JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.228.93

209.50.228.93 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 13%: ?

13%

ISP	Leaseweb USA, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS30633
Domain Name	leaseweb.com
Country	🇺🇸 United States of America
City	Centreville, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.228.93

Whois 209.50.228.93

IP Abuse Reports for 209.50.228.93:

This IP address has been reported a total of 11 times from 10 distinct sources. 209.50.228.93 was first reported on November 18th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 apislytics	2026-07-04 09:39:45 (3 days ago)	Automatic hard ban after repeated rate-limit abuse	Brute-Force
🇳🇱 Webhoster	2026-05-15 01:35:12 (1 month ago)	{"ClientAddr":"172.71.194.42:9556","ClientHost":"209.50.228.93","ClientPort":"9556","ClientUsername" ... show more {"ClientAddr":"172.71.194.42:9556","ClientHost":"209.50.228.93","ClientPort":"9556","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":30856240,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":30856240,"RequestAddr":"link.timvdberg.dev","RequestContentSize":0,"RequestCount":21573,"RequestHost":"link.timvdberg.dev","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"karakeep@file","StartLocal":"2026-05-15T01:34:53.612302416Z","StartUTC":"2026-05-15T01:34:53.612302416Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"209.50.228.93","request_X-Forwarded-For":"209.50.228.93","request_X-Real-Ip":"172.71.194.42","time":"2026-05-15T01:34:53Z"} {"ClientAddr":"104.23.211.144:9404","ClientHost":"209.50.228.93","ClientPort":"9404","ClientUsername":"-","DownstreamContentSize" ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 conrad10781	2026-05-09 03:55:36 (1 month ago)	nginx-cgi-bin	Web App Attack
Anonymous	2026-03-21 07:18:36 (3 months ago)	Illegitimate and/or suspicious requests.	Hacking
🇺🇸 vdub144	2026-03-13 07:22:28 (3 months ago)	Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /searchpr ... show more Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /searchpro/form.php?g=22&s=1&t=1 \| UA: req/v3 (https://github.com/imroc/req) \| Blocked by: nginx-bot-hell show less	Web App Attack
🇺🇸 shaunc	2026-03-08 03:47:00 (3 months ago)	209.50.228.93 - - [06/Mar/2026:22:15:22 -0600] "GET /bet365%25252525252525252525E6%25252525252525252 ... show more 209.50.228.93 - - [06/Mar/2026:22:15:22 -0600] "GET /bet365%25252525252525252525E6%2525252525252525252597%25252525252525252525A0%25252525252525252525E6%25252525252525252525B3%2525252525252525252595%25252525252525252525E7%2525252525252525252599%25252525252525252525BB%25252525252525252525E5%25252525252525252 HTTP/1.1" 404 236 on "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇩🇪 kranem	2026-02-24 21:21:33 (4 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 30633 (LEASEWEB-USA-WDC - Leaseweb USA, I ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 30633 (LEASEWEB-USA-WDC - Leaseweb USA, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-02-24T19:19:41Z User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 26_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Brave/1 Mobile/15E148 Safari/604.1 show less	Bad Web Bot
Anonymous	2026-02-19 01:28:04 (4 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 VanKoh	2026-02-12 12:27:50 (4 months ago)	209.50.228.93 - - [12/Feb/2026:06:27:47 -0600] "GET /wp-content/uploads/2025/10/cropped-fabicon1-32x ... show more 209.50.228.93 - - [12/Feb/2026:06:27:47 -0600] "GET /wp-content/uploads/2025/10/cropped-fabicon1-32x32.png HTTP/1.1" 404 43945 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 209.50.228.93 - - [12/Feb/2026:06:27:47 -0600] "GET /wp-content/uploads/2025/10/cropped-fabicon1-180x180.png HTTP/1.1" 404 43945 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 209.50.228.93 - - [12/Feb/2026:06:27:49 -0600] "GET /wp-content/uploads/2025/10/cropped-fabicon1-192x192.png HTTP/1.1" 404 43945 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" ... show less	Port Scan Web App Attack
🇮🇪 RoboSOC	2025-11-24 16:58:45 (7 months ago)	Netgear DGN Device Remote Command Execution Vulnerability , PTR: PTR record not found	Hacking
Anonymous	2025-11-18 19:18:00 (7 months ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.23.182.94

🇬🇧 35.203.211.196

🇰🇷 220.119.37.141

🇧🇷 205.210.31.156

🇮🇳 203.193.147.75

🇰🇷 115.178.75.243

🇷🇸 82.25.247.150

🇺🇸 45.79.167.35

🇯🇵 20.89.250.108

🇮🇪 18.201.17.207

🇸🇬 212.73.148.1

🇧🇷 187.113.66.28

🇮🇶 185.136.148.143

🇺🇸 184.105.139.74

🇵🇱 172.253.13.210

🇸🇬 149.34.253.149

🇱🇹 141.98.11.11

🇺🇸 104.198.108.121

🇫🇷 91.231.89.255

🇺🇸 91.230.168.215