JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.174.74

209.50.174.74 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.174.74

Whois 209.50.174.74

IP Abuse Reports for 209.50.174.74:

This IP address has been reported a total of 24 times from 12 distinct sources. 209.50.174.74 was first reported on September 29th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-02 01:37:15 (2 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-01 00:46:30 (1 day ago)	Web App Attack	Web App Attack
Anonymous	2025-11-24 11:45:01 (8 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:14:50 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:14:43.518551 2025] [security2:error] [pid 6401:tid 6401] [client 209.50.174.74:38787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.participation.direct"] [uri "/.svn/wc.db"] [unique_id "aSQiA6QNs-BidyAV6yNfXAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-24 06:45:02 (8 months ago)		Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:29:49 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:43.416450 2025] [security2:error] [pid 23899:tid 23899] [client 209.50.174.74:59399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mthompson-business-services.com"] [uri "/.env"] [unique_id "aSP7V0CdXFmzLGTtYxld_gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:45:21 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:44:56.106246 2025] [security2:error] [pid 3366023:tid 3366023] [client 209.50.174.74:22621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.hemihauling.com"] [uri "/.env"] [unique_id "aSPw2Hkd2engYjeygfb9IAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:23:18 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:23:07.083766 2025] [security2:error] [pid 22345:tid 22345] [client 209.50.174.74:57391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.neconebooks.com"] [uri "/.git/HEAD"] [unique_id "aSPru-z46gXD5XwXrYcKCwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-15 06:00:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 01:00:28.149847 2025] [security2:error] [pid 24684:tid 24684] [client 209.50.174.74:52587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.breinesberger.com"] [uri "/.env"] [unique_id "aRgW_FrADJ480RiITR-ZvQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 05:13:17 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 00:59:00 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.174.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 19:58:53.855875 2025] [security2:error] [pid 18856:tid 18856] [client 209.50.174.74:14369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.aico-sal.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRZ-zYIffpoueB49ATIgcgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 wil.com	2025-10-29 02:12:56 (9 months ago)	GlobalProtect login attempts with user klemon.	VPN IP Brute-Force
🇩🇪 london2038.com	2025-10-24 09:10:56 (9 months ago)	Connection atttempts against closed TCP ports Oct 24 11:10:53 BLOCK SRC=209.50.174.74 LEN=60 TOS=0x0 ... show more Connection atttempts against closed TCP ports Oct 24 11:10:53 BLOCK SRC=209.50.174.74 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7813 DF PROTO=TCP SPT=49203 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 24 11:10:54 BLOCK SRC=209.50.174.74 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7814 DF PROTO=TCP SPT=49203 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 24 11:10:55 BLOCK SRC=209.50.174.74 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7815 DF PROTO=TCP SPT=49203 DPT=22 WINDOW=64240 RES=0x00 SYN show less	Port Scan
Anonymous	2025-10-17 16:04:27 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 polycoda	2025-10-17 14:24:53 (9 months ago)	📡 Port scan	Hacking Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.175.183.32

🇧🇷 45.179.29.181

🇨🇳 42.51.41.137

🇳🇱 213.176.26.58

🇻🇳 103.167.89.178

🇫🇷 91.231.89.184

🇺🇸 64.62.197.70

🇺🇸 2602:80d:1007::6b

🇺🇸 216.25.89.157

🇳🇱 213.176.26.165

🇰🇷 211.46.177.174

🇨🇭 209.99.190.200

🇺🇸 202.78.170.219

🇺🇸 172.217.46.246

🇳🇱 160.119.71.92

🇺🇦 91.203.63.14

🇳🇱 81.171.72.135

🇺🇸 64.227.101.79

🇻🇪 38.51.216.98

🇺🇸 20.65.193.155