JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

209.50.175.253

Recent Activity

Abuse Confidence Score

21% Elevated

24 reports

15 reporters · latest 3 days ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

24 from 15 distinct reporters

First reported

September 4th 2025

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 1 🇮🇩 Indonesia 1

Most common categories Web App Attack 4 Bad Web Bot 2 Hacking 1 Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-11-09 00:44:26 UTC · (3 days ago)	[00:44] Attempted HTTPS Fortinet SSL-VPN login with credentials prueba:1****#	Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 21:49:56 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.253 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 17:49:47.861343 2026] [security2:error] [pid 18813:tid 18844] [client 209.50.175.253:0] Mod ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.253 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 17:49:47.861343 2026] [security2:error] [pid 18813:tid 18844] [client 209.50.175.253:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billgiegold.com"] [uri "/.htpasswd.copy"] [unique_id "atqE-9BgmOPpv5H48OucfwAAAI4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-10-16 02:44:46 UTC · (3 weeks ago)	[02:44] Attempted HTTPS Fortinet SSL-VPN login with credentials Test:A******4	Web App Attack
🇮🇩 securejdprop	2026-10-06 13:12:31 UTC · (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 66).	Hacking Web App Attack
🇩🇪 BlueWire Hosting	2026-09-24 21:47:25 UTC · (1 month ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇸🇪 OnTheEdge	2026-09-03 01:30:46 UTC · (2 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2026-09-03 01:30:46 UTC · (2 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇫🇷 Sklurk	2026-07-08 01:33:35 UTC · (4 months ago)	Web App Attack	Web App Attack
🇨🇦 SSH-Admin	2026-02-08 04:00:04 UTC · (9 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 fbarela	2025-12-28 21:00:02 UTC · (10 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇦🇺 MAGIC	2025-12-15 01:14:41 UTC · (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇦 SSH-Admin	2025-12-10 23:38:07 UTC · (11 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 21:53:56 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 209.50.175.253 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 16:53:52.544773 2025] [security2:error] [pid 7933:tid 7933] [client 209.50.175.253:42067] M ... show more (mod_security) mod_security (id:210730) triggered by 209.50.175.253 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 16:53:52.544773 2025] [security2:error] [pid 7933:tid 7933] [client 209.50.175.253:42067] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "aTnr8C3Rlg_4Uf73itneJQAAAAg"], referer: http://qualityelevatorcabs.com/mktx/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 09:46:29 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.253 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 04:46:22.535181 2025] [security2:error] [pid 24028:tid 24077] [client 209.50.175.253:27649] ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.253 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 04:46:22.535181 2025] [security2:error] [pid 24028:tid 24077] [client 209.50.175.253:27649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waqm.org"] [uri "/.git/HEAD"] [unique_id "aTAG7jE-RxERfycqpGFERQAAAI4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-02 04:32:23 UTC · (11 months ago)	botnet	DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.151

🇩🇪 167.94.146.43

🇺🇸 110.172.141.57

🇲🇦 105.68.205.136

🇮🇩 103.174.238.9

🇸🇪 46.59.91.85

🇺🇸 44.207.6.61

🇺🇸 40.119.46.0

🇮🇶 37.239.172.183

🇮🇶 37.77.55.178

🇹🇭 34.15.151.107

🇮🇹 217.202.29.131

🇩🇪 209.38.237.1

🇫🇮 204.168.152.22

🇳🇱 204.76.203.214

🇨🇴 190.255.34.218

🇲🇽 187.189.68.189

🇺🇸 147.185.132.55

🇮🇳 139.59.74.208

🇨🇳 115.190.226.99