JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.180.105

209.50.180.105 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 38%: ?

38%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.180.105

Whois 209.50.180.105

IP Abuse Reports for 209.50.180.105:

This IP address has been reported a total of 13 times from 8 distinct sources. 209.50.180.105 was first reported on November 22nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 SilverZippo	2026-07-06 15:05:37 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 dynamix	2026-07-04 18:34:58 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 lostswordfish.com	2026-07-03 18:56:03 (4 days ago)	Wordfence waf block on kcuar	Web App Attack
🇬🇧 poundawebsiteltd	2026-07-02 09:43:09 (5 days ago)	WP Exploit attempt. Evidence: Automated block: Evidence found in system journals but could not be pa ... show more WP Exploit attempt. Evidence: Automated block: Evidence found in system journals but could not be parsed. show less	Web App Attack
🇬🇧 poundawebsiteltd	2026-07-01 13:19:53 (6 days ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 209.50.180.105 - - [01/Jul/2026:14:19:47 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 209.50.180.105 - - [01/Jul/2026:14:19:47 +0100] POST /wp-login.php HTTP/1.1 200 7349 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 omc	2026-07-01 03:55:35 (1 week ago)	AH01797: Unauthorized file	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-27 21:10:35 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:51:49 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:51:29.839328 2025] [security2:error] [pid 19204:tid 19204] [client 209.50.180.105:21319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.crochetfreepatterns.com"] [uri "/.env"] [unique_id "aSQOgV-77IOAluzzqLZFlAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:42:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:42:14.356645 2025] [security2:error] [pid 26528:tid 26528] [client 209.50.180.105:26933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.themedecade.com"] [uri "/.env"] [unique_id "aSP-RkoLueQboi2cI5JQcQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:48:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:48:24.299116 2025] [security2:error] [pid 4133561:tid 4133572] [client 209.50.180.105:30119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.acps.aafm.us"] [uri "/.svn/wc.db"] [unique_id "aSPxqM6lE8qghk7QOEU2lwAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:31:23 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:31:18.750834 2025] [security2:error] [pid 13253:tid 13253] [client 209.50.180.105:44407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nedelam.com"] [uri "/.svn/wc.db"] [unique_id "aSPtpsGg7-UGJj4qwOeuzAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:33:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:44.750435 2025] [security2:error] [pid 1735:tid 1735] [client 209.50.180.105:12257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.midiowagymnastics.com"] [uri "/.svn/wc.db"] [unique_id "aSPf7Grfr6vN5QvudYxBEwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-22 07:48:34 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.156

🇬🇧 188.240.59.12

🇵🇱 176.53.159.197

🇺🇸 172.70.94.88

🇺🇸 89.117.172.63

🇩🇪 88.214.25.136

🇺🇸 71.27.86.44

🇺🇸 66.132.224.232

🇬🇧 45.133.173.201

🇺🇸 45.131.194.143

🇨🇳 39.130.125.161

🇳🇱 34.34.103.195

🇹🇳 197.1.117.113

🇦🇷 186.64.71.37

🇸🇬 162.158.108.131

🇩🇪 147.90.209.42

🇰🇷 118.37.214.187

🇸🇮 102.220.160.42

🇹🇷 94.154.43.192

🇷🇴 92.118.39.71