92.47.123

🇬🇧 81.19.219.230

🇺🇸 52.168.141.47

🇨🇦 20.220.225.223

🇩🇪 2a00:19e0:3005:2ff:eb9d:488:9711:bb52

🇻🇳 222.254.181.7

🇨🇳 218.64.60.187

🇧🇷 205.210.31.210

🇩🇪 185.242.3.25

🇧🇷 177.129.25.224

🇺🇸 172.253.217.27

🇧🇷 170.0.66.217

🇸🇬 111.119.232.250

🇺🇸 96.230.94.226

🇧🇬 91.92.47.120