JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.180.252

209.50.180.252 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.180.252

Whois 209.50.180.252

IP Abuse Reports for 209.50.180.252:

This IP address has been reported a total of 18 times from 9 distinct sources. 209.50.180.252 was first reported on October 3rd 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 koinkash.org	2026-05-23 01:40:10 (2 weeks ago)	They are fraudulent. Malicious threat actor requesting php file /wp-login.php	Web App Attack
🇩🇪 F242	2026-05-22 20:05:20 (2 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇨🇳 ThreatBook.io	2026-04-03 23:35:48 (2 months ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.180.252 2026 ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.180.252 2026-04-03 05:42:11 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-02-16 06:12:56 (3 months ago)	23 attacks on VC URLs, password grabbing URLs, env grabbing URLs: GET /new/.git/config HTTP/1.1 GET ... show more 23 attacks on VC URLs, password grabbing URLs, env grabbing URLs: GET /new/.git/config HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /config/.env HTTP/1.1 show less	Hacking
🇧🇪 voormedia	2026-02-15 05:58:36 (3 months ago)	Accessed trap at '/.git/config'	Web App Attack
🇫🇷 dynamix	2026-02-15 02:31:23 (3 months ago)	Multiple WAF Violations	Web App Attack
🇨🇳 ThreatBook.io	2026-01-27 00:19:04 (4 months ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.180.252 2026 ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/209.50.180.252 2026-01-26 15:10:46 /geoserver/rest.html show less	Web App Attack
🇺🇸 myagent.site	2026-01-15 08:38:48 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇨🇳 ThreatBook.io	2026-01-07 23:50:06 (4 months ago)	2026-01-07 06:01:48 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(* ... show more 2026-01-07 06:01:48 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2026-01-07 02:42:54 /druid/index.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-22 23:56:01 (5 months ago)	2025-12-22 19:28:55 /config/DataSetConfig%23.xml	Web App Attack
🇨🇳 ThreatBook.io	2025-12-19 23:40:41 (5 months ago)	2025-12-19 11:55:54 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(* ... show more 2025-12-19 11:55:54 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-16 23:42:59 (5 months ago)	2025-12-16 21:37:46 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20coun ... show more 2025-12-16 21:37:46 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:46:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:46:05.331240 2025] [security2:error] [pid 23337:tid 23337] [client 209.50.180.252:25557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wailthelifeofbudpowell.com"] [uri "/.svn/wc.db"] [unique_id "aSQNPUmXwySAzdzkP_pP-gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:53:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:53:50.660924 2025] [security2:error] [pid 16944:tid 16944] [client 209.50.180.252:20483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.expertprofessionalcleaners.com"] [uri "/.env"] [unique_id "aSPk3oM4xsOlzoWnULmteAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2025-10-20 23:32:55 (7 months ago)	Form spam	Web Spam

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.255.221.6

🇺🇸 135.119.97.71

🇧🇬 79.124.62.230

🇰🇪 197.248.207.139

🇰🇷 175.198.62.180

🇨🇳 175.43.163.211

🇺🇸 165.154.218.143

🇺🇸 162.216.149.185

🇮🇳 143.110.177.177

🇭🇰 101.36.111.86

🇧🇬 79.124.49.70

🇺🇸 65.49.1.29

🇬🇧 35.203.211.87

🇺🇸 34.123.134.194

🇩🇪 213.176.77.244

🇷🇺 212.22.93.244

🇭🇰 118.193.44.112

🇳🇱 45.148.10.141

🇺🇸 38.72.131.163

🇫🇷 37.59.249.5