JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.170.196

209.50.170.196 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.170.196

Whois 209.50.170.196

IP Abuse Reports for 209.50.170.196:

This IP address has been reported a total of 27 times from 16 distinct sources. 209.50.170.196 was first reported on September 27th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-18 12:37:40 (4 days ago)	[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 209.50.170.196 - - [18/Oct/2026:14:36:59 +0200] "GET /.aws/config~ HTTP/1.1" 404 12634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 Ben Schoolland	2026-09-29 15:56:10 (3 weeks ago)	Requested known WordPress backdoor/scanner-only paths. No legitimate use.	Bad Web Bot Web App Attack
🇨🇿 lp	2026-09-20 06:21:49 (1 month ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 209.50.170.196 2026-09-20T07:41:12+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 209.50.170.196 2026-09-20T07:41:12+02:00 vpn Access-Reject 'ehsan' station: 209.50.170.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-19 19:49:46 (1 month ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 209.50.170.196 2026-09-19T21:06:29+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 209.50.170.196 2026-09-19T21:06:29+02:00 vpn Access-Reject 'andrea' station: 209.50.170.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-09-13 21:48:33 (1 month ago)	[14/Sep/2026:00:48:33 +0300] -- 209.50.170.196 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /xml ... show more [14/Sep/2026:00:48:33 +0300] -- 209.50.170.196 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /xmlrpc.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-11 16:26:29 (1 month ago)	[11/Sep/2026:19:26:28 +0300] -- 209.50.170.196 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [11/Sep/2026:19:26:28 +0300] -- 209.50.170.196 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-09-02 00:26:34 (1 month ago)	[00:26] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [00:26] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇫🇷 Sklurk	2026-08-10 06:03:23 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 01:00:20 (3 months ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-05-17 04:01:32 (5 months ago)	Brute force	Brute-Force
🇩🇪 F242	2026-01-30 05:31:53 (8 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇮🇹 VHosting	2025-12-22 21:09:49 (10 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 06:29:03 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:28:59.820996 2025] [security2:error] [pid 6259:tid 6259] [client 209.50.170.196:60191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rannals.com"] [uri "/.git/HEAD"] [unique_id "aSVMqzTjxb3vfpayGaVXqQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2025-11-25 04:54:05 (10 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.svn/wc.db (Rule ID: 920440) - URL file extension is restricted by policy show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:56:08 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:56:04.494008 2025] [security2:error] [pid 18455:tid 18455] [client 209.50.170.196:17055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lawrencegolan.com.arsenaultartistmanagement.com"] [uri "/.svn/wc.db"] [unique_id "aSUaxNnScNtdH2w_WrzI1AAAABo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 43.173.68.211

🇨🇦 167.99.181.249

🇳🇱 138.226.239.90

🇧🇪 82.197.193.95

🇳🇱 62.129.142.220

🇲🇽 47.87.12.140

🇮🇳 34.0.11.153

🇩🇪 217.239.6.198

🇫🇷 201.4.78.3

🇬🇪 193.24.126.196

🇸🇪 176.69.121.228

🇺🇸 162.216.150.227

🇹🇹 161.0.155.57

🇹🇭 147.50.231.99

🇺🇸 64.225.8.173

🇭🇰 49.213.6.30

🇵🇰 36.255.45.151

🇧🇪 34.62.6.163

🇺🇸 24.199.91.229

🇧🇷 2804:3d90:ffc4:2921:2821:e867:9150:b122