JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.168.0

209.50.168.0 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.168.0

Whois 209.50.168.0

IP Abuse Reports for 209.50.168.0:

This IP address has been reported a total of 32 times from 14 distinct sources. 209.50.168.0 was first reported on September 27th 2025, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-29 02:12:50 (52 minutes ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-27 06:14:48 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-17 03:40:55 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:56 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 04:27:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:27:51.648492 2025] [security2:error] [pid 2464632:tid 2464655] [client 209.50.168.0:11529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "annacaird.com"] [uri "/.svn/wc.db"] [unique_id "aVIDR34EH3PHvGUNxw-J3QAAAFI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:03:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:03:09.599554 2025] [security2:error] [pid 21086:tid 21086] [client 209.50.168.0:18329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ratalads.com"] [uri "/.svn/wc.db"] [unique_id "aVH9fTqRQ6D9r1N50W2aawAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-15 03:43:08 (7 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 19:23:59 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:23:53.594846 2025] [security2:error] [pid 27517:tid 27517] [client 209.50.168.0:23473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oxfordgrpco.com"] [uri "/.env"] [unique_id "aSdTyWp8092cohgKDzxuOQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-26 19:05:02 (8 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:58:10 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:58:05.350092 2025] [security2:error] [pid 1023:tid 1023] [client 209.50.168.0:40715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gbaker.us"] [uri "/.git/HEAD"] [unique_id "aSQsLeRRjNzqjAJsWEzstQAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:03:53 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:03:46.412518 2025] [security2:error] [pid 28732:tid 28732] [client 209.50.168.0:44113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mixmediallc.com"] [uri "/.svn/wc.db"] [unique_id "aSP1QvpNT4KjvUSKRPWEzgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:56:12 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:56:07.503123 2025] [security2:error] [pid 30406:tid 30406] [client 209.50.168.0:40685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thn.bz"] [uri "/.svn/wc.db"] [unique_id "aSPlZ0iYajE7r8wTHgpJ9QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:32:02 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:31:54.696885 2025] [security2:error] [pid 4593:tid 4593] [client 209.50.168.0:24691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.artocratic.com"] [uri "/.git/HEAD"] [unique_id "aSPfug6t_qG5WsMqTauQqQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 02:03:10 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇵🇱 sefinek.net	2025-11-03 06:23:54 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.162.173

🇧🇷 187.72.45.31

🇧🇴 166.114.136.137

🇩🇪 81.19.141.13

🇧🇬 79.124.58.142

🇺🇸 34.23.225.204

🇺🇸 13.89.125.18

🇺🇸 2604:a880:400:d1:0:4:c23c:d001

🇧🇪 198.235.24.174

🇳🇱 195.178.110.137

🇧🇷 187.12.110.6

🇮🇩 182.253.182.121

🇵🇱 176.53.159.198

🇯🇵 152.32.201.247

🇬🇹 148.230.21.242

🇧🇷 131.100.212.177

🇻🇳 123.20.24.23

🇺🇸 108.147.190.97

🇩🇪 85.90.246.159

🇯🇵 43.165.190.208