AbuseIPDB » 209.50.191.38
209.50.191.38
This IP was reported 9 times. Confidence of
Abuse
is 25% : ?
ISP
3xK Tech GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200373
Domain Name
3xktech.cloud
Country
🇩🇪
Germany
City
Berlin, State of Berlin
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 209.50.191.38 :
This IP address has been reported a total of
9
times from
5 distinct
sources.
209.50.191.38 was first reported on
November 1st 2025 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
ELYAZ
2026-06-17 09:42:10
(2 days ago)
(y4) Failed scan -byebye- from 209.50.191.38 (FR/France/-): (CF_ENABLE)
Hacking
🇬🇷
setupgr
2026-06-16 22:55:08
(2 days ago)
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 01:55:07.340123 2026] [security2:error] [pid 2210176:tid 2210261] [client 209.50.191.38:14571] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: asteriassantorini.com"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "ajHUS40pb6dkgQfaMdDSAQAAAQg"], referer: https://asteriassantorini.com/wp-login.php
show less
Port Scan
🇫🇷
pm33
2026-06-16 17:38:59
(2 days ago)
Wordpress login attempts
Brute-Force
🇬🇷
setupgr
2026-06-15 22:06:24
(3 days ago)
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 01:06:23.462750 2026] [security2:error] [pid 1965768:tid 1965818] [client 209.50.191.38:36107] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.ions.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.ions.gr"] [uri "/wp-login.php"] [unique_id "ajB3X5hSggell5vQAURiYwAAAVc"], referer: https://mail.ions.gr/wp-login.php
show less
Port Scan
🇩🇪
LRob.fr
2026-06-14 14:00:05
(4 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-06-12 15:02:37
(6 days ago)
(y4) Failed scan -byebye- from 209.50.191.38 (FR/France/-): (CF_ENABLE)
Hacking
🇬🇷
setupgr
2026-06-12 14:31:08
(6 days ago)
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 17:31:06.425805 2026] [security2:error] [pid 326864:tid 326899] [client 209.50.191.38:13899] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-login.php"] [unique_id "aiwYKsuFnDrX8qeXldOAhwAAAMg"], referer: https://mail.doityourself.gr/wp-login.php
show less
Port Scan
🇬🇷
setupgr
2026-06-12 06:57:25
(1 week ago)
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:900001) triggered by 209.50.191.38: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 09:57:25.185214 2026] [security2:error] [pid 104094:tid 104274] [client 209.50.191.38:61417] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: gyrosplace.gr"] [severity "CRITICAL"] [tag "security"] [hostname "gyrosplace.gr"] [uri "/wp-login.php"] [unique_id "aiut1Vnoc2nF41quz4OrTAAAAQc"], referer: https://gyrosplace.gr/wp-login.php
show less
Port Scan
🇫🇷
applemooz
2025-11-01 11:41:42
(7 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: