JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.180.8

209.50.180.8 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.180.8

Whois 209.50.180.8

IP Abuse Reports for 209.50.180.8:

This IP address has been reported a total of 25 times from 9 distinct sources. 209.50.180.8 was first reported on October 30th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-06 04:21:47 (11 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 lostswordfish.com	2026-06-29 06:54:03 (1 week ago)	Wordfence waf block on ncrsol	Web App Attack
🇲🇽 octageeks.com	2026-06-29 04:13:46 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 raph	2026-06-28 05:03:24 (1 week ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-06-18 04:23:22 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-02-25 13:47:29 (4 months ago)	wordpress-trap	Web App Attack
🇺🇸 mnsf	2026-02-19 06:05:39 (4 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 05:22:18 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:22:09.805208 2026] [security2:error] [pid 19319:tid 19319] [client 209.50.180.8:55479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kristencorley.com"] [uri "/v2/.git/config"] [unique_id "aZaeAQvapgAe-1pxAfDvqgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 04:30:50 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:30:44.256995 2026] [security2:error] [pid 28658:tid 28658] [client 209.50.180.8:9145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmp.net"] [uri "/api/.git/config"] [unique_id "aZaR9OgwdPCOWcjFwB_1wQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 19:57:07 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:57:02.415068 2026] [security2:error] [pid 10568:tid 10570] [client 209.50.180.8:58729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "touficcorban.com"] [uri "/.env.staging"] [unique_id "aZYZjjPb9ffriGsP2Z6bnQAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 12:04:39 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:04:33.933525 2026] [security2:error] [pid 1193564:tid 1193564] [client 209.50.180.8:46761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watermarks.info"] [uri "/backend/.env"] [unique_id "aZWq0VbWqdqS0qOvHyTi9gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 11:44:26 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:44:17.193020 2026] [security2:error] [pid 20930:tid 20930] [client 209.50.180.8:42349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wallpaperpro.com"] [uri "/admin/.env"] [unique_id "aZWmERQiUd9TQ2KLwQXztwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:24:46 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:24:39.690314 2026] [security2:error] [pid 2269:tid 2269] [client 209.50.180.8:57093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirbyimc.com"] [uri "/test/.git/config"] [unique_id "aYqk96D_UxMKR6VAG4f1dQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:37:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:37:46.950475 2026] [security2:error] [pid 21144:tid 21144] [client 209.50.180.8:24981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kevintheadventurer.org"] [uri "/backup/.git/config"] [unique_id "aYp92qa3VV1aH9XzrHfMoAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:24:43 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 209.50.180.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:24:34.612437 2026] [security2:error] [pid 26299:tid 26299] [client 209.50.180.8:12967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keidar.com"] [uri "/site/.git/config"] [unique_id "aYpssvgQdns-oL8H9udW0QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 181.115.171.89

🇵🇱 176.53.159.197

🇮🇩 163.7.6.114

🇧🇷 205.210.31.235

🇧🇷 205.210.31.208

🇹🇷 195.175.89.90

🇺🇸 147.78.182.204

🇺🇸 147.78.180.73

🇺🇸 138.74.191.64

🇨🇳 114.139.135.11

🇱🇺 64.89.161.91

🇺🇸 205.210.31.48

🇺🇸 167.99.11.20

🇩🇪 152.53.152.101

🇸🇬 118.26.111.107

🇸🇬 103.189.234.85

🇫🇮 94.183.216.26

🇩🇪 91.217.249.67

🇨🇦 85.217.149.13

🇳🇱 45.148.10.147