JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.175.56

209.50.175.56 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.175.56

Whois 209.50.175.56

IP Abuse Reports for 209.50.175.56:

This IP address has been reported a total of 18 times from 12 distinct sources. 209.50.175.56 was first reported on September 28th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-24 10:11:21 (1 hour ago)	Brute force	Brute-Force
Anonymous	2026-04-24 18:45:51 (1 month ago)	Forum/form spam	Web Spam
🇺🇸 cyfordtechnologies.com	2026-03-27 22:46:15 (2 months ago)	High-abuse ASN prefix: 209.50. : Reported by Cyford API	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇮🇹 VHosting	2025-12-23 14:30:20 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-11 01:58:22 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 09:58:37 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:58:33.959341 2025] [security2:error] [pid 28032:tid 28032] [client 209.50.175.56:44857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.elkesmuesli.com"] [uri "/.env"] [unique_id "aSQsScUeYthZ7HFfWUmpWgAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:19:34 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:19:30.794816 2025] [security2:error] [pid 2319:tid 2319] [client 209.50.175.56:56527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "help.adamscott.us"] [uri "/.git/HEAD"] [unique_id "aSQVEnASTOx4eAQh_VEXuQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:37:31 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:37:23.036630 2025] [security2:error] [pid 26695:tid 26695] [client 209.50.175.56:17909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.garnetcreek.com"] [uri "/.env"] [unique_id "aSPvE6acFNq6AWuN54dvmwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:02:19 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.175.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:02:11.101782 2025] [security2:error] [pid 3965260:tid 3965360] [client 209.50.175.56:31867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.handsonresearch.com"] [uri "/.git/HEAD"] [unique_id "aSPYw6yiyKH59MCrZuH1YAAAAgg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 20:08:23 (7 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 209 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 209.50.175.56 (US/United States/-) show less	Brute-Force
🇺🇸 octageeks.com	2025-11-13 05:08:20 (7 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2025-10-15 19:25:15 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-04 14:16:49 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 12:38:19 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.03 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 151.243.11.35

🇨🇳 120.48.45.182

🇮🇳 111.223.30.82

🇷🇴 2.57.121.112

🇺🇸 143.42.1.52

🇷🇴 80.94.92.156

🇲🇾 47.250.160.98

🇳🇱 45.148.10.151

🇮🇪 40.126.31.0

🇺🇸 192.178.118.208

🇫🇷 154.49.206.87

🇯🇵 153.174.119.215

🇺🇸 129.212.177.110

🇫🇷 85.217.140.5

🇸🇬 43.160.246.215

🇳🇱 5.187.35.142

🇨🇳 182.244.0.150

🇩🇪 104.248.130.34

🇳🇱 34.178.21.247

🇶🇦 2600:1900:4260:40e::163