JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.166.122

209.50.166.122 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.166.122

Whois 209.50.166.122

IP Abuse Reports for 209.50.166.122:

This IP address has been reported a total of 24 times from 14 distinct sources. 209.50.166.122 was first reported on September 30th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-20 00:06:10 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:38:50 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:38:42.997881 2026] [security2:error] [pid 18402:tid 18402] [client 209.50.166.122:52259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibcnu.com"] [uri "/api/.git/config"] [unique_id "aYqoQsain9pz_8TsyIe2QQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 01:20:29 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:20:23.934636 2026] [security2:error] [pid 19116:tid 19116] [client 209.50.166.122:45203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kh6jim.com"] [uri "/backend/.env"] [unique_id "aYqH1xJKiq7GTtYYPm1ALgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:50:16 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:50:09.839112 2026] [security2:error] [pid 11625:tid 11625] [client 209.50.166.122:13745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humaclub.com"] [uri "/app/.env"] [unique_id "aYqAwSPlHulOou4PWsKBSgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:33:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.166.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:33:22.913878 2026] [security2:error] [pid 22129:tid 22129] [client 209.50.166.122:34563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaylamaclaincounseling.com"] [uri "/app/.env"] [unique_id "aYpgsmxRQcUQTMzn2O8PigAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-09 21:08:02 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇪🇸 10dencehispahard SL	2026-01-26 09:30:18 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-11-27 14:18:17 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-17 03:40:04 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 11:38:34 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.14 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-09 23:48:42 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.09 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-29 06:06:17 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇳🇱 EGP Abuse Dept	2025-10-27 00:10:55 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇳🇱 GabrielJST	2025-10-25 07:18:35 (7 months ago)	(sshd) Failed SSH login from 209.50.166.122 (US/United States/-)	Brute-Force SSH
🇫🇮 bittiguru.fi	2025-10-22 16:07:29 (8 months ago)	Oct 22 19:07:27 tuotantolaitos sshd[45944]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Oct 22 19:07:27 tuotantolaitos sshd[45944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.50.166.122 Oct 22 19:07:29 tuotantolaitos sshd[45944]: Failed password for invalid user [email protected] from 209.50.166.122 port 20801 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 203.55.131.3

🇬🇧 78.153.140.39

🇬🇧 2a06:4880:c000::df

🇬🇧 2a06:4880:6000::89

🇩🇪 212.132.105.176

🇨🇳 123.160.172.123

🇬🇧 35.203.210.237

🇺🇸 162.216.149.23

🇨🇳 120.193.9.169

🇨🇳 111.26.6.111

🇺🇸 104.165.198.25

🇩🇪 91.92.240.64

🇺🇸 86.107.55.234

🇳🇱 45.148.10.151

🇺🇸 13.219.1.233

🇬🇧 195.96.139.146

🇲🇽 187.191.48.23

🇨🇳 111.4.78.74

🇨🇳 106.75.154.218

🇺🇸 104.22.22.39