JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.51.228

104.207.51.228 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.51.228

Whois 104.207.51.228

IP Abuse Reports for 104.207.51.228:

This IP address has been reported a total of 127 times from 13 distinct sources. 104.207.51.228 was first reported on June 12th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-22 13:25:24 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-16 22:48:53 (4 weeks ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.51.228 2 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.51.228 2026-05-16 15:59:16 /prod-api/v2/api-docs 2026-05-16 15:59:19 /swagger/docs/v1 2026-05-16 15:59:20 /api/swagger.json 2026-05-16 15:59:20 /v3/api-docs 2026-05-16 15:59:17 /v2/api-docs 2026-05-16 15:59:17 /swagger/v1/swagger.json show less	Web App Attack
🇩🇪 4server	2026-05-13 04:43:33 (1 month ago)	[WedMay1306:43:26.6946672026][security2:error][pid1110675:tid1110791][client104.207.51.228:0]ModSecu ... show more [WedMay1306:43:26.6946672026][security2:error][pid1110675:tid1110791][client104.207.51.228:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".db\"][severity\"ERROR\"][hostname\"schneider-tools.ch\"][uri\"/.svn/wc.db\"][unique_id\"agQBbn1Nf6i1pxAZqcA4TQAAANE\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-05-10 11:46:01 (1 month ago)	[SunMay1013:45:59.4018142026][security2:error][pid3678063:tid3678087][client104.207.51.228:0]ModSecu ... show more [SunMay1013:45:59.4018142026][security2:error][pid3678063:tid3678087][client104.207.51.228:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"giuristifriburgo.ch\"][uri\"/.git/HEAD\"][unique_id\"agBv9043auDAWZRwZFejUwAAANY\"] show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-04-28 22:55:28 (1 month ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.51.228 2026-04-28 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.51.228 2026-04-28 14:54:40 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-19 22:54:46 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.51.228 2026-03-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.51.228 2026-03-19 04:37:55 /nacos/%23/serviceSync 2026-03-19 04:37:54 /.env show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-17 22:45:40 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.51.228 2026-03-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.51.228 2026-03-17 10:09:45 /config/DataSetConfig%23.xml 2026-03-17 03:29:54 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-31 23:05:48 (4 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.51.22 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.51.228 2026-01-31 13:01:15 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2026-01-31 13:01:12 /nacos/v1/cs/ops/derby?sql=select+*+users 2026-01-31 13:01:16 /nacos/v1/auth/users?pageNo=1&pageSize=10 show less	Web App Attack
🇫🇷 LRob.fr	2026-01-29 01:15:02 (4 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-01-05 22:50:33 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.51.22 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.51.228 2026-01-05 22:48:07 /v3/api-docs 2026-01-05 22:48:05 /swagger/docs/v1 2026-01-05 22:48:03 /v2/api-docs 2026-01-05 22:48:06 /api/swagger.json 2026-01-05 22:48:03 /prod-api/v2/api-docs 2026-01-05 22:48:04 /swagger/v1/swagger.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-27 22:49:33 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.51.22 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.51.228 2025-12-27 12:07:09 /Login_files/ 2025-12-27 12:06:24 /images/artDialog/ 2025-12-27 11:53:31 /ubb_threads 2025-12-27 12:07:32 /images/artDialog/ show less	Web App Attack
🇧🇪 madeit	2025-11-04 15:25:07 (7 months ago)		Web App Attack
Anonymous	2025-10-30 13:56:07 (7 months ago)	WordPress Brute Force	Brute-Force
Anonymous	2025-10-11 06:42:07 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 19:28:02 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.85.102.135

🇧🇷 177.155.133.175

🇭🇰 152.32.133.103

🇰🇷 121.165.187.77

🇸🇬 103.250.11.156

🇮🇩 103.190.214.241

🇮🇳 103.54.101.248

🇫🇷 91.238.181.10

🇮🇳 59.180.182.70

🇸🇬 52.237.80.79

🇺🇸 51.81.26.84

🇺🇸 136.118.91.94

🇮🇳 122.170.196.246

🇿🇦 105.233.67.36

🇵🇱 83.168.95.29

🇩🇪 69.5.169.129

🇺🇸 135.237.122.43

🇨🇳 124.222.153.120

🇰🇷 112.216.129.27

🇺🇸 104.252.175.172