JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.172.2

209.50.172.2 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.172.2

Whois 209.50.172.2

IP Abuse Reports for 209.50.172.2:

This IP address has been reported a total of 29 times from 15 distinct sources. 209.50.172.2 was first reported on September 4th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 maxasp.net	2026-09-18 00:55:45 (2 days ago)	Invalid var_id in cart/add; Attack Var: var_id; Attack Data: 436630xCfjWG9m'; waitfor delay '0:0:15' ... show more Invalid var_id in cart/add; Attack Var: var_id; Attack Data: 436630xCfjWG9m'; waitfor delay '0:0:15' -- show less	Hacking
🇫🇷 Sklurk	2026-08-10 00:39:46 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=16; exact paths: /xmlrpc.php	Web App Attack
🇦🇺 oncord	2026-05-30 21:32:47 (3 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-05-25 22:08:24 (3 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-04-20 22:48:41 (4 months ago)	Form spam	Web Spam
🇨🇦 Ashgrinder_00013	2026-04-04 09:04:15 (5 months ago)	inout; Ports: ; Direction: 1; Trigger: (Web_Vulnerability_Scan) LABEL: Web_Vulnerability_Scan \| DES ... show more inout; Ports: ; Direction: 1; Trigger: (Web_Vulnerability_Scan) LABEL: Web_Vulnerability_Scan \| DESC: ALERT:_Bot_scanning_for_web_vulnerabilities_on_Port_443 209.50.172.2 (US/United States/-): 1 in the last 3600 secs; Logs: show less	Port Scan
🇦🇺 oncord	2026-02-14 13:07:52 (7 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-02-03 07:58:35 (7 months ago)	Form spam	Web Spam
Anonymous	2025-12-16 03:39:42 (9 months ago)	2025-12-16T05:39:42.074415+02:00 zanati wp(www.sahpa.co.za)[978041]: Blocked authentication attempt ... show more 2025-12-16T05:39:42.074415+02:00 zanati wp(www.sahpa.co.za)[978041]: Blocked authentication attempt for [email protected] from 209.50.172.2 ... show less	Web App Attack
Anonymous	2025-12-04 03:21:38 (9 months ago)	2025-12-04T05:21:38.206354+02:00 zanati wp(www.sahpa.co.za)[382755]: Blocked authentication attempt ... show more 2025-12-04T05:21:38.206354+02:00 zanati wp(www.sahpa.co.za)[382755]: Blocked authentication attempt for [email protected] from 209.50.172.2 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:32:16 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.172.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.172.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:32:09.762360 2025] [security2:error] [pid 19985:tid 19985] [client 209.50.172.2:56841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rudiscreations.org"] [uri "/.svn/wc.db"] [unique_id "aSQmGVX7srMMeF6s9w2RfAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:04:46 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.172.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.172.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:04:36.032910 2025] [security2:error] [pid 14320:tid 14320] [client 209.50.172.2:50155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowdens-landingcom.draindoctor.us"] [uri "/.env"] [unique_id "aSP1dEqMmmz6E13YtOCexAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:39:04 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.172.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.172.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:38:43.013452 2025] [security2:error] [pid 3394:tid 3394] [client 209.50.172.2:19087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kinesiologiaenmovimiento.com"] [uri "/.env"] [unique_id "aSPhU4jAbrWKvsLns_zuawAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-21 12:57:32 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.21 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.21 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.145.0.18

🇧🇷 189.100.221.128

🇲🇽 187.208.204.118

🇸🇪 170.168.31.198

🇧🇷 152.32.199.115

🇨🇳 120.193.9.167

🇭🇰 119.236.84.46

🇨🇳 119.91.229.120

🇨🇳 119.3.162.103

🇻🇳 103.142.26.97

🇰🇬 92.62.69.247

🇺🇦 91.208.194.40

🇳🇱 91.148.246.228

🇩🇪 69.5.169.60

🇺🇸 34.132.204.129

🇵🇰 203.101.186.179

🇧🇷 187.94.255.192

🇳🇱 185.218.86.11

🇺🇸 172.203.134.70

🇰🇷 119.196.155.203