JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.183.224

209.50.183.224 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.183.224

Whois 209.50.183.224

IP Abuse Reports for 209.50.183.224:

This IP address has been reported a total of 23 times from 12 distinct sources. 209.50.183.224 was first reported on September 30th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-06-02 22:15:29 (2 weeks ago)	2026-06-02 00:07:21,513 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 209.50.183.224 2 ... show more 2026-06-02 00:07:21,513 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 209.50.183.224 2026-06-02 00:07:21,513 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 209.50.183.224 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇫🇷 marc	2026-06-01 07:10:00 (2 weeks ago)	Hacking web forms for spam	Web Spam Web App Attack Hacking
🇳🇱 DrLex0	2026-05-28 14:48:56 (3 weeks ago)	BnL002: GET with absolute URL, obvious botnet minion; either attempt to find exploitable proxy, or j ... show more BnL002: GET with absolute URL, obvious botnet minion; either attempt to find exploitable proxy, or just plain stupidity from whomever wrote this piece of crap show less	Hacking Bad Web Bot Exploited Host
🇳🇱 DrLex0	2026-05-28 14:48:56 (3 weeks ago)	WordPress poking with broken requests from one of the shittiest AS known to mankind 209.50.183.224 ... show more WordPress poking with broken requests from one of the shittiest AS known to mankind 209.50.183.224 80 - [28/May/2026:14:48:55 +0000] "GET http://redacted:80/ HTTP/1.1" 400 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 209.50.183.224 80 - [28/May/2026:14:48:55 +0000] "GET http://redacted:80/wp-includes/wlwmanifest.xml HTTP/1.1" 400 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 209.50.183.224 80 - [28/May/2026:14:48:56 +0000] "GET http://redacted:80/ HTTP/1.1" 400 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-05-24 16:45:35 (3 weeks ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇦🇺 oncord	2026-05-14 18:11:22 (1 month ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-05-11 22:12:50 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-12.209.50.183.224.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-12.209.50.183.224.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇸🇮 administrator	2026-05-04 16:34:00 (1 month ago)	2026-04-12 21:42:53,524 fail2ban.actions [1294183]: NOTICE [ninjafirewall] Ban 209.50.183.22 ... show more 2026-04-12 21:42:53,524 fail2ban.actions [1294183]: NOTICE [ninjafirewall] Ban 209.50.183.224 2026-04-16 12:14:44,336 fail2ban.actions [1104]: NOTICE [ninjafirewall] Ban 209.50.183.224 2026-05-04 18:23:02,661 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 209.50.183.224 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇮🇹 VHosting	2025-12-23 11:08:25 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-26 09:23:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:22:57.659716 2025] [security2:error] [pid 21286:tid 21286] [client 209.50.183.224:50431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.franknash.com"] [uri "/.svn/wc.db"] [unique_id "aSbG8Vam7BSX4FLtokI1RgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:17:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:17:24.460627 2025] [security2:error] [pid 24575:tid 24575] [client 209.50.183.224:26883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kaplankrew.com"] [uri "/.git/HEAD"] [unique_id "aSVYBIoEXXX8O6skBZX8lQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:14:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:14:42.358627 2025] [security2:error] [pid 29979:tid 29979] [client 209.50.183.224:49721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.oceanrich.biz"] [uri "/.svn/wc.db"] [unique_id "aSVJUs9cuFUajo3VHSJ2_AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:53:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:53:22.817284 2025] [security2:error] [pid 19139:tid 19139] [client 209.50.183.224:24917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kanata.ws"] [uri "/.git/HEAD"] [unique_id "aSVEUvhUrzodM2-7bkM6EgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:31:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:31:25.452207 2025] [security2:error] [pid 30938:tid 30938] [client 209.50.183.224:31267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.genesis-one.com"] [uri "/.env"] [unique_id "aSU_LUcNGWwG_T7o-WsqswAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:50:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.183.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:50:23.962082 2025] [security2:error] [pid 1817000:tid 1817012] [client 209.50.183.224:43657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.uoexpanse.com"] [uri "/.svn/wc.db"] [unique_id "aSU1j5iXM9qjzOaPIgQvygAAAUA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.41

🇫🇷 161.97.120.146

🇳🇱 134.122.48.159

🇨🇳 123.54.68.91

🇺🇸 100.49.117.77

🇭🇰 42.200.78.166

🇻🇳 14.225.206.187

🇬🇧 198.244.168.106

🇸🇬 194.5.82.143

🇩🇪 172.217.33.212

🇫🇷 159.26.112.58

🇩🇪 151.243.11.35

🇺🇸 138.197.38.141

🇸🇪 80.244.95.82

🇧🇬 79.124.49.174

🇱🇹 62.60.130.241

🇳🇱 45.148.10.152

🇧🇪 34.52.215.235

🇦🇱 31.171.155.134

🇺🇸 20.64.105.167