JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 50.3.182.133

50.3.182.133 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 0%: ?

ISP	ServerHub Warszawa
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	serverhub.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 50.3.182.133

Whois 50.3.182.133

IP Abuse Reports for 50.3.182.133:

This IP address has been reported a total of 146 times from 42 distinct sources. 50.3.182.133 was first reported on November 21st 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 23:24:16 (2 years ago)	Honeypot HIT	Brute-Force
🇳🇱 Linuxmalwarehuntingnl	2024-07-02 07:03:53 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇳🇱 Linuxmalwarehuntingnl	2024-06-28 22:55:03 (2 years ago)	Honeypot HIT	Brute-Force
🇦🇺 MAGIC	2024-06-06 16:08:36 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 NxtGenIT	2024-06-01 16:20:53 (2 years ago)	50.3.182.133 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ... show more 50.3.182.133 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇦🇺 ozisp.com.au	2024-05-28 21:12:20 (2 years ago)	US_Eonix ServerHub_<33>1716930738 [1:2522098:5535] ET TOR Known Tor Relay/Router (Not Exit) Node TCP ... show more US_Eonix ServerHub_<33>1716930738 [1:2522098:5535] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 99 [Classification: Misc Attack] [Priority: 2] {TCP} 50.3.182.133:35470 show less	Open Proxy
🇩🇪 Tha_14	2024-05-28 07:17:47 (2 years ago)	Limit on login attempts is reached	Brute-Force
🇲🇾 Rizzy	2024-05-27 18:41:50 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-05-25 09:29:35 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 50.3.182.133 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 50.3.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 25 05:29:30.807803 2024] [security2:error] [pid 22589:tid 47807800358656] [client 50.3.182.133:40566] [client 50.3.182.133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|fastesttrademark.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fastesttrademark.com"] [uri "/rademark.sql"] [unique_id "ZlGveg6luc-s5w9E9fn54QAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-25 06:04:34 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 50.3.182.133 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 50.3.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 25 02:04:30.678931 2024] [security2:error] [pid 20358] [client 50.3.182.133:38166] [client 50.3.182.133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|hopeforthefuture.africa\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hopeforthefuture.africa"] [uri "/hopefort.sql"] [unique_id "ZlF_biTcSQHF4J6GBinTrAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rsiddall	2024-05-16 17:51:39 (2 years ago)	50.3.182.133 - - [16/May/2024:13:51:36 -0400] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 ( ... show more 50.3.182.133 - - [16/May/2024:13:51:36 -0400] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0" 50.3.182.133 - - [16/May/2024:13:51:39 -0400] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0" ... show less	Brute-Force
🇩🇪 NxtGenIT	2024-05-16 08:55:17 (2 years ago)	50.3.182.133 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ... show more 50.3.182.133 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇩🇪 SpaceHost-Server	2024-05-15 20:40:27 (2 years ago)	50.3.182.133 - - [15/May/2024:22:40:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 ( ... show more 50.3.182.133 - - [15/May/2024:22:40:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" 50.3.182.133 - - [15/May/2024:22:40:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" 50.3.182.133 - - [15/May/2024:22:40:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" show less	Hacking Web App Attack
🇩🇪 OiledAmoeba	2024-05-13 19:15:53 (2 years ago)	50.3.182.133 - - [13/May/2024:21:15:40 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 260 ... show more 50.3.182.133 - - [13/May/2024:21:15:40 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:16.0) Gecko/20100101 Firefox/16.0" "-" 6.240 "-" 50.3.182.133 - - [13/May/2024:21:15:44 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:16.0) Gecko/20100101 Firefox/16.0" "-" 2.511 "-" 50.3.182.133 - - [13/May/2024:21:15:47 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:16.0) Gecko/20100101 Firefox/16.0" "-" 2.437 "-" 50.3.182.133 - - [13/May/2024:21:15:50 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:16.0) Gecko/20100101 Firefox/16.0" "-" 2.445 "-" 50.3.182.133 - - [13/May/2024:21:15:53 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:16.0) Gecko/20100101 Firefox/1 ... show less	Brute-Force
🇦🇺 ozisp.com.au	2024-05-12 03:16:12 (2 years ago)	US_Eonix ServerHub_<33>1715483771 [1:2522098:5520] ET TOR Known Tor Relay/Router (Not Exit) Node TCP ... show more US_Eonix ServerHub_<33>1715483771 [1:2522098:5520] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 99 [Classification: Misc Attack] [Priority: 2] {TCP} 50.3.182.133:37380 show less	Open Proxy

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a10:3c0:100:0:1:2:0:5

🇨🇳 203.132.57.172

🇹🇼 198.235.24.41

🇳🇱 195.178.110.137

🇪🇨 177.53.215.134

🇺🇸 148.59.184.115

🇺🇸 147.185.132.76

🇨🇳 115.204.169.235

🇺🇸 104.28.219.193

🇺🇸 65.49.20.86

🇺🇸 65.49.20.85

🇭🇰 13.70.25.162

🇲🇽 187.145.144.94

🇺🇸 104.143.77.9

🇺🇸 65.49.20.81

🇺🇸 65.49.20.79

🇺🇸 192.0.103.10

🇧🇷 172.71.235.74

🇫🇷 172.70.108.29

🇩🇪 152.53.147.70