JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 50.6.7.137

50.6.7.137 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 29%: ?

29%

ISP	Newfold Digital, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Hostname(s)	50-6-7-137.unifiedlayer.com
Domain Name	enduranceinternational.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 50.6.7.137

Whois 50.6.7.137

IP Abuse Reports for 50.6.7.137:

This IP address has been reported a total of 10 times from 7 distinct sources. 50.6.7.137 was first reported on January 26th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 RoboSOC	2026-06-11 22:55:50 (2 weeks ago)	React Server Components Remote Code Execution Vulnerability, PTR: 50-6-7-137.unifiedlayer.com.	Hacking
🇩🇪 SCHAPPY	2026-06-11 18:34:13 (2 weeks ago)	Critical web app attack detected. Remote Command Execution: Unix Shell Expression Found	Web App Attack
🇱🇻 garmtech.com	2026-06-11 07:27:21 (2 weeks ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
Anonymous	2026-06-10 14:40:07 (2 weeks ago)	CVE-2025-55182 - RSC NEXTJS RCE Exploit - HTTP (Request)	Hacking
Anonymous	2026-06-10 14:20:19 (2 weeks ago)	CVE-2025-55182 - RSC NEXTJS Unicode RCE Exploit - HTTP (Request)	Hacking
🇩🇪 4server	2026-06-10 09:14:40 (2 weeks ago)	[WedJun1011:14:35.2912452026][security2:error][pid121626:tid121719][client50.6.7.137:0]ModSecurity:A ... show more [WedJun1011:14:35.2912452026][security2:error][pid121626:tid121719][client50.6.7.137:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\${encodeuricomponent$string\(res$\)}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=$function\(${var_r=typeofrequire\!==undefined\?require:$process.mainmodule\?process.mainmodule.require.bind\(process.mainmodule$:$typeofglobalthis.require\!==undefined\?globalthis.require:null$\)return12899339148110000}\)throwobject.assign$newerror\(next_redirect${...\"][tag\"attack-rce\"][hostn show less	Port Scan Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-06-10 05:40:02 (2 weeks ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇫🇷 masterguru	2026-05-27 12:16:56 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 50.6.7.137 (US/United States/50-6-7-1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 50.6.7.137 (US/United States/50-6-7-137.unifiedlayer.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-26 09:22:16 (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 50.6.7.137 (US/United States/50-6-7-1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 50.6.7.137 (US/United States/50-6-7-137.unifiedlayer.com): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 expandmade.com	2026-01-26 08:53:00 (5 months ago)	trolling for wp-login [26/Jan/2026:08:53:00 "GET /wp-login.php?registration=disabled"]	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.11.177.243

🇮🇩 182.8.130.237

🇺🇸 65.49.1.165

🇸🇪 46.59.122.78

🇷🇺 45.131.46.240

🇺🇸 44.147.138.21

🇺🇸 40.65.222.177

🇫🇮 34.88.217.184

🇨🇳 8.136.96.194

🇯🇲 216.10.217.76

🇰🇷 211.247.127.250

🇩🇪 194.187.176.126

🇮🇹 190.106.185.242

🇦🇷 181.41.245.141

🇨🇳 119.91.213.21

🇫🇷 85.217.140.45

🇩🇪 69.5.169.80

🇳🇱 45.148.10.151

🇺🇸 20.115.90.214

🇸🇬 4.193.98.138