JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

50.21.188.63

Neutral Activity

Abuse confidence score ?

0% Low Risk

25 reports

15 reporters · latest 2 years ago

ISP	IONOS Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Domain Name	ionos.com
Country	🇺🇸 United States of America
City	Lenexa, Kansas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

50.21.188.63 has been reported 25 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 50.21.188.63

This IP address has been reported a total of 25 times from 15 distinct sources. 50.21.188.63 was first reported on October 2nd 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-09-19 06:21:19 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 19 02:21:15.752993 2024] [security2:error] [pid 1363:tid 1363] [client 50.21.188.63:34767] [client 50.21.188.63] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|caretakerspestcontrol.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caretakerspestcontrol.com"] [uri "/JMRussell.com"] [unique_id "ZuvC2yDhr6PPjAA6cUBxWAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-09 20:32:43 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 16:32:36.384950 2024] [security2:error] [pid 31940:tid 31940] [client 50.21.188.63:51027] [client 50.21.188.63] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|solcargomiami.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "solcargomiami.com"] [uri "/mailto@[email protected]"] [unique_id "Zt9bZP8HIfLX0jLcfkOcpAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-08 09:00:01 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 08 04:59:56.134508 2024] [security2:error] [pid 7073:tid 7073] [client 50.21.188.63:40312] [client 50.21.188.63] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fractalsky.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fractalsky.com"] [uri "/blackhorrormovie.com"] [unique_id "Zt1njIf2sbS7et4EA4G9GAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 directorioeducativo.com	2024-09-08 01:58:15 (2 years ago)	GET="/wp-cron.php" user-agent="IonCrawl (https://www.ionos.de/terms-gtc/faq-crawler-en/)"	Web App Attack
🇩🇪 findlab	2024-08-21 20:20:02 (2 years ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 lavnet.net	2024-07-26 19:52:09 (2 years ago)	[Fri Jul 26 19:52:08.110679 2024] [authz_core:error] [pid 2697378:tid 2697378] [client 50.21.188.63: ... show more [Fri Jul 26 19:52:08.110679 2024] [authz_core:error] [pid 2697378:tid 2697378] [client 50.21.188.63:46323] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Fri Jul 26 19:52:08.112007 2024] [authz_core:error] [pid 2697378:tid 2697378] [client 50.21.188.63:46323] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Fri Jul 26 19:52:09.538085 2024] [authz_core:error] [pid 2697378:tid 2697378] [client 50.21.188.63:46323] AH01630: client denied by server configuration: /var/www/a0a0.org/web/wp-cron.php ... show less	Brute-Force
Anonymous	2024-04-09 11:37:15 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇩🇪 hfbusiness.de	2024-04-02 07:31:40 (2 years ago)	50.21.188.63 - - [02/Apr/2024:09:31:40 +0200] "GET /wp-cron.php HTTP/1.1" 404 4092 "-" "IonCrawl (ht ... show more 50.21.188.63 - - [02/Apr/2024:09:31:40 +0200] "GET /wp-cron.php HTTP/1.1" 404 4092 "-" "IonCrawl (https://www.ionos.de/terms-gtc/faq-crawler/)" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2024-03-29 15:06:46 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 11:06:42.069647 2024] [security2:error] [pid 3534576] [client 50.21.188.63:51375] [client 50.21.188.63] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|keystroke.info\|F\|2"] [data ".php.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "keystroke.info"] [uri "/LocalSettings.php.backup"] [unique_id "ZgbZAuVXOGWU11M2pz1JBgAAADc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-03-17 02:43:19 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-02-11 03:52:57 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 50.21.188.63 (crawllxa118.1and1.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 10 22:52:49.976020 2024] [security2:error] [pid 11614] [client 50.21.188.63:55731] [client 50.21.188.63] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|techspertnet.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "techspertnet.com"] [uri "/[email protected]"] [unique_id "ZchEkcewYgobL4UyxBiRtQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-02-05 05:02:30 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇦 swrlly	2024-01-24 04:11:46 (2 years ago)	attempt to exploit known webserver vulnerabilities	Web App Attack
🇺🇸 findlab	2023-12-23 04:20:04 (2 years ago)	Backdrop CMS module - scanning for vulnerable files	Bad Web Bot Web App Attack
🇮🇲 Buster	2023-12-09 22:06:10 (2 years ago)	Repeated attack attempts from Perm Blocked Very High Risk ASN & country	Open Proxy Hacking Brute-Force Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 182.52.44.150

🇸🇬 149.34.253.149

🇺🇸 136.117.52.210

🇮🇳 135.235.196.148

🇹🇼 111.70.32.10

🇳🇱 89.125.42.236

🇪🇪 37.157.91.62

🇳🇱 213.206.207.146

🇧🇪 198.235.24.249

🇺🇸 194.187.179.183

🇺🇸 184.105.247.252

🇪🇨 181.196.24.37

🇺🇸 162.216.149.102

🇨🇳 125.46.78.194

🇨🇳 124.71.59.102

🇷🇺 78.132.139.195

🇰🇷 59.24.3.231

🇳🇱 51.158.190.216

🇻🇳 221.133.3.83

🇧🇪 198.235.24.230