JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.181.66

209.50.181.66 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 46%: ?

46%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.181.66

Whois 209.50.181.66

IP Abuse Reports for 209.50.181.66:

This IP address has been reported a total of 14 times from 10 distinct sources. 209.50.181.66 was first reported on October 16th 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-06 04:23:47 (21 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-07-05 06:50:26 (1 day ago)	Wordpress login attempts	Brute-Force
🇫🇮 6kilowatti	2026-07-02 11:54:30 (4 days ago)	209.50.181.66 - - [02/Jul/2026:14:54:26 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6a ... show more 209.50.181.66 - - [02/Jul/2026:14:54:26 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 209.50.181.66 - [02/Jul/2026:14:54:26 +0300] "POST /wp-login.php HTTP/1.1" 404 12288 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" ... show less	Web App Attack
🇩🇪 iNetWorker	2026-07-01 11:06:29 (5 days ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 omc	2026-07-01 03:56:51 (5 days ago)	AH01797: Unauthorized file	Bad Web Bot
🇬🇧 poundawebsiteltd	2026-06-29 21:08:30 (1 week ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 209.50.181.66 - - [29/Jun/2026:22:08:23 +0100] P ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 209.50.181.66 - - [29/Jun/2026:22:08:23 +0100] POST /wp-login.php HTTP/1.1 200 7131 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 ELYAZ	2026-06-29 03:22:25 (1 week ago)	(y4) Failed scan -byebye- from 209.50.181.66 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
🇱🇻 garmtech.com	2025-12-23 10:14:45 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-14.209.50.181.66.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-14.209.50.181.66.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 oncord	2025-12-20 00:47:36 (6 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-24 09:04:40 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:04:34.471379 2025] [security2:error] [pid 23042:tid 23042] [client 209.50.181.66:39813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bienvenueplantation.org"] [uri "/.git/HEAD"] [unique_id "aSQfoqcLAbhosM9US2t0igAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:11:39 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:11:31.460994 2025] [security2:error] [pid 7440:tid 7440] [client 209.50.181.66:9669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquascapes.net"] [uri "/.env"] [unique_id "aSQFI8-T8xydhIT1DWR5mgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:42:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:42:39.915971 2025] [security2:error] [pid 21528:tid 21528] [client 209.50.181.66:21869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.crep-psych.org"] [uri "/.svn/wc.db"] [unique_id "aSPiPw6x2WAKYqDENqFTHAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:41:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.50.181.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:41:07.432184 2025] [security2:error] [pid 7770:tid 7770] [client 209.50.181.66:23021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wordandwisdom.org"] [uri "/.git/HEAD"] [unique_id "aSPT00Q0wVOjI6krnaEXCQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-10-16 16:04:40 (8 months ago)	Form spam	Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 123.16.236.203

🇨🇳 49.235.98.218

🇨🇳 218.207.144.123

🇰🇷 210.114.22.126

🇧🇷 205.210.31.203

🇳🇱 185.223.235.6

🇳🇱 185.93.89.147

🇩🇪 178.27.90.142

🇵🇱 176.53.159.197

🇬🇧 154.16.44.207

🇸🇬 128.242.234.19

🇹🇼 118.194.252.168

🇮🇹 93.67.197.157

🇦🇹 85.124.207.102

🇳🇱 85.11.167.228

🇸🇪 83.177.240.110

🇳🇱 78.142.18.172

🇺🇸 65.49.1.73

🇺🇸 64.62.197.192

🇺🇸 45.194.67.28