JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.178.96

209.50.178.96 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.178.96

Whois 209.50.178.96

IP Abuse Reports for 209.50.178.96:

This IP address has been reported a total of 13 times from 12 distinct sources. 209.50.178.96 was first reported on October 31st 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2026-06-13 11:40:10 (16 hours ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇷 setupgr	2026-06-11 08:45:53 (2 days ago)	(mod_security) mod_security (id:900001) triggered by 209.50.178.96: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:900001) triggered by 209.50.178.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 11:45:52.447404 2026] [security2:error] [pid 2066464:tid 2066533] [client 209.50.178.96:59835] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: sea-sound.com"] [severity "CRITICAL"] [tag "security"] [hostname "sea-sound.com"] [uri "/wp-login.php"] [unique_id "aip1wEdtEUnd5Frf7ZTMvgAAAEE"], referer: https://sea-sound.com/wp-login.php show less	Port Scan
🇺🇸 dtorrer	2026-06-10 21:26:38 (3 days ago)	Brute-force general attack.	Brute-Force
🇩🇪 4server	2026-06-10 03:13:07 (4 days ago)	[WedJun1005:13:01.2954442026][security2:error][pid3905470:tid3905508][client209.50.178.96:0]ModSecur ... show more [WedJun1005:13:01.2954442026][security2:error][pid3905470:tid3905508][client209.50.178.96:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"safeoncloud.ch\"][uri\"/wp-login.php\"][unique_id\"aijWPfMQKkcMwkIgruPOWAAAAEE\"]\,referer:https://safeoncloud.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-05-29 21:14:46 (2 weeks ago)	(y4) Failed scan -byebye- from 209.50.178.96 (BR/Brazil/-): (CF_ENABLE)	Hacking
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇦 SSH-Admin	2025-12-27 13:45:08 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
Anonymous	2025-11-06 16:35:00 (7 months ago)	Unauthorized connection attempt	Brute-Force
🇧🇪 madeit	2025-11-04 17:35:27 (7 months ago)		Web App Attack
Anonymous	2025-11-02 13:43:49 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:38:47	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-01 13:04:13 (7 months ago)	(mod_security) mod_security (id:210831) triggered by 209.50.178.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 209.50.178.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 09:04:06.681057 2025] [security2:error] [pid 866:tid 866] [client 209.50.178.96:44135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|hotpay.co\|F\|4"] [data "compatible ; MSIE"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "hotpay.co"] [uri "/xmlrpc.php"] [unique_id "aQYFRo0OVM2qGWcbIbAJlwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 applemooz	2025-11-01 12:15:43 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇳🇱 Mangelot Hosting	2025-10-31 12:32:26 (7 months ago)	(bad_user_agent) srv101 Bad User-Agent 209.50.178.96 (BR/Brazil/-): 10 in the last 3600 secs; Ports: ... show more (bad_user_agent) srv101 Bad User-Agent 209.50.178.96 (BR/Brazil/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.228.139.227

🇺🇸 186.233.184.67

🇧🇷 177.55.61.255

🇺🇸 161.35.230.183

🇸🇬 129.226.95.93

🇺🇸 109.105.210.67

🇭🇰 103.81.170.118

🇷🇺 92.36.33.175

🇦🇹 68.210.120.110

🇭🇰 47.83.9.173

🇧🇷 205.210.31.238

🇧🇷 191.6.25.239

🇧🇷 186.236.237.105

🇦🇪 176.205.254.176

🇺🇸 147.185.132.91

🇨🇳 113.73.235.41

🇵🇱 87.251.64.176

🇪🇸 80.24.1.119

🇫🇮 77.105.161.120

🇲🇾 47.250.82.40