JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.173.223

209.50.173.223 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 38%: ?

38%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.173.223

Whois 209.50.173.223

IP Abuse Reports for 209.50.173.223:

This IP address has been reported a total of 32 times from 15 distinct sources. 209.50.173.223 was first reported on September 26th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-06-21 13:12:03 (1 hour ago)	Wordfence waf block on pameganslaw	Web App Attack
🇫🇷 ELYAZ	2026-06-17 14:05:27 (4 days ago)	(y4) Failed scan -byebye- from 209.50.173.223 (US/United States/-): (CF_ENABLE)	Hacking
🇩🇪 LRob.fr	2026-06-14 08:45:07 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-06-12 04:23:40 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 dtorrer	2026-06-11 22:20:58 (1 week ago)	Brute-force general attack.	Brute-Force
🇲🇽 octageeks.com	2026-06-11 04:20:57 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 LRob.fr	2026-06-11 03:30:05 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇦🇺 HJ5Ss4Ju	2026-06-10 03:10:13 (1 week ago)	Blocked by Wordfence (SID 6)	Web App Attack
🇱🇻 garmtech.com	2026-03-27 23:34:50 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-03-23 19:03:19 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇧🇾 lns.bz	2026-02-09 21:04:41 (4 months ago)	.env scanning [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 20:42:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:42:24.445640 2026] [security2:error] [pid 1433:tid 1433] [client 209.50.173.223:14567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gamerah.net"] [uri "/api/.git/config"] [unique_id "aYpGsPpNUbZZ_BLFwyapZQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 19:42:46 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:42:37.943368 2026] [security2:error] [pid 27725:tid 27725] [client 209.50.173.223:59831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gadgeteer.net"] [uri "/v2/.git/config"] [unique_id "aYo4rQU8ICwpSlxDu68yLAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 11:27:24 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 06:27:16.699991 2026] [security2:error] [pid 12364:tid 12364] [client 209.50.173.223:64259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galengetting.com"] [uri "/wp/.git/config"] [unique_id "aYnElHjTr5D7ClqeTz43EgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 10:56:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.173.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:56:52.088258 2026] [security2:error] [pid 14997:tid 14997] [client 209.50.173.223:56243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gainow.net"] [uri "/api/.git/config"] [unique_id "aYm9dDup4mmEeFZue7hwkAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.108.174.4

🇷🇴 193.32.162.16

🇫🇮 138.124.5.60

🇹🇼 118.163.132.212

🇨🇳 117.143.47.142

🇳🇱 45.148.10.35

🇨🇳 222.195.92.204

🇻🇳 171.244.37.97

🇩🇪 167.94.146.45

🇺🇸 162.216.149.26

🇨🇳 116.179.32.162

🇨🇳 60.10.50.90

🇺🇸 45.131.194.90

🇺🇸 20.80.52.246

🇯🇵 8.216.7.91

🇩🇪 164.90.172.242

🇺🇸 162.216.149.109

🇺🇸 162.216.149.12

🇨🇳 123.57.252.201

🇰🇿 95.59.142.69