JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.182.243

209.50.182.243 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 34%: ?

34%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.182.243

Whois 209.50.182.243

IP Abuse Reports for 209.50.182.243:

This IP address has been reported a total of 25 times from 11 distinct sources. 209.50.182.243 was first reported on October 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 poundawebsiteltd	2026-06-17 05:01:46 (1 day ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 209.50.182.243 - - [17/Jun/2026:06:01:40 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 209.50.182.243 - - [17/Jun/2026:06:01:40 +0100] POST /wp-login.php HTTP/1.1 200 7352 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇨🇭 4server	2026-06-16 23:24:51 (1 day ago)	[WedJun1701:24:47.3919182026][security2:error][pid2305603:tid2305782][client209.50.182.243:0]ModSecu ... show more [WedJun1701:24:47.3919182026][security2:error][pid2305603:tid2305782][client209.50.182.243:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"edomustech.ch\"][uri\"/wp-login.php\"][unique_id\"ajHbPyBme9BIsIUByjCROQAAAAI\"]\,referer:https://edomustech.ch/wp-login.php show less	Hacking Web App Attack
🇫🇷 pm33	2026-06-16 19:37:08 (1 day ago)	Wordpress login attempts	Brute-Force
🇫🇷 ELYAZ	2026-06-12 01:50:59 (6 days ago)	(y4) Failed scan -byebye- from 209.50.182.243 (DE/Germany/-): (CF_ENABLE)	Hacking
🇺🇸 nationaleventpros.com	2026-06-11 20:36:34 (6 days ago)	WordPress login attempt	Brute-Force
🇪🇸 10dencehispahard SL	2026-01-26 09:47:58 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-09 04:59:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 23:58:58.546206 2025] [security2:error] [pid 20759:tid 20759] [client 209.50.182.243:43227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howelllands.com"] [uri "/.env"] [unique_id "aTeskqq1kzaH8NYH4IfYsgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 16:01:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 11:01:22.434285 2025] [security2:error] [pid 10179:tid 10185] [client 209.50.182.243:22583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learndoexplore.com"] [uri "/.git/HEAD"] [unique_id "aTb2UmlIMH-6r-Ly853TZgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 06:25:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 01:25:42.127505 2025] [security2:error] [pid 10321:tid 10321] [client 209.50.182.243:56335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gacstoday.com"] [uri "/.svn/wc.db"] [unique_id "aTZvZunniE7YKNjxYM-DwwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 03:42:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:42:07.069469 2025] [security2:error] [pid 2352:tid 2352] [client 209.50.182.243:27635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "36sovereignchambers.com"] [uri "/.svn/wc.db"] [unique_id "aTZJD7y4txrAM6VFAmZ8UQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 03:05:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:05:16.060721 2025] [security2:error] [pid 29092:tid 29110] [client 209.50.182.243:34077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "minutosrobados.com"] [uri "/.env"] [unique_id "aTZAbKsA0H_esvLwHjUT0gAAAI4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 19:47:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 14:47:18.253455 2025] [security2:error] [pid 7745:tid 7745] [client 209.50.182.243:12641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grandersonheatingandcooling.com"] [uri "/.git/HEAD"] [unique_id "aTXZxj1m8tiCD07xw9QQBwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 15:26:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:25:57.125859 2025] [security2:error] [pid 11877:tid 11877] [client 209.50.182.243:28879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tonyv.org"] [uri "/.git/HEAD"] [unique_id "aTWchZCMctw1W3_wUMLlCQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 16:28:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:28:25.580244 2025] [security2:error] [pid 26754:tid 26754] [client 209.50.182.243:55083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "techsunlimited.net"] [uri "/.git/HEAD"] [unique_id "aTRZqUd63UEycRe_AnDhaAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 21:41:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:41:27.964825 2025] [security2:error] [pid 32185:tid 32185] [client 209.50.182.243:57695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "santagreetingcards.com"] [uri "/.env"] [unique_id "aS9dB2ULkYuDOxxPCmxF7AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.151.137.252

🇺🇸 216.25.89.130

🇩🇪 213.209.159.227

🇧🇷 205.210.31.216

🇧🇷 205.210.31.215

🇧🇷 205.210.31.204

🇬🇧 194.164.91.60

🇲🇽 187.190.35.163

🇧🇷 129.121.39.181

🇳🇱 45.148.10.200

🇧🇷 205.210.31.202

🇧🇷 205.210.31.200

🇧🇷 177.101.0.11

🇿🇦 102.129.63.222

🇳🇱 91.92.40.12

🇺🇸 67.215.246.78

🇰🇷 59.24.133.197

🇺🇸 40.93.1.48

🇺🇸 4.150.201.26

🇧🇷 205.210.31.141