JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.175.1

209.50.175.1 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.175.1

Whois 209.50.175.1

IP Abuse Reports for 209.50.175.1:

This IP address has been reported a total of 25 times from 11 distinct sources. 209.50.175.1 was first reported on September 30th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Goetz	2026-08-27 12:07:50 (4 days ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 lostswordfish.com	2026-08-09 11:54:04 (3 weeks ago)	Wordfence waf block on uvfousor WPIDD	Web App Attack
🇫🇷 Sklurk	2026-07-30 00:58:19 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-29 00:18:13 (1 month ago)	Web App Attack	Web App Attack
🇳🇴 jad-abuse	2026-07-28 18:56:03 (1 month ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits. show less	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-07-16 12:21:40 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-09 00:01:57 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 04:55:22 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 19:40:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:40:15.367755 2026] [security2:error] [pid 21642:tid 21642] [client 209.50.175.1:40135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gacstoday.com"] [uri "/admin/.env"] [unique_id "aYo4H06C5OWiPh5BlFxauwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:09:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:09:03.957192 2026] [security2:error] [pid 30483:tid 30483] [client 209.50.175.1:43851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullbladderclub.com"] [uri "/api/.env"] [unique_id "aYoUr-zgYZK01dAotpLeqgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 07:57:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 02:57:12.942513 2026] [security2:error] [pid 7437:tid 7437] [client 209.50.175.1:35377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fwa51.com"] [uri "/v2/.git/config"] [unique_id "aYmTWNc8A6_06-oTKGeQiQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 06:15:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:15:21.031640 2026] [security2:error] [pid 2736:tid 2736] [client 209.50.175.1:48811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furballaudio.com"] [uri "/v2/.git/config"] [unique_id "aYl7eavnM6opRY9qxfMpSwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-09 07:18:47 (8 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 09:38:20 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:38:16.242020 2025] [security2:error] [pid 27439:tid 27547] [client 209.50.175.1:12887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pwalshdesign.com"] [uri "/.svn/wc.db"] [unique_id "aSQniAdRJ-GlrOkYv178pQAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:18:09 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:18:02.551408 2025] [security2:error] [pid 243932:tid 243981] [client 209.50.175.1:52095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cibernetic.com"] [uri "/.svn/wc.db"] [unique_id "aSQiylc8EtVRkmyAMevciAAAARA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 143.42.1.52

🇳🇱 45.148.10.141

🇺🇸 216.218.206.109

🇨🇱 186.103.169.12

🇦🇷 186.22.245.195

🇺🇦 185.35.9.21

🇺🇸 184.105.139.107

🇮🇩 103.172.20.218

🇩🇪 77.83.39.94

🇩🇪 35.234.69.16

🇬🇧 2.57.17.232

🇮🇷 217.60.255.130

🇪🇹 196.190.81.1

🇮🇳 181.214.10.240

🇰🇷 101.235.199.214

🇫🇷 77.239.124.210

🇺🇸 74.7.229.135

🇵🇰 223.123.92.77

🇷🇺 176.101.248.249

🇺🇸 48.217.85.31