JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.186.213

209.50.186.213 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.186.213

Whois 209.50.186.213

IP Abuse Reports for 209.50.186.213:

This IP address has been reported a total of 19 times from 11 distinct sources. 209.50.186.213 was first reported on October 7th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-06-24 22:31:24 (2 days ago)	Wordpress login attempts	Brute-Force
🇮🇩 zam	2026-06-22 10:49:36 (5 days ago)	209.50.186.213 - - [22/Jun/2026:10:49:34 +0000] "POST /wp-login.php HTTP/1.1" 404 27293	Web App Attack
🇫🇷 ELYAZ	2026-06-21 17:10:07 (5 days ago)	(y4) Failed scan -byebye- from 209.50.186.213 (IT/Italy/-): (CF_ENABLE)	Hacking
🇩🇪 F242	2026-06-20 11:23:10 (1 week ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇨🇳 ThreatBook.io	2026-05-18 00:57:14 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.186.213 2026-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.186.213 2026-05-17 01:22:41 / 2026-05-17 01:28:30 / show less	Web App Attack
Anonymous	2026-01-03 13:38:32 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report timestamp show less	Hacking Brute-Force
🇳🇱 homeshowdomain.nl	2026-01-02 23:01:04 (5 months ago)	Auto-ban: >3000 req/min op 2026-01-02	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-24 09:26:42 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:26:33.958280 2025] [security2:error] [pid 11607:tid 11607] [client 209.50.186.213:43667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.insidepublications.com"] [uri "/.env"] [unique_id "aSQkySycMvk8-VK9KgnzZwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:12:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:11:52.646940 2025] [security2:error] [pid 21526:tid 21526] [client 209.50.186.213:19473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "urrguide.com.coolingsprings.org"] [uri "/.git/HEAD"] [unique_id "aSQTSMvRe3jz9rxQmfvpXQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:00:37 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:00:23.321332 2025] [security2:error] [pid 13523:tid 13523] [client 209.50.186.213:24171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.runnercomics.samanthasomers.com"] [uri "/.svn/wc.db"] [unique_id "aSQCh1IOVqHxu-56A5QBfQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:23:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:23:42.458137 2025] [security2:error] [pid 2068:tid 2068] [client 209.50.186.213:29287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.streaklesstoiletpaper.com"] [uri "/.env"] [unique_id "aSPr3kUKQI3JR5X29He9DAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:07:03 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:06:57.435050 2025] [security2:error] [pid 30448:tid 30448] [client 209.50.186.213:21951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accentspecialties.com"] [uri "/.svn/wc.db"] [unique_id "aSPn8UIE0l7ALQQvqoCHUAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:01:28 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:01:21.646863 2025] [security2:error] [pid 28847:tid 28847] [client 209.50.186.213:41901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.berntson.org"] [uri "/.git/HEAD"] [unique_id "aSPYkfO-y6w5Hob5vigA5wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-23 23:25:45 (7 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, count ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> THEmoneyfromhome.com show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-21 03:33:03 (7 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, countles ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.109

🇺🇸 174.138.89.209

🇨🇦 106.49.55.189

🇬🇧 35.203.211.197

🇬🇧 35.203.211.57

🇫🇷 213.199.50.230

🇹🇭 203.172.178.110

🇺🇸 198.44.166.15

🇺🇸 146.19.78.47

🇭🇰 114.111.53.214

🇨🇳 112.123.17.68

🇷🇺 109.63.134.29

🇺🇸 52.186.170.77

🇳🇱 45.153.34.186

🇳🇱 185.226.197.62

🇲🇾 121.122.119.170

🇺🇸 66.132.172.117

🇱🇹 45.227.254.170

🇺🇸 45.79.207.110

🇧🇬 212.233.219.49