JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.170.253

209.50.170.253 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.170.253

Whois 209.50.170.253

IP Abuse Reports for 209.50.170.253:

This IP address has been reported a total of 23 times from 13 distinct sources. 209.50.170.253 was first reported on September 28th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 spamverify.com	2026-06-10 02:15:13 (4 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 ezsystems.com	2026-03-15 18:20:48 (2 months ago)		Web Spam
Anonymous	2026-02-09 21:56:26 (4 months ago)	209.50.170.253 - - [09/Feb/2026:21:56:07 +0000] "GET /v2/.git/config HTTP/1.1" 302 3409 "-" "Mozilla ... show more 209.50.170.253 - - [09/Feb/2026:21:56:07 +0000] "GET /v2/.git/config HTTP/1.1" 302 3409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:58:11 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.253 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:57:48.748469 2026] [security2:error] [pid 17728:tid 17728] [client 209.50.170.253:31503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furballrecords.com"] [uri "/admin/.env"] [unique_id "aYogHOPTitfbMzF7mdLdNAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 09:39:15 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.253 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 04:39:08.389750 2026] [security2:error] [pid 27782:tid 27782] [client 209.50.170.253:56787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullyevil.com"] [uri "/dev/.git/config"] [unique_id "aYmrPPs3xCTQ0KKN4kkIqQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 04:18:47 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.170.253 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.170.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 23:18:37.300780 2026] [security2:error] [pid 20307:tid 20307] [client 209.50.170.253:15463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullbladderclub.com"] [uri "/backend/.env"] [unique_id "aYlgHfXvE43NHS_7h5u_bgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-14 15:05:23 (5 months ago)	botnet	DDoS Attack
🇺🇸 nowyouknow	2025-11-24 00:22:37 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, count ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-10 08:00:20 (7 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, countle ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
🇿🇦 corneXTN	2025-10-29 07:32:00 (7 months ago)	Form spam / abuse	Web Spam
Anonymous	2025-10-29 00:03:13 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-28 23:47:33 (7 months ago)	GlobalProtect login attempts with user dbishop.	VPN IP Brute-Force
🇨🇦 wil.com	2025-10-28 21:57:04 (7 months ago)	GlobalProtect login attempts with user khalikmartin.	VPN IP Brute-Force
Anonymous	2025-10-18 12:14:03 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇦🇺 oncord	2025-10-07 10:16:51 (8 months ago)	Form spam	Web Spam

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇱 77.137.79.104

🇺🇸 35.130.111.146

🇩🇪 207.154.230.149

🇧🇷 200.39.46.41

🇺🇾 190.108.12.236

🇫🇷 185.177.72.67

🇸🇦 151.254.95.165

🇮🇳 128.185.116.114

🇨🇳 113.221.45.156

🇧🇩 103.165.187.131

🇫🇷 51.68.34.131

🇿🇦 41.160.123.34

🇺🇦 31.131.31.202

🇦🇷 186.19.22.83

🇨🇳 180.153.236.130

🇷🇺 176.49.134.153

🇹🇼 104.155.219.164

🇮🇳 103.95.165.212

🇺🇸 98.80.4.18

🇱🇹 81.30.98.158