JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.185.68

209.50.185.68 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.185.68

Whois 209.50.185.68

IP Abuse Reports for 209.50.185.68:

This IP address has been reported a total of 15 times from 9 distinct sources. 209.50.185.68 was first reported on October 9th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-04-20 17:01:55 (1 month ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇬🇧 openstrike.co.uk	2026-02-11 06:13:37 (3 months ago)	2 attacks on env grabbing URLs, VC URLs: GET /config/.env HTTP/1.1 GET /admin/.git/config HTTP/1.1	Hacking
🇺🇸 TPI-Abuse	2026-02-10 03:53:42 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:53:28.990798 2026] [security2:error] [pid 2744865:tid 2744865] [client 209.50.185.68:51823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kittencream.com"] [uri "/backup/.git/config"] [unique_id "aYqruHcMp4bpwzRnfNh-vAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 02:58:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:58:35.790160 2026] [security2:error] [pid 29612:tid 29612] [client 209.50.185.68:23501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingmansvc.com"] [uri "/admin/.git/config"] [unique_id "aYqe20lsn8kH5HFTjTJ7CAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:55:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:55:53.668419 2026] [security2:error] [pid 16574:tid 16574] [client 209.50.185.68:18877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kcmastercleaners.com"] [uri "/config/.env"] [unique_id "aYpl-cLKDdgNQPo2EWrd9gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-09 22:32:54 (3 months ago)	Blocking for trying to access an exploit file: /app/.env	Hacking
🇺🇸 TPI-Abuse	2026-02-09 22:31:55 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:31:50.733804 2026] [security2:error] [pid 4089:tid 4089] [client 209.50.185.68:16863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kayelynn.com"] [uri "/.env.staging"] [unique_id "aYpgVm5ycYna7aPApV1j9gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 21:28:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:28:42.389777 2026] [security2:error] [pid 27918:tid 27918] [client 209.50.185.68:59185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karsini-services.com"] [uri "/.env.production"] [unique_id "aYpRioSJsx4Gl9lqJZAUAAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 06:57:48 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:43 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇹 alph44	2025-12-21 11:06:15 (5 months ago)	WordPress attack detected by fail2ban: 3 failed attempts	Web App Attack
🇦🇺 afleventoffice.com.au	2025-11-25 07:36:37 (6 months ago)	GET /.aws/credentials HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:37:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:37:32.298289 2025] [security2:error] [pid 14745:tid 14767] [client 209.50.185.68:10329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.xavidominguez.com"] [uri "/.env"] [unique_id "aSPhDIb4J_KY4o5nrFuMiAAAARQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:35:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.185.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:35:45.938274 2025] [security2:error] [pid 23085:tid 23085] [client 209.50.185.68:9655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adultshop61.net"] [uri "/.git/HEAD"] [unique_id "aSPSkdsWMKS7x5deR8MK9AAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-09 12:57:54 (7 months ago)	...	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.48.77.157

🇨🇳 101.126.26.93

🇪🇸 90.167.51.155

🇺🇸 20.163.15.19

🇺🇸 4.227.232.143

🇨🇴 190.84.116.89

🇨🇳 180.76.244.13

🇺🇸 138.99.38.189

🇵🇰 110.36.13.229

🇵🇰 103.12.197.122

🇭🇷 82.24.217.46

🇹🇼 61.222.211.114

🇮🇶 37.77.49.133

🇨🇳 36.103.243.179

🇩🇪 213.21.253.255

🇧🇷 205.210.31.192

🇨🇳 183.155.18.53

🇧🇷 177.30.64.65

🇺🇸 162.216.149.152

🇲🇦 160.176.19.30