JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.181.57

209.50.181.57 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.181.57

Whois 209.50.181.57

IP Abuse Reports for 209.50.181.57:

This IP address has been reported a total of 11 times from 8 distinct sources. 209.50.181.57 was first reported on October 27th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 sgofferj	2026-07-03 21:15:15 (14 hours ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 20:48:02 (14 hours ago)	[Jul 3 22:48:01] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:401@154 ... show more [Jul 3 22:48:01] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '209.50.181.57:49411' (callid: a84d9049d9e905aa273c2b29a5c30fe6) - No matching endpoint found [Jul 3 22:48:01] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '209.50.181.57:49411' (callid: a84d9049d9e905aa273c2b29a5c30fe6) - No matching endpoint found ... show less	Brute-Force Port Scan
🇩🇪 iNetWorker	2026-05-21 17:42:27 (1 month ago)	trolling for resource vulnerabilities	Web App Attack
Anonymous	2026-04-27 23:35:13 (2 months ago)	"GET http://webmail./.svn/wc.db HTTP/1.1"	Hacking Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇩🇪 F242	2026-01-30 05:17:00 (5 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:21:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:20:57.156784 2025] [security2:error] [pid 24808:tid 24808] [client 209.50.181.57:23179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.arnoldwell.com"] [uri "/.svn/wc.db"] [unique_id "aSacSV2vxt4y0BnChczeWgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:23:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:23:07.980546 2025] [security2:error] [pid 20265:tid 20265] [client 209.50.181.57:55211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sewacheckbookcover.com"] [uri "/.git/HEAD"] [unique_id "aSaOu55gBOtxkxsha89fegAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:07:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:07:20.026091 2025] [security2:error] [pid 28884:tid 28884] [client 209.50.181.57:59389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aliamus.com"] [uri "/.env"] [unique_id "aSZg2Limwf-Og6JpBCGe2AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:12:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:12:17.379945 2025] [security2:error] [pid 28955:tid 28955] [client 209.50.181.57:32029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.fairfieldfarms.net"] [uri "/.svn/wc.db"] [unique_id "aSQTYW88CKYJlhBYc9t2WQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2025-10-27 09:58:03 (8 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 92.205.210.56

🇰🇷 222.118.170.177

🇩🇪 213.209.159.11

🇻🇳 103.200.22.154

🇰🇿 89.218.247.234

🇺🇸 34.148.150.157

🇺🇸 20.106.49.209

🇷🇴 2.57.121.112

🇰🇷 1.214.214.114

🇯🇵 164.52.120.14

🇺🇸 162.216.149.116

🇺🇸 136.109.108.131

🇨🇳 112.86.225.211

🇨🇳 106.75.237.200

🇺🇸 104.28.201.73

🇺🇸 103.4.21.108

🇷🇴 92.118.39.14

🇨🇳 223.199.168.206

🇩🇪 128.14.225.164

🇸🇬 103.187.146.90