JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.169.161

209.50.169.161 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.169.161

Whois 209.50.169.161

IP Abuse Reports for 209.50.169.161:

This IP address has been reported a total of 25 times from 13 distinct sources. 209.50.169.161 was first reported on September 27th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 [email protected]	2026-09-13 15:43:03 (6 days ago)	Automated report: IP 209.50.169.161 caught brute-forcing honeypot or triggering active gzip bomb tra ... show more Automated report: IP 209.50.169.161 caught brute-forcing honeypot or triggering active gzip bomb trap on Aison Server. show less	Port Scan Hacking
🇺🇸 webgobe	2026-09-13 01:22:17 (6 days ago)	lee-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇨🇳 Zhengka.net	2026-09-11 23:22:27 (1 week ago)	zhengka.net security honeypot hit; jail=zhengka.net_honeypot; ip=209.50.169.161	Port Scan Web App Attack
Anonymous	2026-09-04 14:06:06 (2 weeks ago)	209.50.169.161 - - [04/Sep/2026:14:06:05 +0000] "GET /wp-login.php HTTP/1.1" 404 35698 "-" "Mozilla/ ... show more 209.50.169.161 - - [04/Sep/2026:14:06:05 +0000] "GET /wp-login.php HTTP/1.1" 404 35698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 19:17:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 15:17:47.319205 2026] [security2:error] [pid 7211:tid 7211] [client 209.50.169.161:30837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/.git/./config"] [unique_id "aoC7W1JU4ZH2e0y_aUc7CgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-15 14:53:17 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇫🇷 Sklurk	2026-07-31 01:16:00 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 11:17:39 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:17:36.605556 2025] [security2:error] [pid 31486:tid 31486] [client 209.50.169.161:56925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schmitzcomm.net"] [uri "/.svn/wc.db"] [unique_id "aTQQ0EtF0iTRqvWjGavnZAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 17:11:54 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 12:11:50.746213 2025] [security2:error] [pid 11839:tid 11839] [client 209.50.169.161:48747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "opticasprisma.com"] [uri "/.svn/wc.db"] [unique_id "aTMSVkiYHRzqXWIAxAhQjQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 05:13:37 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:13:31.867186 2025] [security2:error] [pid 15337:tid 15337] [client 209.50.169.161:32943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guavaroad.com"] [uri "/.git/HEAD"] [unique_id "aTJp--wzKJvda7cH1LYyLwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 04:24:12 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:24:09.958781 2025] [security2:error] [pid 15908:tid 15908] [client 209.50.169.161:16785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loftonboys.com"] [uri "/.git/HEAD"] [unique_id "aTJeabO39ZXnsgKH6y_Y0AAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 03:08:41 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:08:34.941556 2025] [security2:error] [pid 21280:tid 21280] [client 209.50.169.161:12699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photogreetingcardsonline.com"] [uri "/.git/HEAD"] [unique_id "aTJMsrybEFAG25e8Xm9M7gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:50:30 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:49:44.285083 2025] [security2:error] [pid 25105:tid 25127] [client 209.50.169.161:50211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.transiit.org"] [uri "/.git/HEAD"] [unique_id "aSQOGMn5O4wpUvSPLAuSugAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:28:31 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:28:23.732005 2025] [security2:error] [pid 1432:tid 1432] [client 209.50.169.161:22207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadflow.darkalleyproductions.com"] [uri "/.env"] [unique_id "aSQJFw2lB65sTKXuJgiR8QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:39:58 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.169.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:39:54.081494 2025] [security2:error] [pid 26811:tid 26811] [client 209.50.169.161:15827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autism.disabilitiesdespair.com"] [uri "/.git/HEAD"] [unique_id "aSPvqnP6JTr6CUuq1C5m1AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.66.32.210

🇷🇺 178.178.194.136

🇺🇸 162.243.47.110

🇳🇱 160.119.76.22

🇺🇸 146.88.240.178

🇹🇭 134.236.38.234

🇩🇪 134.122.93.100

🇧🇬 109.160.32.117

🇩🇪 104.207.57.129

🇳🇵 103.214.1.130

🇷🇺 94.243.11.194

🇸🇪 82.209.191.14

🇧🇷 45.182.206.203

🇧🇪 34.76.199.251

🇺🇸 4.148.17.174

🇹🇼 198.235.24.120

🇨🇴 186.84.88.243

🇺🇸 184.105.247.248

🇨🇱 181.43.8.107

🇮🇩 180.247.44.152