JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.171.39

209.50.171.39 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.171.39

Whois 209.50.171.39

IP Abuse Reports for 209.50.171.39:

This IP address has been reported a total of 27 times from 16 distinct sources. 209.50.171.39 was first reported on September 26th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-07 17:21:17 (4 hours ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-05-31 13:05:37 (1 month ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇩🇪 pltcldvlpr	2026-05-31 13:05:16 (1 month ago)	CMS/framework probe: 209.50.171.39 - - [31/May/2026:15:05:16 +0200] "GET /.git/config HTTP/1.1" 500 ... show more CMS/framework probe: 209.50.171.39 - - [31/May/2026:15:05:16 +0200] "GET /.git/config HTTP/1.1" 500 5 "-" "Wget/1.12 (freebsd8.1)" asn=200373 org="3xK Tech GmbH" country=US ... show less	Web App Attack
Anonymous	2026-05-31 12:19:34 (1 month ago)	209.50.171.39 - - [31/May/2026:09:19:33 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 ... show more 209.50.171.39 - - [31/May/2026:09:19:33 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (Linux; Android 7.0; Lenovo K33a42) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36" ... show less	Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host
🇺🇸 cyfordtechnologies.com	2026-05-01 23:18:20 (2 months ago)	High-abuse ASN prefix: 209.50. : Reported by Cyford API	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-04-30 17:07:01 (2 months ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-04-30 16:05:02 (2 months ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]	Hacking Brute-Force Bad Web Bot Web App Attack
🇬🇧 poundawebsiteltd	2026-04-28 09:12:14 (2 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 209.50.171.39 - - [28/Apr/2026:1 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 209.50.171.39 - - [28/Apr/2026:10:12:12 +0100] GET /s3cmd.ini HTTP/1.1 403 3108 - Mozilla/5.0 (X11; Linux x86_64; rv:15.0) Gecko/20120724 Debian Iceweasel/15.02 show less	Web App Attack
Anonymous	2026-04-01 00:57:53 (3 months ago)	Forum/form spam	Web Spam
Anonymous	2026-03-15 08:15:10 (3 months ago)	Forum/form spam	Web Spam
🇳🇱 homeshowdomain.nl	2025-11-25 22:59:31 (7 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-24. show less	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 03:01:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:01:23.510849 2025] [security2:error] [pid 15589:tid 15608] [client 209.50.171.39:57875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dcs.co.id"] [uri "/.git/HEAD"] [unique_id "aSUcAyIjVFKa_KFJ49hxkwAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:19:16 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:19:12.766690 2025] [security2:error] [pid 15302:tid 15302] [client 209.50.171.39:56473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ctrussell.us"] [uri "/.env"] [unique_id "aSUSIOTLb_Jn7N_35BdnzAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:09:37 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:09:31.345603 2025] [security2:error] [pid 6907:tid 6907] [client 209.50.171.39:32979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azfilmguild.org"] [uri "/.env"] [unique_id "aSQSu70bYp_oAvjz-sjdHAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:34:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.171.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:34:15.854021 2025] [security2:error] [pid 26285:tid 26285] [client 209.50.171.39:26939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.moleculardetective.org"] [uri "/.git/HEAD"] [unique_id "aSPgR2EuenzThX4eIoW6bwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇺🇸 172.214.209.153

🇳🇱 172.94.9.136

🇧🇷 167.250.157.39

🇩🇪 93.152.224.102

🇺🇦 91.195.2.178

🇹🇷 85.96.208.49

🇺🇸 54.172.133.72

🇺🇸 34.224.168.204

🇰🇷 14.35.209.208

🇬🇧 193.163.125.250

🇻🇪 190.6.37.130

🇲🇽 189.203.163.10

🇭🇰 172.68.211.64

🇸🇪 155.4.244.169

🇺🇸 146.190.65.179

🇩🇪 94.26.90.114

🇬🇧 87.114.4.102

🇩🇪 69.5.169.29

🇩🇪 2a01:4f8:150:13a5::100:a