JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.180.130

209.50.180.130 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.180.130

Whois 209.50.180.130

IP Abuse Reports for 209.50.180.130:

This IP address has been reported a total of 16 times from 16 distinct sources. 209.50.180.130 was first reported on October 1st 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-05-30 12:18:07 (3 weeks ago)	(y4) Failed scan -byebye- from 209.50.180.130 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
Anonymous	2026-05-26 08:48:29 (3 weeks ago)	[server.tmg.gr] httpd-login-spray-site: sites=add2021.gr; logs=/var/log/httpd/domains/add2021.gr.log ... show more [server.tmg.gr] httpd-login-spray-site: sites=add2021.gr; logs=/var/log/httpd/domains/add2021.gr.log; samples=site_wide=true \| distinct_ips=64 \| /wp-login.php show less	Hacking Web App Attack
🇲🇽 octageeks.com	2026-05-26 04:18:04 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-05-23 15:31:50 (4 weeks ago)	209.50.180.130 - - [23/May/2026:17:31:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 209.50.180.130 - - [23/May/2026:17:31:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 mnsf	2026-02-15 13:05:07 (4 months ago)	Too many Status 40X (12) Scanning/Probing (14)	Brute-Force Web App Attack
🇫🇷 security.yc3a.com	2026-02-15 06:42:24 (4 months ago)	209.50.180.130 - - [15/Feb/2026:06:42:23 +0000] "GET /api/.git/config HTTP/1.1" 403 146 "-" "Mozilla ... show more 209.50.180.130 - - [15/Feb/2026:06:42:23 +0000] "GET /api/.git/config HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Brute-Force Web App Attack
Anonymous	2026-02-15 06:02:03 (4 months ago)	Bot / scanning and/or hacking attempts: GET /app/.git/config HTTP/1.1, GET /backend/.env HTTP/1.1, G ... show more Bot / scanning and/or hacking attempts: GET /app/.git/config HTTP/1.1, GET /backend/.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /backup/.git/config HTTP/1.1, GET /dev/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /api/.env HTTP/1.1, GET /admin/.env HTTP/1.1, GET /.env.save HTTP/1.1, GET /frontend/.env HTTP/1.1, GET /.env.staging HTTP/1.1, GET /admin/.git/config HTTP/1.1, GET /site/.git/config HTTP/1.1, GET /.env HTTP/1.1, GET /wp/.git/config HTTP/1.1, GET /app/.env HTTP/1.1, GET /test/.git/config HTTP/1.1, GET /config/.env HTTP/1.1, GET /v2/.git/config HTTP/1.1, GET /.env.local HTTP/1.1 show less	Hacking Web App Attack
🇫🇮 oh.mg	2026-02-15 05:30:08 (4 months ago)	[Sun Feb 15 06:30:07.564285 2026] [security2:error] [pid 601481:tid 601496] [client 209.50.180.130:6 ... show more [Sun Feb 15 06:30:07.564285 2026] [security2:error] [pid 601481:tid 601496] [client 209.50.180.130:60303] [client 209.50.180.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "ohno.es"] [uri "/new/.git/config"] [unique_id "aZFZ3w0rejbR6xm5fC0nAgAAAAw"] [Sun Feb 15 06:30:07.604765 2026] [security2:error] [pid 601481:tid 601500] [client 209.50.180.130:60303] [client 209.50.180.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [ ... show less	Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-15 04:55:20 (4 months ago)	Blocking for trying to access an exploit file: /frontend/.env	Hacking
Anonymous	2026-02-15 04:35:21 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇫🇷 dynamix	2026-02-15 01:11:55 (4 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:51 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 FeG Deutschland	2025-10-24 20:48:53 (7 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2025-10-14 00:48:07 (8 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇲 176.32.193.16

🇩🇪 213.209.159.56

🇬🇧 213.166.84.45

🇧🇷 205.210.31.186

🇧🇷 205.210.31.185

🇩🇪 195.230.103.245

🇦🇲 178.160.228.254

🇹🇭 171.4.251.155

🇺🇸 153.66.28.132

🇸🇬 43.172.197.173

🇺🇸 208.167.249.178

🇧🇷 205.210.31.173

🇧🇷 205.210.31.172

🇪🇹 196.189.155.89

🇲🇴 182.93.50.90

🇲🇽 177.227.67.90

🇺🇸 162.216.150.117

🇭🇰 118.193.47.155

🇲🇦 105.154.232.151

🇹🇳 102.152.213.146