JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.180.132

209.50.180.132 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.180.132

Whois 209.50.180.132

IP Abuse Reports for 209.50.180.132:

This IP address has been reported a total of 13 times from 12 distinct sources. 209.50.180.132 was first reported on October 5th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 oalver	2026-08-30 05:33:01 (1 day ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /xmlrpc.php (HTTP 200). First seen: 2026-08-30. Risk score: 30/100. show less	Web App Attack
🇩🇪 Goetz	2026-08-27 12:06:40 (4 days ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇫🇷 ELYAZ	2026-06-21 10:43:06 (2 months ago)	(y4) Failed scan -byebye- from 209.50.180.132 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
🇩🇪 F242	2026-06-21 07:45:56 (2 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇲🇹 Malta	2026-06-19 11:17:22 (2 months ago)	209.50.180.132 - - [19/Jun/2026:13:17:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 209.50.180.132 - - [19/Jun/2026:13:17:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇬🇷 setupgr	2026-06-19 00:00:57 (2 months ago)	(mod_security) mod_security (id:900001) triggered by 209.50.180.132 (GB/United Kingdom/England/Londo ... show more (mod_security) mod_security (id:900001) triggered by 209.50.180.132 (GB/United Kingdom/England/London/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 03:00:46.798343 2026] [security2:error] [pid 2277:tid 2380] [client 209.50.180.132:61891] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: babis.photo"] [severity "CRITICAL"] [tag "security"] [hostname "babis.photo"] [uri "/wp-login.php"] [unique_id "ajSGrlVjV5VR3hAZ4rmKSAAAAEk"], referer: https://babis.photo/wp-login.php show less	Port Scan
🇬🇧 spamverify.com	2026-06-16 08:41:35 (2 months ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (5 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-01-05 20:27:32 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-27 23:35:09 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 18:35:05.589616 2025] [security2:error] [pid 8265:tid 8265] [client 209.50.180.132:45783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avienhowell.com"] [uri "/.svn/wc.db"] [unique_id "aVBtKcjMgqQCc8epuGaLDgAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 18:38:18 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:38:10.197474 2025] [security2:error] [pid 22685:tid 22685] [client 209.50.180.132:56807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rannals.com"] [uri "/.git/HEAD"] [unique_id "aVAnkl4ijiY2JrzwVsZ5zQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2025-11-06 09:18:27 (9 months ago)	WordPress login attempt	Brute-Force
🇺🇸 oncord	2025-10-05 00:16:11 (10 months ago)	Form spam	Web Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.67.144.125

🇺🇸 172.252.13.101

🇳🇬 102.88.137.80

🇨🇦 75.156.145.235

🇱🇹 62.60.130.253

🇧🇾 46.53.243.47

🇧🇷 45.236.11.89

🇩🇪 196.251.121.151

🇨🇳 106.115.250.105

🇺🇸 104.28.247.220

🇩🇪 43.228.157.168

🇺🇸 43.153.10.83

🇭🇰 199.45.154.117

🇷🇴 193.32.162.84

🇺🇸 164.92.115.22

🇺🇸 162.240.218.183

🇺🇸 134.209.116.251

🇹🇼 118.163.101.39

🇮🇱 79.177.163.89

🇺🇦 176.67.18.173