JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.184.106

209.50.184.106 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.184.106

Whois 209.50.184.106

IP Abuse Reports for 209.50.184.106:

This IP address has been reported a total of 17 times from 13 distinct sources. 209.50.184.106 was first reported on November 2nd 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 spamverify.com	2026-07-20 16:43:12 (5 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-19 06:08:04 (6 days ago)	Wordfence waf block on taussigtravel	Web App Attack
Anonymous	2026-07-08 09:08:21 (2 weeks ago)	Unauthorized access attempt to administration interfaces (wp-admin, phpMyAdmin, panel, etc). Automat ... show more Unauthorized access attempt to administration interfaces (wp-admin, phpMyAdmin, panel, etc). Automated scanning blocked by fail2ban. show less	Web App Attack
🇫🇷 ELYAZ	2026-06-23 22:41:29 (1 month ago)	(y4) Failed scan -byebye- from 209.50.184.106 (ES/Spain/-): (CF_ENABLE)	Hacking
🇺🇸 cwytech	2026-06-21 03:47:40 (1 month ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-12 22:05:38 (1 month ago)	Login Too Frequent (6)	Brute-Force Web App Attack
🇩🇪 Tha_14	2026-06-12 12:48:25 (1 month ago)	Attempt to log in with non-existing username: moncheryl	Bad Web Bot
🇮🇹 VHosting	2025-12-24 01:25:04 (7 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 19:23:02 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:22:51.796351 2025] [security2:error] [pid 20192:tid 20192] [client 209.50.184.106:43521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arellasoc.com"] [uri "/.svn/wc.db"] [unique_id "aSilC2C_OBmDqnALxw9vrgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-25 23:01:04 (8 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇬🇧 myintarweb	2025-11-25 21:03:48 (8 months ago)	209.50.184.106 - - [25/Nov/2025:21:03:48 +0000] 80 "GET /.env HTTP/1.1" 301 1627 "-" "Mozilla/5.0 (W ... show more 209.50.184.106 - - [25/Nov/2025:21:03:48 +0000] 80 "GET /.env HTTP/1.1" 301 1627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:48:08 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:48:05.603219 2025] [security2:error] [pid 13285:tid 13285] [client 209.50.184.106:16921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.consolidatedoperationsgroup.com"] [uri "/.git/HEAD"] [unique_id "aSVDFWW3x7Gcpwp7W9iXXQAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Thaliruth	2025-11-25 04:37:43 (8 months ago)	[25/Nov/2025:05:37:43.210484 +0100] aSUylzQQgF8ZIYdEkvZTSQAAAFM 209.50.184.106 46302 127.0.0.1 7080 ... show more [25/Nov/2025:05:37:43.210484 +0100] aSUylzQQgF8ZIYdEkvZTSQAAAFM 209.50.184.106 46302 127.0.0.1 7080 ... show less	Hacking
🇺🇸 TPI-Abuse	2025-11-25 04:19:12 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:19:07.859369 2025] [security2:error] [pid 22623:tid 22623] [client 209.50.184.106:18233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.edgecomix.com"] [uri "/.svn/wc.db"] [unique_id "aSUuO5k8jDzgVy8QVz0r1QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:29:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:29:29.493147 2025] [security2:error] [pid 17270:tid 17270] [client 209.50.184.106:9361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hillerhome.com"] [uri "/.env"] [unique_id "aSUimT3QGAX3gremHpAASAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.8

🇺🇸 185.180.141.15

🇨🇳 115.190.211.235

🇺🇸 96.78.175.36

🇺🇸 66.132.186.254

🇬🇧 51.68.207.118

🇺🇸 20.127.239.245

🇫🇷 2001:41d0:33d:9200::400

🇨🇳 221.13.86.7

🇺🇸 205.210.31.83

🇨🇴 200.110.171.21

🇻🇪 200.82.188.142

🇰🇿 195.7.13.7

🇬🇧 194.50.235.158

🇬🇧 185.247.137.165

🇮🇳 183.87.217.222

🇺🇸 167.172.223.199

🇫🇷 167.86.114.220

🇺🇸 162.216.150.196

🇺🇸 162.216.149.64