JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.186.206

209.50.186.206 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.186.206

Whois 209.50.186.206

IP Abuse Reports for 209.50.186.206:

This IP address has been reported a total of 13 times from 9 distinct sources. 209.50.186.206 was first reported on November 21st 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-22 04:06:43 (4 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-06-21 00:49:55 (1 day ago)	Wordpress login attempts	Brute-Force
🇩🇪 F242	2026-06-20 11:23:10 (1 day ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇲🇽 octageeks.com	2026-06-20 04:13:18 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇱 Savvii	2026-06-15 17:12:25 (6 days ago)	20 attempts against mh_ha-misbehave-ban on taro	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-13 07:05:59 (4 months ago)	Too many Status 40X (12) Scanning/Probing (13)	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-02-13 01:13:02 (4 months ago)	Blocking for trying to access an exploit file: /wp/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-10 03:04:36 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:04:30.515144 2026] [security2:error] [pid 612:tid 612] [client 209.50.186.206:13929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgeberkedesign.com"] [uri "/wp/.git/config"] [unique_id "aYqgPktnxXHMNXA2B9lyJwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-26 09:02:10 (6 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:12:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:12:11.797250 2025] [security2:error] [pid 18614:tid 18614] [client 209.50.186.206:29267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.scrunchiebuttbikini.com"] [uri "/.git/HEAD"] [unique_id "aSZT65so0k7jA6fUXBLQwgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:02:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:01:59.270706 2025] [security2:error] [pid 1647139:tid 1647151] [client 209.50.186.206:24507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "encuentrelas10diferencias.wizart.org"] [uri "/.git/HEAD"] [unique_id "aSUAB55eMzOQPKYL6rLyUAAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 00:45:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:44:52.946254 2025] [security2:error] [pid 9019:tid 9019] [client 209.50.186.206:52627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.valuecenteredleadership.com"] [uri "/.svn/wc.db"] [unique_id "aSOqhBLnli2CVtSE8s0T7QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-21 18:30:58 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/21 12:28:10	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2602:fb54:1e00::1e7

🇬🇧 188.240.59.51

🇻🇳 103.1.210.25

🇺🇸 66.132.172.115

🇺🇸 64.62.197.225

🇺🇸 216.73.217.142

🇧🇴 190.171.241.204

🇧🇷 189.89.231.67

🇫🇷 185.177.72.30

🇨🇴 181.128.96.4

🇻🇳 113.161.143.215

🇧🇬 79.124.56.146

🇺🇸 73.110.176.60

🇧🇷 45.205.1.73

🇨🇳 221.5.224.71

🇩🇪 178.105.243.216

🇦🇺 168.144.167.20

🇩🇪 159.65.117.157

🇨🇳 117.57.205.36

🇻🇳 113.162.188.248