JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.51.143

104.207.51.143 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 29%: ?

29%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.51.143

Whois 104.207.51.143

IP Abuse Reports for 104.207.51.143:

This IP address has been reported a total of 137 times from 19 distinct sources. 104.207.51.143 was first reported on June 5th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-28 04:15:35 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-06-27 09:46:38 (2 days ago)	Wordpress login attempts	Brute-Force
🇫🇷 tilellit.pro	2026-06-26 01:35:10 (3 days ago)	Fail2Ban banned 104.207.51.143 for security violations in jail wp-armour. Log: 2026/06/26 01:35:09 [ ... show more Fail2Ban banned 104.207.51.143 for security violations in jail wp-armour. Log: 2026/06/26 01:35:09 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.51.143 \| Target: wplogin" , client: 104.207.51.143, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2026-06-25 18:33:02 (3 days ago)	[server.tmg.gr] httpd-login-spray-site: sites=exarjournal.com; logs=/var/log/httpd/domains/exarjourn ... show more [server.tmg.gr] httpd-login-spray-site: sites=exarjournal.com; logs=/var/log/httpd/domains/exarjournal.com.log; samples=site_wide=true \| distinct_ips=36 \| /wp-login.php show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-02-14 07:06:07 (4 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 16:54:11 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 11:54:05.990054 2026] [security2:error] [pid 21031:tid 21031] [client 104.207.51.143:58513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquanauticsige.com"] [uri "/v2/.git/config"] [unique_id "aYy0LffG0wRd3HSIN0BokAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 16:10:06 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:09:58.800794 2026] [security2:error] [pid 29672:tid 29683] [client 104.207.51.143:23689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "12am.us"] [uri "/admin/.env"] [unique_id "aYtYVmqmJhIz38r7Ayr3LgAAAUg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:26:06 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:26:00.970380 2026] [security2:error] [pid 9037:tid 9037] [client 104.207.51.143:64335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ianadolphus.com"] [uri "/.env.local"] [unique_id "aYqlSOcgOGJsr8Aw1bhBgQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 02:21:13 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:21:06.055117 2026] [security2:error] [pid 28781:tid 28781] [client 104.207.51.143:43709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kim-porter.com"] [uri "/v2/.git/config"] [unique_id "aYqWEhSnUK0a1oKMSUcQYwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-09 22:59:50 (4 months ago)	Auto-ban: >3000 req/min op 2026-02-09	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-09 20:27:53 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:27:49.558361 2026] [security2:error] [pid 10064:tid 10064] [client 104.207.51.143:53801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honer.net"] [uri "/.env"] [unique_id "aYpDReY2l5fF7v6vpba8QQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-09 20:19:38 (4 months ago)	Blocking for trying to access an exploit file: /v2/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-09 20:07:47 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:07:42.408864 2026] [security2:error] [pid 386:tid 386] [client 104.207.51.143:55375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homeschoolwv.com"] [uri "/.env"] [unique_id "aYo-jsmqIlo9YL3MdDAISgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-03 13:41:20 (5 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-21 13:02:22 (6 months ago)	Attempted brute force login to web vpn 55 time(s); last attempt for 2025.12.21 is noted in report ti ... show more Attempted brute force login to web vpn 55 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇳🇱 185.223.235.34

🇨🇳 180.153.236.13

🇩🇪 178.128.207.138

🇻🇳 103.200.23.154

🇨🇦 85.217.149.40

🇺🇸 45.92.229.242

🇺🇸 45.91.45.237

🇳🇵 27.34.64.44

🇮🇶 5.1.110.172

🇬🇧 195.96.139.20

🇨🇦 174.2.245.33

🇺🇸 172.212.200.29

🇺🇸 172.110.223.122

🇺🇸 159.89.83.208

🇮🇳 103.179.51.250

🇮🇳 103.140.19.90

🇱🇹 62.60.130.219

🇸🇬 45.78.194.242

🇳🇴 20.100.192.174