JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.165.82

209.50.165.82 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 26%: ?

26%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.165.82

Whois 209.50.165.82

IP Abuse Reports for 209.50.165.82:

This IP address has been reported a total of 36 times from 22 distinct sources. 209.50.165.82 was first reported on September 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-05-31 06:15:32 (1 week ago)	209.50.165.82 - - [31/May/2026:08:15:32 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ... show more 209.50.165.82 - - [31/May/2026:08:15:32 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
Anonymous	2026-05-30 14:09:05 (1 week ago)	wordpress authentication brute force	Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-05-26 04:18:20 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 lostswordfish.com	2026-05-23 13:46:03 (2 weeks ago)	Wordfence waf block on parsol	Web App Attack
Anonymous	2026-05-10 00:56:35 (1 month ago)	Banned by SPAMHAUS DROP list	DDoS Attack Hacking Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-04-02 01:11:55 (2 months ago)	209.50.165.82 \| Port: 9693 \| DNS: 65.111.24.54 2026-04-02T09:11:53+08:00 America/New_York \| Apple Id ... show more 209.50.165.82 \| Port: 9693 \| DNS: 65.111.24.54 2026-04-02T09:11:53+08:00 America/New_York \| Apple Identity Spoofing \| UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0 HTTP/1.1 443 GET \| URL: /information/contact/ \| Ref: - \| Country: US/United States/-08:00 IP City: Ashburn 9e5bf64e3f2baca2-YYZ/Toronto, ON, Canada 2 hits/1 secs Robots 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 nowyouknow	2025-12-18 08:03:50 (5 months ago)	(From [email protected]) Increase chiropracticgreece.com SEO performance, increase your search ... show more (From [email protected]) Increase chiropracticgreece.com SEO performance, increase your search appearance and gain powerful backlinks! BonusBacklinks.com - we provide daily backlinks and bring website clicks to your site EVERY DAY: + Get 85% SALE + Strong daily seo backlinks + Organic website visits + Price start from $1 + Bonus coupon codes: https://BonusBacklinks.com/85sale BonusBacklinks.com - daily backlinks and organic visits to boost your webpage every day show less	Phishing Web Spam
Anonymous	2025-11-28 06:47:13 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 11:32:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:32:53.757296 2025] [security2:error] [pid 19667:tid 19667] [client 209.50.165.82:59283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.possmartterminal.com"] [uri "/.git/HEAD"] [unique_id "aSblZSdER4EQBNn2e-G1YQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:44:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:43:55.091262 2025] [security2:error] [pid 32397:tid 32397] [client 209.50.165.82:44725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.markthwaite.com"] [uri "/.svn/wc.db"] [unique_id "aSU0C-kzpskH0X_CRpKDpQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:54:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:54:50.156837 2025] [security2:error] [pid 2470:tid 2470] [client 209.50.165.82:30201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kmnr.net"] [uri "/.git/HEAD"] [unique_id "aSUoivJReKqNK4oxkYGt7AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:32:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:32:03.484306 2025] [security2:error] [pid 16276:tid 16276] [client 209.50.165.82:26987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.evelia.com"] [uri "/.env"] [unique_id "aST5A3ncuszeNOQ6d3qRXAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:59:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:59:26.255933 2025] [security2:error] [pid 6192:tid 6192] [client 209.50.165.82:49161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.geckoturner.com"] [uri "/.env"] [unique_id "aSQsfuFs1Db347xBcQsBNAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 02:35:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.165.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:35:26.358390 2025] [security2:error] [pid 29299:tid 29299] [client 209.50.165.82:57669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.10bestrealtors.com"] [uri "/.git/HEAD"] [unique_id "aSPEbmVbIThSfp8KU2XtEgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.50.184.13

🇸🇮 195.80.150.212

🇨🇳 106.13.181.87

🇩🇪 213.209.159.235

🇻🇳 171.243.150.89

🇨🇿 138.199.56.244

🇺🇸 192.227.210.218

🇫🇷 173.212.213.201

🇫🇷 161.97.154.151

🇫🇮 147.185.133.189

🇹🇿 102.211.68.50

🇵🇱 87.251.64.157

🇧🇬 79.124.59.78

🇺🇸 64.62.156.56

🇰🇷 61.72.55.130

🇺🇸 52.20.198.190

🇮🇳 45.120.59.121

🇺🇸 130.51.22.28

🇮🇳 122.183.33.202

🇨🇳 111.34.138.99