JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.177.248

209.50.177.248 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.177.248

Whois 209.50.177.248

IP Abuse Reports for 209.50.177.248:

This IP address has been reported a total of 13 times from 4 distinct sources. 209.50.177.248 was first reported on October 25th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-02 19:45:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:45:21.553818 2025] [security2:error] [pid 15493:tid 15493] [client 209.50.177.248:55419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realestateinpalmbeachflorida.com"] [uri "/.svn/wc.db"] [unique_id "aS9B0dFlMRuRnKYVTZJTfAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:30:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:29:56.369902 2025] [security2:error] [pid 31434:tid 31434] [client 209.50.177.248:17151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colodist.com"] [uri "/.git/HEAD"] [unique_id "aS8F9Ih_1KScfoQdEwCaPAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 11:50:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 06:50:17.171771 2025] [security2:error] [pid 30839:tid 30839] [client 209.50.177.248:38429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "securityzonepr.com"] [uri "/.env"] [unique_id "aS7SeWLaXE6-SB0h6H6KZAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 11:19:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 06:19:45.207666 2025] [security2:error] [pid 19544:tid 19544] [client 209.50.177.248:57119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g-drome.com"] [uri "/.svn/wc.db"] [unique_id "aS7LUbqMDWhqTeLmACQJgwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-02 11:11:20 (6 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-02 07:58:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:58:54.848339 2025] [security2:error] [pid 32000:tid 32000] [client 209.50.177.248:19341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "termstech.com"] [uri "/.env"] [unique_id "aS6cPiWXqKW4FLgt8I7qOgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 06:36:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:36:02.815648 2025] [security2:error] [pid 22628:tid 22628] [client 209.50.177.248:20961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livegoodherbs.com"] [uri "/.env"] [unique_id "aS6I0r4Qt6rCZTzY_DmavwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:19:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:19:23.454536 2025] [security2:error] [pid 17187:tid 17187] [client 209.50.177.248:48903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thehealthcontent.com"] [uri "/.env"] [unique_id "aSQjG8Et2QuzvqlHvL1t5wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:18:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:18:03.272211 2025] [security2:error] [pid 3187:tid 3187] [client 209.50.177.248:22659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.spidersbox.com"] [uri "/.svn/wc.db"] [unique_id "aSP4m8CmrlSWlgBzkG2dmwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:39:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:39:40.862501 2025] [security2:error] [pid 10185:tid 10185] [client 209.50.177.248:55461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aarce.me"] [uri "/.git/HEAD"] [unique_id "aSPhjMmPaSex6FaGVaLLSgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:23:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.177.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:23:18.504830 2025] [security2:error] [pid 18194:tid 18297] [client 209.50.177.248:35719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.landmarkocchealth.com"] [uri "/.git/HEAD"] [unique_id "aSPdtu9urIyQu8V3f-3YAAAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2025-10-27 06:24:38 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇮🇹 Rosh	2025-10-25 02:16:43 (7 months ago)	[10/25/25 04:16:43] SSH: illegal login attempts	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.141.41.212

🇮🇩 202.152.201.166

🇷🇺 188.32.30.69

🇩🇪 185.220.100.241

🇸🇪 130.49.78.76

🇺🇸 91.193.232.251

🇨🇦 35.183.34.190

🇺🇸 6.237.152.229

🇷🇴 2.57.121.112

🇷🇴 2.57.121.25

🇳🇱 2a06:a880:5:74ca::1

🇷🇺 212.248.72.114

🇭🇺 195.199.210.194

🇧🇴 190.129.122.12

🇩🇪 185.242.3.195

🇰🇷 175.206.1.60

🇺🇸 164.90.129.12

🇻🇳 160.30.160.192

🇺🇸 147.93.179.147

🇩🇪 130.12.180.51