JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.190.138

209.50.190.138 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 37%: ?

37%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.190.138

Whois 209.50.190.138

IP Abuse Reports for 209.50.190.138:

This IP address has been reported a total of 11 times from 9 distinct sources. 209.50.190.138 was first reported on October 16th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-15 06:19:56 (3 days ago)	209.50.190.138 - - [15/Jun/2026:08:19:56 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 209.50.190.138 - - [15/Jun/2026:08:19:56 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 4server	2026-06-15 05:12:06 (3 days ago)	[MonJun1507:12:04.7737172026][security2:error][pid3788818:tid3788895][client209.50.190.138:0]ModSecu ... show more [MonJun1507:12:04.7737172026][security2:error][pid3788818:tid3788895][client209.50.190.138:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"craniosacraltherapy.ch\"][uri\"/wp-login.php\"][unique_id\"ai-JpLQIlTpZI9ViNxFyIgAAAE4\"]\,referer:https://craniosacraltherapy.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-06-13 08:14:06 (5 days ago)	Wordfence waf block on parsol	Web App Attack
🇬🇷 setupgr	2026-06-13 05:20:44 (5 days ago)	(mod_security) mod_security (id:900001) triggered by 209.50.190.138: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 209.50.190.138: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 08:20:43.164515 2026] [security2:error] [pid 617818:tid 617867] [client 209.50.190.138:12629] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: ions.gr"] [severity "CRITICAL"] [tag "security"] [hostname "ions.gr"] [uri "/wp-login.php"] [unique_id "aizoq7W1jJCSQWbpQzaewQAAAFM"], referer: https://ions.gr/wp-login.php show less	Port Scan
🇲🇹 Malta	2026-06-11 22:56:15 (6 days ago)	209.50.190.138 - - [12/Jun/2026:00:56:15 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubu ... show more 209.50.190.138 - - [12/Jun/2026:00:56:15 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-10 02:13:30 (1 week ago)	(y4) Failed scan -byebye- from 209.50.190.138 (FR/France/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-06-03 12:07:22 (2 weeks ago)	(y4) Failed scan -byebye- from 209.50.190.138 (FR/France/-): (CF_ENABLE)	Hacking
🇺🇸 mnsf	2026-05-28 23:06:19 (2 weeks ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-05-27 23:31:18 (3 weeks ago)	[Thu May 28 09:31:17.298071 2026] [security2:error] [pid 503744] [client 209.50.190.138:17083] [clie ... show more [Thu May 28 09:31:17.298071 2026] [security2:error] [pid 503744] [client 209.50.190.138:17083] [client 209.50.190.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/wp-config.inc"] [unique_id "ahd-xXMb_BRBSrJwmG0sGgAAABI"] ... show less	Web App Attack
Anonymous	2025-11-14 15:32:37 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/14 09:30:23	Port Scan Brute-Force Exploited Host Web App Attack
🇦🇺 AWW-Admin	2025-10-16 16:12:11 (8 months ago)	(wordpress) Failed wordpress login from 209.50.190.138 (FR/France/-)	Brute-Force

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 154.83.197.15

🇮🇩 182.8.98.99

🇹🇭 159.192.144.204

🇫🇮 147.185.133.113

🇧🇷 137.131.208.99

🇨🇦 85.217.149.7

🇺🇸 66.132.224.223

🇺🇸 50.46.141.125

🇳🇱 45.142.193.18

🇺🇸 18.218.118.203

🇩🇪 4.182.219.135

🇭🇰 223.197.153.135

🇧🇷 205.210.31.199

🇳🇱 154.86.119.60

🇩🇪 143.20.37.59

🇩🇪 77.90.60.98

🇳🇱 77.83.39.197

🇳🇱 45.142.193.118

🇺🇸 34.24.10.1

🇳🇱 185.99.99.95