JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.168.107

209.50.168.107 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.168.107

Whois 209.50.168.107

IP Abuse Reports for 209.50.168.107:

This IP address has been reported a total of 48 times from 18 distinct sources. 209.50.168.107 was first reported on September 26th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇴 adalbertoreyes.org	2026-07-10 21:19:14 (1 week ago)	CategoryPortScan	Port Scan
🇩🇪 iNetWorker	2026-07-05 17:40:43 (2 weeks ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 4server	2026-07-05 15:24:30 (2 weeks ago)	[SunJul0517:24:23.8148082026][security2:error][pid3008663:tid3008780][client209.50.168.107:0]ModSecu ... show more [SunJul0517:24:23.8148082026][security2:error][pid3008663:tid3008780][client209.50.168.107:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"essesolution.ch.136-243-54-122.cpanel.site\"][uri\"/.hg/\"][unique_id\"akp3Jw6Z_tUuL6CkZvfjLgAAAQE\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 Axel	2026-06-14 09:35:19 (1 month ago)	Blocked by UFW on MVI [443/tcp] \| SPT: 48127 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on MVI [443/tcp] \| SPT: 48127 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-11 13:28:27 (2 months ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
🇱🇻 garmtech.com	2026-03-20 07:23:44 (3 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
Anonymous	2025-12-15 12:07:55 (7 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 12:38:17 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:38:10.814011 2025] [security2:error] [pid 3747:tid 3747] [client 209.50.168.107:31119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bernsteinip.com"] [uri "/.env"] [unique_id "aSb0svEymIVYCFJ41JrVkAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:42:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:42:35.495591 2025] [security2:error] [pid 2650:tid 2654] [client 209.50.168.107:60165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ptinct.com"] [uri "/.env"] [unique_id "aSaTS6cpXMNW-93ob63LjQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:49:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:49:01.194494 2025] [security2:error] [pid 22592:tid 22592] [client 209.50.168.107:15801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fatcavemedia.com"] [uri "/.env"] [unique_id "aSU1PY9Hvpe8UkmAgZp0fAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:19:02 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:18:52.950452 2025] [security2:error] [pid 26533:tid 26533] [client 209.50.168.107:22401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mainescentsecrets.com"] [uri "/.git/HEAD"] [unique_id "aSUuLB9I_OtCIDNVSVUsHAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:03:21 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:03:14.415800 2025] [security2:error] [pid 22464:tid 22464] [client 209.50.168.107:60465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.vividlee.com"] [uri "/.git/HEAD"] [unique_id "aSUqgiXjZXCE3TDSQRcD8wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:04:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:41.339538 2025] [security2:error] [pid 15589:tid 15613] [client 209.50.168.107:52657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.julianositalianrestaurant.com"] [uri "/.git/HEAD"] [unique_id "aSUcjSIjVFKa_KFJ49hyjwAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:00:35 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:00:24.534590 2025] [security2:error] [pid 14735:tid 14735] [client 209.50.168.107:15211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.crowleywoodworking.com"] [uri "/.git/HEAD"] [unique_id "aSUNuFx6IteybBC22dp2MwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:43:23 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:43:17.128651 2025] [security2:error] [pid 25778:tid 25778] [client 209.50.168.107:22861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepopularloser.bahamascruisersguide.com"] [uri "/.git/HEAD"] [unique_id "aSUJtd3k7JkQVjrslX_GtAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 213.153.174.25

🇺🇸 173.255.247.156

🇨🇳 116.179.32.69

🇹🇭 202.29.232.118

🇳🇱 193.23.118.33

🇺🇸 107.155.48.46

🇮🇳 104.211.93.193

🇧🇩 103.146.84.134

🇲🇦 102.54.246.130

🇳🇱 91.92.40.151

🇺🇸 74.7.227.179

🇳🇱 45.14.134.197

🇺🇸 23.164.57.10

🇨🇳 222.75.225.206

🇨🇳 116.172.251.81

🇺🇸 66.132.224.80

🇬🇧 52.101.101.129

🇨🇳 14.103.117.75

🇨🇳 14.103.115.124

🇰🇷 222.122.179.118