JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.187.192

209.50.187.192 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.187.192

Whois 209.50.187.192

IP Abuse Reports for 209.50.187.192:

This IP address has been reported a total of 15 times from 6 distinct sources. 209.50.187.192 was first reported on October 15th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-05-23 01:38:22 (3 weeks ago)	Form spam	Web Spam
🇬🇧 PeravixGroup	2026-05-22 11:31:40 (3 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-13 00:23:03 (1 month ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.187.192 2026 ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.187.192 2026-05-12 06:30:45 /druid/index.html show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 00:09:04 (1 month ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.187.192 2026 ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.187.192 2026-05-11 17:26:14 /api/swagger.json 2026-05-11 17:26:15 /v3/api-docs 2026-05-11 17:26:14 /swagger/docs/v1 2026-05-11 17:26:13 /swagger/v1/swagger.json 2026-05-11 17:26:12 /v2/api-docs 2026-05-11 17:26:12 /prod-api/v2/api-docs show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-10 00:13:04 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.187.192 2026-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.187.192 2026-05-09 15:45:27 /nacos/v1/auth/users?pageNo=1&pageSize=10 show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-22 00:19:19 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.187.192 2026-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.187.192 2026-04-21 04:36:13 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-08 00:22:08 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.187.192 2026-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.187.192 2026-01-07 07:22:33 /.env show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:43:47 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.187.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.187.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:43:43.642975 2025] [security2:error] [pid 25585:tid 25585] [client 209.50.187.192:10953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thestardance.com"] [uri "/.env"] [unique_id "aVIVD9rrOCMEAW-Y3JMFhQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 03:51:29 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.187.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.187.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:51:22.087996 2025] [security2:error] [pid 12737:tid 12737] [client 209.50.187.192:59209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sawmat.com"] [uri "/.git/HEAD"] [unique_id "aVH6urU0nvh6OTX6YtEAuQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-12-23 00:31:03 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.187.192 2025-12 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.187.192 2025-12-22 18:04:18 /swagger/docs/v1 2025-12-22 18:04:20 /v3/api-docs 2025-12-22 07:21:56 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2025-12-22 18:04:19 /api/swagger.json 2025-12-22 18:04:17 /swagger/v1/swagger.json 2025-12-22 22:18:01 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2025-12-22 18:04:16 /v2/api-docs 2025-12-22 18:04:16 /prod-api/v2/api-docs show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-21 23:52:25 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.187.192 2025-12 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.50.187.192 2025-12-21 09:40:11 /druid/index.html show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:26:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.187.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.187.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:26:22.566333 2025] [security2:error] [pid 9268:tid 9268] [client 209.50.187.192:9007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customweddingmatches.com"] [uri "/.svn/wc.db"] [unique_id "aSUTzluSqGJEv99VXOMpvAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 18:17:22 (6 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/13 12:15:49	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-11-02 14:57:52 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:17:11	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-15 13:26:00 (7 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 122.144.131.25

🇹🇼 104.199.176.250

🇳🇱 85.11.167.7

🇰🇷 14.55.144.22

🇬🇧 5.226.140.50

🇷🇴 2.57.121.112

🇺🇸 170.203.28.48

🇺🇸 147.185.132.190

🇯🇵 122.222.1.177

🇬🇧 45.82.76.107

🇩🇪 43.228.157.8

🇨🇦 35.203.43.227

🇮🇷 5.237.108.189

🇧🇷 205.210.31.232

🇧🇷 181.218.9.86

🇵🇾 181.124.177.69

🇲🇾 180.74.225.210

🇻🇳 125.212.158.13

🇨🇳 117.40.114.21

🇿🇲 102.23.122.235