JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.188.116

209.50.188.116 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.188.116

Whois 209.50.188.116

IP Abuse Reports for 209.50.188.116:

This IP address has been reported a total of 19 times from 17 distinct sources. 209.50.188.116 was first reported on November 14th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-07-04 16:49:43 (1 hour ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇲🇽 octageeks.com	2026-07-01 04:17:33 (3 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-06-29 22:52:53 (4 days ago)	209.50.188.116 - - [30/Jun/2026:00:52:53 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 209.50.188.116 - - [30/Jun/2026:00:52:53 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-06-28 15:36:05 (6 days ago)	Wordfence waf block on advocates4change	Web App Attack
🇺🇸 MPL	2026-06-22 20:47:59 (1 week ago)	tcp/80 (11 or more attempts)	Port Scan
🇦🇱 cheatmaster.store	2026-02-27 02:22:56 (4 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Canada Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇩🇪 SCHAPPY	2026-01-02 08:30:17 (6 months ago)	Multiple attempts to attack Wordpress XMLRPC detected: access blocked.	Web App Attack
🇫🇷 Security_Whaller	2025-12-30 06:27:57 (6 months ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:06 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 08:17:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.188.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.188.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:17:25.228753 2025] [security2:error] [pid 6435:tid 6452] [client 209.50.188.116:20669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mhrocket.com"] [uri "/.git/HEAD"] [unique_id "aVI5FZgf3t6w2YZwEdmw4wAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:27:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.188.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.188.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:27:51.537978 2025] [security2:error] [pid 29273:tid 29273] [client 209.50.188.116:17673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "versahealthcare.com"] [uri "/.env"] [unique_id "aVIfZ6aEF6iL3uHMOvRFvAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:26:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.188.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.188.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:25:57.248024 2025] [security2:error] [pid 27084:tid 27084] [client 209.50.188.116:11171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billdavidow.com"] [uri "/.svn/wc.db"] [unique_id "aVIC1U5pWDJOdSNGDrZnWgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-12-28 04:12:34 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: //kickstart.php UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2025-12-26 01:14:37 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 myagent.site	2025-12-24 00:05:00 (6 months ago)	Blocking for trying to access an exploit file: /old//installer.php	Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 186.10.86.130

🇧🇷 177.81.79.242

🇸🇬 103.250.10.18

🇲🇰 79.125.162.32

🇧🇷 45.171.130.206

🇧🇷 45.168.156.145

🇵🇱 20.215.65.170

🇳🇱 192.42.116.112

🇲🇽 189.146.40.238

🇨🇳 180.105.101.85

🇺🇸 172.234.40.229

🇺🇸 162.240.35.200

🇫🇮 147.185.133.149

🇨🇳 111.225.149.11

🇪🇸 95.181.232.30

🇨🇿 91.224.90.50

🇦🇪 91.73.230.80

🇧🇷 45.166.205.23

🇧🇷 45.163.113.160

🇷🇴 2.57.121.25