JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.171.204

209.50.171.204 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.171.204

Whois 209.50.171.204

IP Abuse Reports for 209.50.171.204:

This IP address has been reported a total of 29 times from 14 distinct sources. 209.50.171.204 was first reported on September 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dtorrer	2026-06-10 09:54:41 (1 week ago)	Brute-force general attack.	Brute-Force
🇮🇩 securejdprop	2026-03-21 20:19:46 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 60). Ip 209.50.171.204 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-03-21 20:19:45.153099807 +0000 UTC show less	Hacking Web App Attack
🇺🇸 mnsf	2026-02-13 02:06:43 (4 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇫🇷 dynamix	2026-02-11 10:58:03 (4 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:06:51 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:06:43.271339 2026] [security2:error] [pid 5460:tid 5460] [client 209.50.171.204:63117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgegourmet.com"] [uri "/test/.git/config"] [unique_id "aYqgwzsWhcgVBVJVXcyXCAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Axel	2026-02-10 02:52:25 (4 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /v2/.git/conf ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /v2/.git/config show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 01:54:51 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:54:42.229996 2026] [security2:error] [pid 29760:tid 29760] [client 209.50.171.204:57561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "generationedm.com"] [uri "/test/.git/config"] [unique_id "aYqP4if62tZo_8kM3BavYwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:43:26 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:43:19.941433 2026] [security2:error] [pid 20972:tid 20990] [client 209.50.171.204:23053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geekmd.org"] [uri "/wp/.git/config"] [unique_id "aYp_JxYqCguJMhGb04D7owAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-22 16:36:17 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-12-02 15:47:06 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 08:27:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:27:46.138009 2025] [security2:error] [pid 8150:tid 8150] [client 209.50.171.204:39923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.joshi.us"] [uri "/.svn/wc.db"] [unique_id "aSQXAjB3i36RSO2RSMvGDQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:05:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:05:54.397236 2025] [security2:error] [pid 17504:tid 17504] [client 209.50.171.204:22737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.myrtlebeachpartybuses.com"] [uri "/.svn/wc.db"] [unique_id "aSQR4iAzxfLxjJ-6nKpprQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:43:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:43:17.253629 2025] [security2:error] [pid 30155:tid 30155] [client 209.50.171.204:43065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.collegecheating.net"] [uri "/.env"] [unique_id "aSPwdTg_vZO9ZvvDOsBt7AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:21:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:21:17.304793 2025] [security2:error] [pid 31505:tid 31505] [client 209.50.171.204:18439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.topnotchupholstery.com"] [uri "/.env"] [unique_id "aSPrTZ1tur1tamzRJm0fngAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 21:52:44 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 190.119.63.98

🇮🇳 182.95.224.62

🇰🇷 121.158.231.17

🇳🇱 91.92.42.147

🇫🇷 85.217.140.29

🇺🇸 35.226.7.126

🇨🇦 4.206.92.183

🇮🇩 182.253.64.11

🇺🇸 104.196.106.21

🇫🇷 51.77.158.34

🇺🇸 35.226.146.38

🇹🇷 212.64.216.142

🇹🇼 198.235.24.55

🇮🇳 192.178.119.23

🇳🇱 176.65.148.71

🇲🇦 105.155.166.74

🇧🇬 93.94.141.115

🇺🇸 71.6.134.237

🇺🇸 66.132.224.29

🇺🇸 66.132.172.137