JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.165.5

209.50.165.5 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.165.5

Whois 209.50.165.5

IP Abuse Reports for 209.50.165.5:

This IP address has been reported a total of 26 times from 8 distinct sources. 209.50.165.5 was first reported on September 27th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-08 12:10:11 (2 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇬🇧 Axel	2026-02-10 06:08:30 (5 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /wp/.git/conf ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /wp/.git/config show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 01:35:45 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:35:35.764472 2026] [security2:error] [pid 11541:tid 11541] [client 209.50.165.5:52983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khtcpl.com"] [uri "/app/.env"] [unique_id "aYqLZ0YWY5Q0lOIsFG89fAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:25:03 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:24:52.971861 2026] [security2:error] [pid 11907:tid 11907] [client 209.50.165.5:45549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "huddleston.construction"] [uri "/frontend/.env"] [unique_id "aYp61JWqDc0TS3oEQA8QzQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:14:24 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:14:16.817498 2026] [security2:error] [pid 17706:tid 17706] [client 209.50.165.5:64249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotglassgallery.com"] [uri "/frontend/.env"] [unique_id "aYpcOIydaikI-UWOtTrWKAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:02:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:02:21.642341 2025] [security2:error] [pid 9830:tid 9830] [client 209.50.165.5:9717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oualierealty.com"] [uri "/.env"] [unique_id "aVILXeMnWFO1YAo-cg2LeAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:15:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:15:51.843216 2025] [security2:error] [pid 6642:tid 6642] [client 209.50.165.5:13711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "healingtrek.com"] [uri "/.env"] [unique_id "aVIAd0Y49KI086egGcxXKgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-22 18:08:28 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-15 04:19:25 (7 months ago)	botnet	DDoS Attack
Anonymous	2025-11-29 05:09:50 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.29 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 06:12:07 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:11:59.012858 2025] [security2:error] [pid 4133561:tid 4133573] [client 209.50.165.5:31159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rmoeis.com"] [uri "/.git/HEAD"] [unique_id "aSP3L86lE8qghk7QOEVelQAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:20:13 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:19:53.283203 2025] [security2:error] [pid 18194:tid 18291] [client 209.50.165.5:42501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.advantageplusnurses.richardleeweatherman.com"] [uri "/.svn/wc.db"] [unique_id "aSPq-e9urIyQu8V3f-3lggAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 10:42:57 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-13 23:43:09 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2001:41d0:701:1100::7975

🇿🇦 154.0.170.61

🇺🇸 66.132.195.122

🇺🇸 57.141.0.14

🇺🇸 34.127.90.7

🇰🇷 211.43.100.48

🇵🇰 210.56.27.220

🇮🇩 202.51.214.98

🇪🇬 193.227.16.232

🇩🇪 193.176.86.196

🇷🇴 193.32.162.34

🇰🇷 175.207.239.76

🇪🇨 162.158.255.140

🇵🇰 103.134.2.77

🇨🇳 101.34.204.168

🇳🇱 85.17.180.228

🇳🇱 45.148.10.151

🇯🇵 8.209.216.222

🇫🇮 2a01:4f9:6b:2588::2

🇹🇭 223.206.222.186