JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.171.152

209.50.171.152 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.171.152

Whois 209.50.171.152

IP Abuse Reports for 209.50.171.152:

This IP address has been reported a total of 31 times from 15 distinct sources. 209.50.171.152 was first reported on September 27th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-03 01:42:17 (14 hours ago)	(y4) Failed scan -byebye- from 209.50.171.152 (US/United States/-): (CF_ENABLE)	Hacking
🇪🇸 librebit	2026-05-17 04:16:50 (1 month ago)	Brute force	Brute-Force
🇵🇱 sefinek.net	2026-01-14 15:42:56 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇱🇻 garmtech.com	2026-01-08 18:50:13 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-50.209.50.171.152.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-50.209.50.171.152.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-30 22:07:49 (6 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.171.152 2025-12 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.171.152 2025-12-30 15:09:39 /.git/HEAD show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 10:52:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 05:52:02.150088 2025] [security2:error] [pid 27589:tid 27596] [client 209.50.171.152:47517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorchiarizia.com"] [uri "/.env"] [unique_id "aVJdUq88qC1mYRcSi0HDIAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 09:55:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:55:51.647801 2025] [security2:error] [pid 3738:tid 3738] [client 209.50.171.152:39013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaiirealty.com"] [uri "/.env"] [unique_id "aVJQJ8X-IIV-hBQf6KAUwAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 09:09:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:09:30.018467 2025] [security2:error] [pid 28673:tid 28673] [client 209.50.171.152:12521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bewdleypizza.com"] [uri "/.git/HEAD"] [unique_id "aVJFSknta2VcPSvqSjYlPQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:57:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:57:39.763274 2025] [security2:error] [pid 23494:tid 23494] [client 209.50.171.152:19887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalservicetravel.com"] [uri "/.git/HEAD"] [unique_id "aVImYykccUA6UgjGEHSlTQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-12-24 17:19:55 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-19.209.50.171.152.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-19.209.50.171.152.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-12-18 01:48:26 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-48.209.50.171.152.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-48.209.50.171.152.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-12-03 07:31:40 (7 months ago)	botnet	DDoS Attack
🇦🇺 MAGIC	2025-11-29 05:09:55 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 08:41:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:41:29.444325 2025] [security2:error] [pid 9606:tid 9661] [client 209.50.171.152:23887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.isoceansl.com"] [uri "/.git/HEAD"] [unique_id "aSa9OSFyBWeOsnO3zv5pOwAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:01:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:01:07.389231 2025] [security2:error] [pid 27283:tid 27283] [client 209.50.171.152:23007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cherishedcompanions.com"] [uri "/.env"] [unique_id "aSaXo6vfi25a-sHoHysQ5AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.71.135.110

🇫🇮 147.185.133.179

🇧🇷 143.95.209.223

🇧🇬 78.128.113.22

🇸🇪 77.243.90.189

🇺🇸 44.220.185.61

🇧🇷 43.157.163.155

🇺🇸 13.219.37.54

🇧🇷 177.5.253.214

🇺🇸 128.203.204.165

🇮🇳 103.157.149.14

🇺🇸 98.26.229.30

🇺🇸 68.194.13.196

🇮🇩 180.243.252.80

🇭🇰 172.253.6.17

🇻🇳 171.244.37.97

🇺🇸 149.72.116.219

🇮🇳 103.250.160.76

🇷🇺 80.253.31.232

🇱🇹 62.60.130.219