JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.165.52

209.50.165.52 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.165.52

Whois 209.50.165.52

IP Abuse Reports for 209.50.165.52:

This IP address has been reported a total of 16 times from 8 distinct sources. 209.50.165.52 was first reported on September 27th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-04 04:21:49 (5 months ago)	Infected user bad webscan	Exploited Host
🇺🇸 TPI-Abuse	2025-11-24 06:44:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:44:07.649302 2025] [security2:error] [pid 10165:tid 10165] [client 209.50.165.52:17257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wgalleria.vittariadesign.com"] [uri "/.git/HEAD"] [unique_id "aSP-t2bRmeHD4CPHqsNiwwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:27:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:26:58.920078 2025] [security2:error] [pid 3965136:tid 3965146] [client 209.50.165.52:35881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeaus.com"] [uri "/.svn/wc.db"] [unique_id "aSPsojGAQlEvBxWyTv_J9gAAAYg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:40:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:40:34.745079 2025] [security2:error] [pid 2799:tid 2799] [client 209.50.165.52:28753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.eatthewrench.com"] [uri "/.env"] [unique_id "aSPhwj7bZRIR0DNHxKyX0QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:15:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:15:08.091179 2025] [security2:error] [pid 11279:tid 11279] [client 209.50.165.52:38227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.airintakesonline.com"] [uri "/.env"] [unique_id "aSPbzFjb3SZXkCgEiBBKTAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-23 19:18:08 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-18.209.50.165.52.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-18.209.50.165.52.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-11-13 21:04:45 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇳🇱 EGP Abuse Dept	2025-10-26 06:32:55 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇩🇪 ps-center	2025-10-23 08:20:21 (7 months ago)	C1-W: TCP-Scanner. Port: 22	Port Scan
Anonymous	2025-10-07 04:02:49 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-05 06:16:37 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 16:14:34 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇮🇹 Rosh	2025-10-01 07:21:53 (8 months ago)	[10/01/25 09:21:53] SSH: illegal login attempts	Brute-Force SSH
Anonymous	2025-09-30 08:50:33 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-29 02:47:23 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.29 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.29 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.116

🇺🇸 64.62.197.22

🇵🇭 158.62.56.198

🇻🇳 123.30.240.7

🇸🇬 103.253.27.62

🇳🇱 89.21.67.135

🇺🇸 65.49.20.104

🇺🇸 64.94.153.220

🇮🇳 182.95.185.14

🇳🇱 176.65.149.194

🇳🇱 172.94.9.29

🇺🇸 165.154.163.37

🇸🇦 151.255.39.144

🇺🇸 147.185.132.35

🇨🇱 136.248.242.166

🇺🇸 97.247.210.73

🇷🇴 92.118.39.236

🇳🇱 85.11.167.7

🇱🇹 81.30.98.158

🇸🇬 47.82.15.190