JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.51.42

104.207.51.42 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.51.42

Whois 104.207.51.42

IP Abuse Reports for 104.207.51.42:

This IP address has been reported a total of 130 times from 14 distinct sources. 104.207.51.42 was first reported on June 5th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-04-14 13:59:26 (1 month ago)	[TueApr1415:59:20.4214272026][security2:error][pid3541319:tid3541340][client104.207.51.42:0]ModSecur ... show more [TueApr1415:59:20.4214272026][security2:error][pid3541319:tid3541340][client104.207.51.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"345\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"giuristifriburgo.ch\"][uri\"/xmlrpc.php\"][unique_id\"ad5IOBhChVFVB1NXTVfXUAAAARM\"] show less	Hacking Web App Attack
🇨🇭 backslash	2025-12-07 12:40:06 (6 months ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇺🇸 TPI-Abuse	2025-11-26 06:23:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:23:00.227510 2025] [security2:error] [pid 8103:tid 8103] [client 104.207.51.42:59505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.redvers.net"] [uri "/.svn/wc.db"] [unique_id "aSacxO6TWgvadRZA8DFVIgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:00:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:00:27.133002 2025] [security2:error] [pid 18718:tid 18718] [client 104.207.51.42:41077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.redlitephotos.com"] [uri "/.svn/wc.db"] [unique_id "aSaJa3gMVuf4xT6dTyfzPQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:24:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:23:57.447746 2025] [security2:error] [pid 15938:tid 15956] [client 104.207.51.42:48063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.williampower.com"] [uri "/.svn/wc.db"] [unique_id "aSQkLYaBygiwvlm31vh85wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:17:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:16:55.570275 2025] [security2:error] [pid 27581:tid 27581] [client 104.207.51.42:55891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.quantumacceleration.org"] [uri "/.svn/wc.db"] [unique_id "aSQUd2EF8Y6w9oW9PnC4zAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:17:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:17:35.657798 2025] [security2:error] [pid 26650:tid 26650] [client 104.207.51.42:35621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.qualuedata.com"] [uri "/.env"] [unique_id "aSQGjwdZU5gyqbV5AU6omQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:52:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:51:42.824035 2025] [security2:error] [pid 31317:tid 31317] [client 104.207.51.42:60411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.antoniocobo.com"] [uri "/.git/HEAD"] [unique_id "aSPkXltEtNtzBdYoZUK_5gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 02:35:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:34:57.286974 2025] [security2:error] [pid 31581:tid 31581] [client 104.207.51.42:19245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tienda.vientodelevante.es"] [uri "/.svn/wc.db"] [unique_id "aSPEURWjXQVRvIESukD42AAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-20 10:29:27 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-29.104.207.51.42.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-29.104.207.51.42.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 ps-center	2025-10-18 02:12:45 (7 months ago)	ABV-W: TCP-Scanner. Port: 22	Port Scan
Anonymous	2025-04-07 11:29:25 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 22:36:49 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 18:59:59 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 17:54:58 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 195.85.201.111

🇺🇿 194.93.24.187

🇨🇳 182.244.5.153

🇸🇬 178.128.18.100

🇫🇮 147.185.133.231

🇨🇳 117.188.20.111

🇸🇬 89.213.153.11

🇺🇸 66.132.195.74

🇺🇸 57.151.86.242

🇩🇪 34.40.82.89

🇻🇪 201.249.192.30

🇭🇰 185.239.85.154

🇨🇳 182.243.67.102

🇰🇷 182.217.16.126

🇺🇸 172.93.106.153

🇫🇮 147.185.133.196

🇺🇸 107.172.123.245

🇸🇬 97.74.82.96

🇷🇺 95.165.130.8

🇺🇸 66.132.224.238