JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.170.132

209.50.170.132 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.170.132

Whois 209.50.170.132

IP Abuse Reports for 209.50.170.132:

This IP address has been reported a total of 19 times from 11 distinct sources. 209.50.170.132 was first reported on September 27th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-20 13:44:19 (1 month ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-20 11:10:33 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 06:10:26.148596 2026] [security2:error] [pid 20744:tid 20744] [client 209.50.170.132:46085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|antech.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "antech.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZhBIirSUTPma_e43uVXagAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-11 09:01:00 (4 months ago)	SMS pumping	DDoS Attack VPN IP Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2025-12-29 08:45:34 (6 months ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-29 08:37:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:37:20.778057 2025] [security2:error] [pid 9404:tid 9404] [client 209.50.170.132:33707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iceofparadise.com"] [uri "/.svn/wc.db"] [unique_id "aVI9wPWuNkEQJH7q1IIFyQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:20:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:20:53.192321 2025] [security2:error] [pid 24883:tid 24883] [client 209.50.170.132:14203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalseniortravel.com"] [uri "/.env"] [unique_id "aVI55XyIAtrjhs7ha1qKmgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:48:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:48:07.000286 2025] [security2:error] [pid 31820:tid 31820] [client 209.50.170.132:47021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coast-consult.com"] [uri "/.svn/wc.db"] [unique_id "aVIkJhxr5rDXAQG8PJxLwAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2025-12-29 06:05:13 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
Anonymous	2025-12-04 04:26:32 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-14 04:32:31 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 14:59:26 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 08:56:47	Port Scan Brute-Force Exploited Host Web App Attack
🇦🇺 AWW-Admin	2025-10-29 14:07:36 (8 months ago)	(wordpress) Failed wordpress login from 209.50.170.132 (US/United States/-)	Brute-Force
Anonymous	2025-10-18 09:15:03 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 17:00:10 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.42.116.102

🇧🇷 170.231.165.12

🇧🇷 149.78.176.66

🇺🇸 146.88.241.80

🇭🇰 118.26.36.248

🇫🇷 91.231.89.229

🇮🇹 34.17.197.106

🇺🇸 2602:feda:f398:8be7:e2ec:5ad0:6e1:2710

🇨🇳 223.199.166.17

🇬🇧 195.206.182.213

🇺🇸 181.215.65.146

🇨🇦 170.203.209.73

🇧🇷 168.196.57.107

🇺🇸 162.216.150.168

🇦🇷 148.222.194.148

🇦🇷 148.222.194.81

🇺🇸 147.182.248.13

🇨🇳 123.113.10.130

🇨🇭 104.244.74.84

🇮🇳 103.127.224.213