JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.180.133

209.50.180.133 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 52%: ?

52%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.180.133

Whois 209.50.180.133

IP Abuse Reports for 209.50.180.133:

This IP address has been reported a total of 24 times from 17 distinct sources. 209.50.180.133 was first reported on October 8th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cwytech	2026-06-25 16:21:45 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
🇫🇮 6kilowatti	2026-06-23 09:37:33 (4 days ago)	209.50.180.133 - - [23/Jun/2026:12:37:33 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6 ... show more 209.50.180.133 - - [23/Jun/2026:12:37:33 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 209.50.180.133 - [23/Jun/2026:12:37:32 +0300] "POST /wp-login.php HTTP/1.1" 404 12288 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 pm33	2026-06-23 08:30:28 (4 days ago)	Wordpress login attempts	Brute-Force
🇫🇷 ELYAZ	2026-06-22 01:44:37 (5 days ago)	(y4) Failed scan -byebye- from 209.50.180.133 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
🇳🇿 billyborsht	2026-06-18 23:29:44 (1 week ago)	2026-06-19T11:29:43.609169+12:00 southern wordpress(temukarau.nz)[1045221]: Authentication attempt f ... show more 2026-06-19T11:29:43.609169+12:00 southern wordpress(temukarau.nz)[1045221]: Authentication attempt for unknown user administrators from 209.50.180.133 ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-06-17 16:17:57 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 ELYAZ	2026-06-17 02:40:15 (1 week ago)	(y4) Failed scan -byebye- from 209.50.180.133 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-06-17 02:18:10 (1 week ago)	209.50.180.133 - - [17/Jun/2026:04:18:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Lin ... show more 209.50.180.133 - - [17/Jun/2026:04:18:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇲🇹 Malta	2026-06-16 00:49:10 (1 week ago)	209.50.180.133 - - [16/Jun/2026:02:49:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 209.50.180.133 - - [16/Jun/2026:02:49:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇬🇷 setupgr	2026-06-12 00:56:26 (2 weeks ago)	(mod_security) mod_security (id:900001) triggered by 209.50.180.133: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 209.50.180.133: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 03:56:24.052569 2026] [security2:error] [pid 52863:tid 53035] [client 209.50.180.133:50335] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: tavernadimitris.com"] [severity "CRITICAL"] [tag "security"] [hostname "tavernadimitris.com"] [uri "/wp-login.php"] [unique_id "aitZOBJWFl-XeyyYvI7AJQAAAM4"], referer: https://tavernadimitris.com/wp-login.php show less	Port Scan
🇦🇺 MAGIC	2026-06-10 01:24:37 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 F242	2026-05-22 20:05:26 (1 month ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇨🇳 ThreatBook.io	2026-05-05 23:24:55 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.180.133 2026-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/209.50.180.133 2026-05-05 07:35:45 /wls-wsat/CoordinatorPortType 2026-05-05 07:35:01 /weblogic/ready 2026-05-05 07:34:56 /console/login/LoginForm.jsp 2026-05-05 07:35:33 /management/tenant-monitoring/servers 2026-05-05 07:35:41 /config/config.xml show less	Web App Attack
🇺🇸 nowyouknow	2025-12-22 19:00:14 (6 months ago)	(From [email protected]) Hi there, Full-time Digital Marketing Assistant for $250/month, ... show more (From [email protected]) Hi there, Full-time Digital Marketing Assistant for $250/month, first month free. Covers SEO, ads, email, social media, and daily marketing tasks. Fill out the form to get started. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSc0j7_PYJOBpCDJqJEYWDUYRLFuf0fN596h51an A8k8Me0efA/viewform?usp=header GLE Link to Google Forms: https://forms.gle/4uj4nBHTiJVQooFA8 Short link: https://shorturl.at/o4IYf show less	Phishing Web Spam
Anonymous	2025-12-04 03:25:33 (6 months ago)	2025-12-04T05:25:33.156177+02:00 zanati wp(www.sahpa.co.za)[383233]: Blocked authentication attempt ... show more 2025-12-04T05:25:33.156177+02:00 zanati wp(www.sahpa.co.za)[383233]: Blocked authentication attempt for [email protected] from 209.50.180.133 ... show less	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.241

🇮🇩 103.186.1.103

🇩🇪 213.209.159.225

🇨🇴 177.253.35.167

🇸🇬 167.71.218.184

🇨🇦 138.197.144.27

🇧🇫 102.179.162.101

🇺🇸 91.230.168.215

🇱🇧 77.246.68.172

🇺🇸 74.7.241.31

🇺🇸 66.132.186.210

🇳🇱 45.148.10.151

🇺🇸 23.95.8.134

🇨🇳 218.25.89.208

🇩🇪 217.154.226.150

🇧🇷 205.210.31.238

🇺🇾 186.53.252.171

🇺🇸 162.216.150.79

🇫🇮 77.95.172.169

🇺🇸 52.234.2.55