JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.186.152

209.50.186.152 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.186.152

Whois 209.50.186.152

IP Abuse Reports for 209.50.186.152:

This IP address has been reported a total of 9 times from 5 distinct sources. 209.50.186.152 was first reported on November 19th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-11 01:34:04 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.186.152 2026-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.186.152 2026-05-10 19:40:18 / 2026-05-10 19:56:38 / 2026-05-10 19:38:37 / 2026-05-10 19:40:15 / show less	Web App Attack
Anonymous	2025-12-30 01:38:44 (5 months ago)	2025-12-30T03:38:44.505665+02:00 zanati wp(www.sahpa.co.za)[594058]: Blocked authentication attempt ... show more 2025-12-30T03:38:44.505665+02:00 zanati wp(www.sahpa.co.za)[594058]: Blocked authentication attempt for [email protected] from 209.50.186.152 ... show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:41 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 04:46:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:46:28.538170 2025] [security2:error] [pid 14826:tid 14826] [client 209.50.186.152:60909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.debzy.com"] [uri "/.svn/wc.db"] [unique_id "aSU0pMZd4VmoRzEUHTPSOAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:29:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:29:38.580769 2025] [security2:error] [pid 29973:tid 29973] [client 209.50.186.152:38471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.livegoodherbs.com"] [uri "/.env"] [unique_id "aSUwsicPc9o9cfJ0ULklAwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:11:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:11:09.208001 2025] [security2:error] [pid 5456:tid 5456] [client 209.50.186.152:57253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.vertirama.com"] [uri "/.env"] [unique_id "aSUsXWTuF1QxPAHbTTH1CgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:23:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:23:14.468844 2025] [security2:error] [pid 17022:tid 17052] [client 209.50.186.152:59867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nesso.es"] [uri "/.env"] [unique_id "aSUhIme42NY3FNbGoYCDBQAAAFI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:12:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:12:35.675465 2025] [security2:error] [pid 28461:tid 28461] [client 209.50.186.152:11689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.midiowagymnastics.com"] [uri "/.env"] [unique_id "aSUQk0aH5ORhaWGOIKq81QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:43:48 (6 months ago)	WP probing for vulnerabilities	Hacking Exploited Host

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 52.249.221.45

🇬🇪 2.57.217.229

🇷🇴 2.57.121.25

🇹🇼 210.243.138.244

🇳🇱 193.176.31.225

🇳🇱 193.176.31.213

🇳🇱 185.223.235.51

🇳🇱 185.223.235.16

🇺🇸 160.153.176.197

🇺🇸 154.197.57.136

🇺🇸 149.72.49.176

🇨🇳 111.162.148.221

🇧🇩 103.4.145.50

🇳🇱 81.19.216.75

🇳🇱 81.19.216.72

🇺🇸 71.238.161.57

🇺🇸 5.181.170.96

🇬🇧 212.48.71.133

🇺🇦 185.237.106.211

🇧🇳 119.160.166.237