JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.167.252

209.50.167.252 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.167.252

Whois 209.50.167.252

IP Abuse Reports for 209.50.167.252:

This IP address has been reported a total of 24 times from 17 distinct sources. 209.50.167.252 was first reported on September 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LSPCCU	2026-06-03 16:21:45 (1 week ago)	TSEC Honeypot Network report. Threat score: 68/100. Categories: Hacking. Honeypot: ssh-telnet, cowri ... show more TSEC Honeypot Network report. Threat score: 68/100. Categories: Hacking. Honeypot: ssh-telnet, cowrie. Context: 209. show less	Hacking
🇦🇺 MAGIC	2026-05-20 02:06:54 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-10 22:53:38 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.167.252 2026-05 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.167.252 2026-05-10 02:42:48 / 2026-05-10 02:59:32 / 2026-05-10 02:42:29 / 2026-05-10 02:59:23 / 2026-05-10 02:41:53 / show less	Web App Attack
🇬🇧 PeravixGroup	2026-05-03 11:42:13 (1 month ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 2375. Severity: HI ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 2375. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇪🇸 10dencehispahard SL	2026-01-09 07:08:57 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:13 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 inspectorgdgt	2025-12-24 22:00:00 (5 months ago)	VPN brute-force login attempts observed (bulk report).	Brute-Force
🇺🇸 TPI-Abuse	2025-12-04 00:32:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.167.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.167.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 19:32:22.773275 2025] [security2:error] [pid 30883:tid 30883] [client 209.50.167.252:40185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "now-app.space"] [uri "/.svn/wc.db"] [unique_id "aTDWlg1yy3HfvSrfGanhugAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 08:09:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.167.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.167.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:09:23.048410 2025] [security2:error] [pid 19415:tid 19415] [client 209.50.167.252:46603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bairentang.org"] [uri "/.git/HEAD"] [unique_id "aS_wM7YitmfiY4LQ7FoIPAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-01 07:35:50 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-25 21:19:51 (6 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2025-11-14 09:17:21 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-11-14 08:50:21 (6 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=georgiachiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-13 10:46:40 (7 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=arizonachiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇦🇺 oncord	2025-11-12 04:09:35 (7 months ago)	Form spam	Web Spam

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.77.198.7

🇰🇿 193.31.200.85

🇵🇪 161.132.50.236

🇮🇩 103.154.231.122

🇲🇾 47.250.164.10

🇬🇧 35.203.210.203

🇬🇧 31.14.254.98

🇨🇳 14.116.172.24

🇷🇼 197.243.14.52

🇺🇸 195.184.76.224

🇧🇷 189.114.136.231

🇺🇸 162.216.150.195

🇸🇬 159.223.56.199

🇨🇳 123.163.51.3

🇫🇷 85.217.140.34

🇩🇪 69.5.169.234

🇺🇸 64.207.225.55

🇺🇸 64.49.36.247

🇳🇱 45.148.10.183

🇹🇷 24.133.79.172