JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.190.50

209.50.190.50 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.190.50

Whois 209.50.190.50

IP Abuse Reports for 209.50.190.50:

This IP address has been reported a total of 13 times from 9 distinct sources. 209.50.190.50 was first reported on October 8th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-07 17:50:21 (8 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 05:29:06 (2 weeks ago)	Web App Attack	Web App Attack
🇩🇪 LRob	2026-06-22 15:00:41 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 SwinT	2026-03-15 22:00:13 (3 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 myagent.site	2026-01-15 08:38:41 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2026-01-14 20:00:58 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.190.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.190.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 15:00:52.954378 2026] [security2:error] [pid 26997:tid 26997] [client 209.50.190.50:23959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flydarkestdays.com"] [uri "/.env"] [unique_id "aWf19Lav6tQDIO6M7xe7fwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mind5t0rm	2025-12-04 21:52:03 (7 months ago)	(WPLOGIN) WP Login Attack 209.50.190.50 (FR/France/-): 3 in the last 3600 secs; Ports: ; Direction: ... show more (WPLOGIN) WP Login Attack 209.50.190.50 (FR/France/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 209.50.190.50 - - [05/Dec/2025:04:51:52 +0700] "GET /wp-login.php HTTP/1.1" 200 2483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 209.50.190.50 - - [05/Dec/2025:04:51:56 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/1.1" 200 2483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 209.50.190.50 - - [05/Dec/2025:04:51:58 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/1.1" 200 2594 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	Port Scan
🇺🇸 TPI-Abuse	2025-11-27 21:49:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.190.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.190.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:48:57.606946 2025] [security2:error] [pid 12665:tid 12665] [client 209.50.190.50:59817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gasoilliquidsdaily.com"] [uri "/.env"] [unique_id "aSjHSZ0a19dkFzHbgMSiGgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:08:57 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.190.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.190.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:08:50.996874 2025] [security2:error] [pid 29461:tid 29461] [client 209.50.190.50:55931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djcommodore.com"] [uri "/.git/HEAD"] [unique_id "aSUr0h9BFqD8Dbs_XN8X7gAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-21 19:54:08 (7 months ago)	(From [email protected]) Interested in driving visitors to nwchiro.ne ... show more (From [email protected]) Interested in driving visitors to nwchiro.net? Start your Free Trial. show less	Phishing Web Spam
🇩🇪 bsoft.de	2025-10-16 06:28:49 (8 months ago)	209.50.190.50 - - [16/Oct/2025:08:28:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 ... show more 209.50.190.50 - - [16/Oct/2025:08:28:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 209.50.190.50 - - [16/Oct/2025:08:28:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Linux; Android 4.4.2; G735-L03 Build/HuaweiG735-L03) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36" 209.50.190.50 - - [16/Oct/2025:08:28:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)" show less	Web App Attack
🇱🇻 garmtech.com	2025-10-09 05:54:25 (8 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-54.209.50.190.50.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-54.209.50.190.50.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 nowyouknow	2025-10-08 21:02:00 (8 months ago)	(From [email protected]) 3 clicks instead of 30 tools. Delegate the grind to AI and keep the p ... show more (From [email protected]) 3 clicks instead of 30 tools. Delegate the grind to AI and keep the profit https://www.youtube.com/watch?v=GY1x2NWs9EA show less	Phishing Web Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 51.195.244.247

🇳🇱 195.178.110.137

🇦🇷 190.228.33.44

🇺🇦 188.163.2.86

🇨🇱 181.226.217.235

🇩🇪 167.94.145.20

🇺🇸 165.232.61.133

🇺🇸 162.216.150.141

🇺🇸 162.215.219.73

🇭🇰 152.32.172.177

🇨🇦 142.68.146.221

🇺🇸 142.54.239.4

🇯🇵 101.33.55.172

🇹🇷 94.154.43.36

🇹🇷 87.232.127.53

🇫🇮 86.54.25.235

🇩🇪 69.5.169.4

🇺🇸 66.132.195.29

🇺🇸 66.132.172.120

🇺🇸 64.62.156.59