JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.168.237

209.50.168.237 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.168.237

Whois 209.50.168.237

IP Abuse Reports for 209.50.168.237:

This IP address has been reported a total of 35 times from 14 distinct sources. 209.50.168.237 was first reported on September 27th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-04 00:21:11 (2 months ago)	Forum/form spam	Web Spam
🇬🇧 [email protected]	2026-03-04 00:26:03 (3 months ago)	209.50.168.237 - - [04/Mar/2026:00:24:18 +0000] "GET /.git/objects/9c/f301d3cb5af9deeef298dae6e0f46b ... show more 209.50.168.237 - - [04/Mar/2026:00:24:18 +0000] "GET /.git/objects/9c/f301d3cb5af9deeef298dae6e0f46b966eaaad HTTP/1.1" 404 332 "http://academy.scotland-excel.org.uk/.git/objects/9c/f301d3cb5af9deeef298dae6e0f46b966eaaad" "Go-http-client/1.1" 209.50.168.237 - - [04/Mar/2026:00:24:29 +0000] "GET /.git/objects/8b/ec3bac89620c17efea2a797228d5c4e03778cb HTTP/1.1" 404 332 "http://academy.scotland-excel.org.uk/.git/objects/8b/ec3bac89620c17efea2a797228d5c4e03778cb" "Go-http-client/1.1" 209.50.168.237 - - [04/Mar/2026:00:26:02 +0000] "GET /.git/objects/8d/5115507376fd7cff319e0f58efb37a49e58e5d HTTP/1.1" 404 332 "http://academy.scotland-excel.org.uk/.git/objects/8d/5115507376fd7cff319e0f58efb37a49e58e5d" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 windowsforum	2026-02-11 12:32:52 (3 months ago)	Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, url, password_confirm, ... show more Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, url, password_confirm, username=PauletteN7 show less	Web Spam Bad Web Bot
🇬🇧 relianoid.com	2026-01-10 00:52:26 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇫🇷 mrcrassi	2025-12-14 01:23:38 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2025-12-07 00:02:14 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 SilverZippo	2025-12-02 09:53:05 (6 months ago)	Web App Attack	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:52 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 05:04:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:03:51.876492 2025] [security2:error] [pid 661:tid 661] [client 209.50.168.237:52193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ruizpuche.com"] [uri "/.git/HEAD"] [unique_id "aSU4t7W-lGtmQhUW7QuwuAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:55:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:55:22.298919 2025] [security2:error] [pid 14154:tid 14154] [client 209.50.168.237:38187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.harmonyexpos.com"] [uri "/.svn/wc.db"] [unique_id "aSUoqndegxWjd-dq8ILpcAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:28:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:27:51.416544 2025] [security2:error] [pid 8563:tid 8563] [client 209.50.168.237:29267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.barkan.us"] [uri "/.env"] [unique_id "aSUUJ9VGSBLweRXYCujdswAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:41:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:41:07.268136 2025] [security2:error] [pid 10695:tid 10819] [client 209.50.168.237:32751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.secdc.org"] [uri "/.env"] [unique_id "aSQMEyFZz-lT68YT4kPqNAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:31:09 (6 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-11-16 17:33:31 (6 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.16 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.16 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 05:10:28 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.14 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.14 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 112.216.129.27

🇨🇳 14.103.196.101

🇺🇸 209.222.98.2

🇨🇭 209.99.190.113

🇧🇪 198.235.24.216

🇧🇪 198.235.24.214

🇧🇪 198.235.24.213

🇳🇱 185.223.235.57

🇸🇦 176.44.67.214

🇨🇳 111.49.202.119

🇮🇩 103.164.57.37

🇩🇪 95.85.238.22

🇩🇪 69.5.169.16

🇲🇾 49.124.151.64

🇺🇸 49.51.204.105

🇳🇱 45.148.10.151

🇮🇩 43.129.33.244

🇳🇱 35.204.76.86

🇬🇧 35.203.210.227

🇯🇵 23.147.232.18