JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.51.214

104.207.51.214 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 44%: ?

44%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.51.214

Whois 104.207.51.214

IP Abuse Reports for 104.207.51.214:

This IP address has been reported a total of 129 times from 18 distinct sources. 104.207.51.214 was first reported on June 5th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-22 16:52:49 (1 day ago)	104.207.51.214 - - [22/Jun/2026:18:52:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.207.51.214 - - [22/Jun/2026:18:52:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇷 ELYAZ	2026-06-17 14:05:32 (6 days ago)	(y4) Failed scan -byebye- from 104.207.51.214 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-16 22:21:13 (1 week ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 xmission.com	2026-06-16 20:46:30 (1 week ago)	104.207.51.214 - - [16/Jun/2026:14:46:29 -0600] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 ... show more 104.207.51.214 - - [16/Jun/2026:14:46:29 -0600] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" ... show less	Web App Attack
🇺🇸 lostswordfish.com	2026-06-16 09:48:04 (1 week ago)	Wordfence waf block on wvrsol	Web App Attack
🇳🇿 billyborsht	2026-06-15 00:43:17 (1 week ago)	2026-06-15T12:43:16.098100+12:00 southern wordpress(temukarau.nz)[794050]: Authentication attempt fo ... show more 2026-06-15T12:43:16.098100+12:00 southern wordpress(temukarau.nz)[794050]: Authentication attempt for unknown user [email protected] from 104.207.51.214 ... show less	Hacking Web App Attack
🇬🇷 setupgr	2026-06-12 14:31:08 (1 week ago)	(mod_security) mod_security (id:900001) triggered by 104.207.51.214: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 104.207.51.214: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 17:31:05.956165 2026] [security2:error] [pid 342164:tid 342203] [client 104.207.51.214:22813] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-login.php"] [unique_id "aiwYKRXBVZYB-gAnaREwmgAAAQw"], referer: https://mail.doityourself.gr/wp-login.php show less	Port Scan
🇲🇽 octageeks.com	2026-06-10 04:58:16 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:21:23 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:21:17.237452 2025] [security2:error] [pid 23978:tid 23978] [client 104.207.51.214:31731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.versallis.com"] [uri "/.env"] [unique_id "aSQjjZ1XDA1-ShHU8hsduAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:37:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:37:39.960162 2025] [security2:error] [pid 9335:tid 9335] [client 104.207.51.214:43197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tallahasseepartybuses.com"] [uri "/.git/HEAD"] [unique_id "aSQZUzW9mfjGMXIa0YuUCwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:13:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:13:30.563228 2025] [security2:error] [pid 13569:tid 13569] [client 104.207.51.214:55003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.starktigers75.com"] [uri "/.env"] [unique_id "aSQFmp0O0msI65qmF9WcPAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:01:51 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:01:42.563717 2025] [security2:error] [pid 29563:tid 29563] [client 104.207.51.214:26721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.daniellasinn.com"] [uri "/.svn/wc.db"] [unique_id "aSP0xnrK7FesRGGQn6zzmwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:53:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:53:30.129235 2025] [security2:error] [pid 31355:tid 31355] [client 104.207.51.214:40621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.terrysavastano.com"] [uri "/.env"] [unique_id "aSPkysORP8G97AcIT1hzHQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-07 04:00:14 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 23:58:25 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.152.185.117

🇯🇵 203.25.124.230

🇷🇺 193.37.69.113

🇧🇷 187.50.226.182

🇨🇳 175.9.132.41

🇧🇩 103.131.144.53

🇺🇸 91.230.168.114

🇳🇱 91.92.42.227

🇲🇾 47.254.192.213

🇭🇰 46.247.61.149

🇵🇰 39.63.190.166

🇮🇳 152.59.142.125

🇹🇭 110.77.131.229

🇫🇷 82.102.18.126

🇺🇸 64.62.156.128

🇭🇰 43.155.21.198

🇰🇷 211.253.31.30

🇨🇳 123.158.52.73

🇺🇸 103.143.10.140

🇱🇻 81.30.98.158