JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.184.157

209.50.184.157 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.184.157

Whois 209.50.184.157

IP Abuse Reports for 209.50.184.157:

This IP address has been reported a total of 16 times from 13 distinct sources. 209.50.184.157 was first reported on October 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-06-24 10:21:47 (1 day ago)	Detected by WP fail2ban 2026-06-24T12:21:47.320541+02:00 wordpress: Authentication attempt from 209. ... show more Detected by WP fail2ban 2026-06-24T12:21:47.320541+02:00 wordpress: Authentication attempt from 209.50.184.157 show less	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-06-23 15:12:38 (2 days ago)	(y4) Failed scan -byebye- from 209.50.184.157 (ES/Spain/-): (CF_ENABLE)	Hacking
🇫🇷 pm33	2026-06-17 04:12:39 (1 week ago)	Wordpress login attempts	Brute-Force
🇩🇪 Tha_14	2026-06-12 12:48:17 (1 week ago)	Attempt to log in with non-existing username: root	Bad Web Bot
🇺🇸 Richard Stover	2026-05-31 22:04:37 (3 weeks ago)	User tried to login as "admin."	Web App Attack
🇫🇷 mrcrassi	2026-05-28 23:56:51 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 PeravixGroup	2026-05-06 19:09:18 (1 month ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2025-12-29 00:50:15 (5 months ago)	2025-12-29T02:50:15.433355+02:00 zanati wp(www.sahpa.co.za)[398020]: Blocked authentication attempt ... show more 2025-12-29T02:50:15.433355+02:00 zanati wp(www.sahpa.co.za)[398020]: Blocked authentication attempt for [email protected] from 209.50.184.157 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:17:09 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:17:03.578292 2025] [security2:error] [pid 24085:tid 24085] [client 209.50.184.157:48815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jsw4.net"] [uri "/.svn/wc.db"] [unique_id "aSVX7xtjNal3Ov--9QaRjAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2025-11-25 07:01:36 (7 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:19:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:19:02.305740 2025] [security2:error] [pid 18370:tid 18370] [client 209.50.184.157:40365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.directnic-support.rocks"] [uri "/.git/HEAD"] [unique_id "aSVKVmo4MhXCIjJ1Tbm99AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:25:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:25:25.975535 2025] [security2:error] [pid 21412:tid 21412] [client 209.50.184.157:20939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.meghanmack.com"] [uri "/.git/HEAD"] [unique_id "aSUvtQqHuWY7s9zu5VZ8SQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:18:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.184.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:18:03.860141 2025] [security2:error] [pid 24298:tid 24298] [client 209.50.184.157:30459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rebelhollowfarm.com"] [uri "/.svn/wc.db"] [unique_id "aSUf6xU05EyUGjP4E0-jNAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:41:43 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-11-02 14:08:44 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:48:42	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.243.11.161

🇩🇪 185.243.11.129

🇺🇸 172.233.221.115

🇳🇱 160.119.71.111

🇸🇬 145.223.130.173

🇨🇳 123.14.127.227

🇨🇳 113.57.185.182

🇭🇰 103.243.26.174

🇺🇸 69.46.13.250

🇧🇪 193.104.37.200

🇩🇪 185.243.11.127

🇨🇳 182.242.169.63

🇩🇪 148.153.140.123

🇰🇷 125.141.139.218

🇨🇳 123.245.85.70

🇹🇼 110.25.107.172

🇧🇷 104.28.162.2

🇭🇰 103.230.240.59

🇹🇬 102.64.164.32

🇺🇸 91.230.168.133