JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.168.49

209.50.168.49 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.168.49

Whois 209.50.168.49

IP Abuse Reports for 209.50.168.49:

This IP address has been reported a total of 34 times from 18 distinct sources. 209.50.168.49 was first reported on September 29th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Francesco Ippoliti	2026-07-05 05:05:43 (6 days ago)	[Jul 5 07:05:42] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:802@154 ... show more [Jul 5 07:05:42] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '209.50.168.49:55361' (callid: 862206bf1877cf653b15c5d8c93f28f2) - No matching endpoint found [Jul 5 07:05:42] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '209.50.168.49:55361' (callid: 862206bf1877cf653b15c5d8c93f28f2) - No matching endpoint found ... show less	Brute-Force Port Scan
🇮🇹 Francesco Ippoliti	2026-07-03 21:20:14 (1 week ago)	[Jul 3 23:20:13] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:555@154 ... show more [Jul 3 23:20:13] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '209.50.168.49:36967' (callid: bcf09e3a7820c4321527abee762ec615) - No matching endpoint found [Jul 3 23:20:13] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '209.50.168.49:36967' (callid: bcf09e3a7820c4321527abee762ec615) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 20:12:35 (1 week ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇺🇸 cyfordtechnologies.com	2026-03-28 16:44:36 (3 months ago)	High-abuse ASN prefix: 209.50. : Reported by Cyford API	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-03-24 06:43:29 (3 months ago)	Forum/form spam	Web Spam
Anonymous	2026-03-07 19:46:01 (4 months ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-02-27 12:29:05 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇱🇻 garmtech.com	2026-01-11 09:47:47 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-47.209.50.168.49.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-47.209.50.168.49.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 iNetWorker	2025-12-29 00:51:59 (6 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 21:07:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 16:07:31.991547 2025] [security2:error] [pid 13922:tid 13922] [client 209.50.168.49:53709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elainebroussard.com"] [uri "/.git/HEAD"] [unique_id "aVGcE0R1cfC2dagpsHn3rgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 17:25:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 12:25:03.050490 2025] [security2:error] [pid 765:tid 765] [client 209.50.168.49:50493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinhung.com"] [uri "/.git/HEAD"] [unique_id "aVFn77KdCNADa3qK5SbiiQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 15:53:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 10:53:43.777081 2025] [security2:error] [pid 29451:tid 29451] [client 209.50.168.49:54805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happyskinhappylife.com"] [uri "/.env"] [unique_id "aVFSh9BJKaWNbuyvWSj6gwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 14:56:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 09:56:35.802632 2025] [security2:error] [pid 3731:tid 3731] [client 209.50.168.49:58015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beechleafdesign.com"] [uri "/.env"] [unique_id "aVFFI6KCXeXJa70r64f4iQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 23:15:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 18:15:07.920584 2025] [security2:error] [pid 16330:tid 16330] [client 209.50.168.49:13615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mezensen.com"] [uri "/.svn/wc.db"] [unique_id "aVBoe6ancFSDm_3AJvpLGgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.63.11.98

🇳🇱 193.176.31.153

🇲🇩 178.175.128.43

🇧🇷 177.126.132.44

🇬🇧 154.16.44.187

🇺🇸 66.132.224.15

🇳🇱 45.156.87.161

🇰🇷 211.197.62.36

🇸🇪 195.178.191.5

🇧🇷 187.183.61.106

🇺🇸 173.197.14.231

🇮🇩 163.7.5.228

🇺🇸 162.216.150.125

🇺🇸 162.216.149.216

🇺🇸 147.182.253.104

🇵🇭 119.94.166.107

🇹🇷 94.154.43.31

🇷🇺 93.100.98.162

🇫🇷 91.196.152.100

🇧🇬 91.191.209.98