JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.182.31

209.50.182.31 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.182.31

Whois 209.50.182.31

IP Abuse Reports for 209.50.182.31:

This IP address has been reported a total of 16 times from 7 distinct sources. 209.50.182.31 was first reported on November 2nd 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Ben Schoolland	2026-09-11 11:07:05 (4 days ago)	Requested known WordPress backdoor/scanner-only paths. No legitimate use.	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-09-09 16:47:04 (6 days ago)	1.814 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇵🇱 lns.bz	2026-09-09 10:44:31 (6 days ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇮🇩 securejdprop	2026-09-03 14:18:33 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 66). show less	Hacking Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (5 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-01-21 13:47:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 08:47:31.855106 2026] [security2:error] [pid 3781434:tid 3781434] [client 209.50.182.31:41375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.org"] [uri "/.git/HEAD"] [unique_id "aXDY8_-Hh6KyrQ4x5GrRxQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-21 11:18:23 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 06:18:17.315385 2026] [security2:error] [pid 19615:tid 19615] [client 209.50.182.31:43427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.git/HEAD"] [unique_id "aXC1-WTnhUDGMv8BPbDrxQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:26:16 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:26:10.740814 2025] [security2:error] [pid 22996:tid 22996] [client 209.50.182.31:25155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mbnetworking.com"] [uri "/.env"] [unique_id "aSaPculYJCgUpJSl2le9kgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:27:44 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:27:39.737612 2025] [security2:error] [pid 7073:tid 7073] [client 209.50.182.31:41023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.d-sinema.com"] [uri "/.svn/wc.db"] [unique_id "aSQlC7E6sVta4dpns9xI9QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:30:25 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:30:17.157995 2025] [security2:error] [pid 4485:tid 4485] [client 209.50.182.31:31271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bahamascruisersguide.com"] [uri "/.env"] [unique_id "aSQXmbucj_PmWJD_7NiNogAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:56:40 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:56:35.697689 2025] [security2:error] [pid 3498088:tid 3498088] [client 209.50.182.31:47437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.leiske.com"] [uri "/.env"] [unique_id "aSQPs0jy9gHlvwbkr59pQQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:28:51 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:28:47.177987 2025] [security2:error] [pid 696:tid 696] [client 209.50.182.31:32083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aspenbrookestudio.com"] [uri "/.svn/wc.db"] [unique_id "aSQJL46bQL0_kOg_spHtlQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:59:36 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:59:30.816391 2025] [security2:error] [pid 23156:tid 23156] [client 209.50.182.31:39077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nolaanimereviews.com"] [uri "/.git/HEAD"] [unique_id "aSP0QnLERaGq0F71qlXFiQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:18:19 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:18:13.481371 2025] [security2:error] [pid 18325:tid 18329] [client 209.50.182.31:41143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.seips.org"] [uri "/.env"] [unique_id "aSPqlbibCkDUtlE56PAvEQAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:25:39 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.182.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:25:30.106218 2025] [security2:error] [pid 13510:tid 13510] [client 209.50.182.31:21105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.artocratic.com"] [uri "/.svn/wc.db"] [unique_id "aSPeOgg0l9xY5pF5_zuMcgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.13

🇳🇱 195.178.110.227

🇺🇦 195.18.19.30

🇬🇧 193.163.125.41

🇺🇸 155.2.215.37

🇺🇸 104.152.52.139

🇮🇹 82.85.225.167

🇳🇱 81.19.216.80

🇭🇰 43.240.14.35

🇧🇷 205.210.31.172

🇺🇸 195.184.76.211

🇮🇹 194.60.212.119

🇩🇪 188.95.65.41

🇭🇷 185.254.255.82

🇧🇷 172.68.19.83

🇩🇪 167.94.146.54

🇬🇧 165.227.238.235

🇫🇮 147.185.133.10

🇺🇸 147.185.132.202

🇺🇸 142.111.152.135