JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.51.205

104.207.51.205 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.51.205

Whois 104.207.51.205

IP Abuse Reports for 104.207.51.205:

This IP address has been reported a total of 125 times from 13 distinct sources. 104.207.51.205 was first reported on June 8th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 HJ5Ss4Ju	2026-06-18 05:08:52 (2 weeks ago)	Blocked by Wordfence (SID 6)	Web App Attack
🇮🇹 VHosting	2025-12-23 11:24:10 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-02 20:20:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:20:47.363519 2025] [security2:error] [pid 19612:tid 19612] [client 104.207.51.205:28031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sternscape.com"] [uri "/.svn/wc.db"] [unique_id "aS9KHzX_a-cRYVnE0fiFIQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:29:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:29:07.570086 2025] [security2:error] [pid 424356:tid 424492] [client 104.207.51.205:41807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conservativedemocrat.com"] [uri "/.svn/wc.db"] [unique_id "aS6jUyBf8YVKox7fhLdZ2gAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:23:15 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:23:07.888967 2025] [security2:error] [pid 3156:tid 3156] [client 104.207.51.205:14857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "duermaseaprisa.com"] [uri "/.git/HEAD"] [unique_id "aS53uwGQJ8BwHiKhybz5nAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:43:21 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:43:15.638807 2025] [security2:error] [pid 1742:tid 1742] [client 104.207.51.205:37959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.capitalacc.com"] [uri "/.env"] [unique_id "aSUz41HWJdIDzIH7xoetugAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:13:35 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:13:27.075504 2025] [security2:error] [pid 29117:tid 29117] [client 104.207.51.205:20991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aperturecontrols.com"] [uri "/.env"] [unique_id "aSUs5_phEAOJDTO0pkXrtQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:21:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:21:41.615759 2025] [security2:error] [pid 19320:tid 19320] [client 104.207.51.205:57675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.lasertherapyoc.com"] [uri "/.env"] [unique_id "aSUgxcyv3ic0Ih1b34rSBgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:06:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:05:55.320514 2025] [security2:error] [pid 24034:tid 24034] [client 104.207.51.205:51979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jessmay.com"] [uri "/.svn/wc.db"] [unique_id "aSUdE6zrrORQQ3e7qOGQCAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:41:35 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:41:30.668577 2025] [security2:error] [pid 3968:tid 3968] [client 104.207.51.205:59451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jtdieselparts.mainstreetofficesuites.com"] [uri "/.git/HEAD"] [unique_id "aSUXWkJl8-fR9MK8ynvKYwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:54:46 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:54:43.179654 2025] [security2:error] [pid 3765:tid 3765] [client 104.207.51.205:41243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.markgiffin.com"] [uri "/.svn/wc.db"] [unique_id "aSUMY0uKOp76DuiTkAUl4wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-25 00:35:02 (7 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
Anonymous	2025-10-11 03:25:41 (8 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 18:02:16 (8 months ago)	Attempted brute force login to web vpn 89 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 89 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 23:30:18 (8 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.170.192.251

🇹🇭 202.29.225.158

🇿🇦 185.132.186.74

🇱🇹 62.60.130.219

🇺🇸 44.219.112.162

🇬🇧 198.244.183.183

🇳🇱 185.242.226.9

🇺🇸 104.167.25.42

🇱🇹 45.227.254.170

🇬🇧 5.252.83.30

🇺🇸 162.216.150.31

🇺🇸 144.126.148.3

🇹🇭 110.49.6.37

🇺🇸 98.88.249.38

🇫🇷 85.217.140.40

🇦🇹 85.124.207.102

🇧🇷 45.205.1.246

🇺🇸 44.54.59.156

🇭🇰 20.24.211.57

🇲🇽 187.191.48.23