JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.51.97

104.207.51.97 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.51.97

Whois 104.207.51.97

IP Abuse Reports for 104.207.51.97:

This IP address has been reported a total of 120 times from 13 distinct sources. 104.207.51.97 was first reported on June 18th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-09 00:44:12 (15 hours ago)	Brute force	Brute-Force
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-01-05 20:05:27 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:15:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:15:23.430629 2025] [security2:error] [pid 18103:tid 18103] [client 104.207.51.97:60659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rantell.net"] [uri "/.svn/wc.db"] [unique_id "aSQUG0n3PsDYosuq7c6J7wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:57:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:53:36.308168 2025] [security2:error] [pid 29632:tid 29632] [client 104.207.51.97:35007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.78cardz.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.env"] [unique_id "aSQPAOxDwLVB8485tZyJuwAAAD8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:17:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:17:27.034273 2025] [security2:error] [pid 23947:tid 23947] [client 104.207.51.97:48783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arizonachristmascards.com"] [uri "/.svn/wc.db"] [unique_id "aSQGh9mkInxUPkee5woH4wAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:59:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:59:29.887498 2025] [security2:error] [pid 24087:tid 24087] [client 104.207.51.97:30625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.4ehardware.net"] [uri "/.env"] [unique_id "aSP0Qc7RY6rEkQ2zx5sJogAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:25:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:24:58.123759 2025] [security2:error] [pid 17002:tid 17002] [client 104.207.51.97:47823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.microbikinitop.com"] [uri "/.git/HEAD"] [unique_id "aSPsKig7oRgfHlQSOLf2UAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:16:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.51.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:16:15.173204 2025] [security2:error] [pid 11561:tid 11561] [client 104.207.51.97:23245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.albrittonmcclain.com"] [uri "/.env"] [unique_id "aSPcD190iw9IqkK_HBhMgwAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2025-10-29 19:09:54 (7 months ago)		Brute-Force Web App Attack
🇦🇺 AWW-Admin	2025-10-29 14:09:36 (7 months ago)	(wordpress) Failed wordpress login from 104.207.51.97 (GB/United Kingdom/-)	Brute-Force
Anonymous	2025-04-06 20:54:31 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 17:07:05 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 22:24:22 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 18:53:06 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4003:c41::126

🇹🇼 198.235.24.94

🇬🇧 185.247.137.28

🇧🇷 177.8.251.130

🇭🇰 172.253.5.21

🇺🇸 162.216.149.79

🇮🇳 103.86.180.10

🇷🇺 94.180.250.11

🇸🇰 91.226.115.123

🇸🇪 79.76.58.113

🇺🇸 66.132.172.206

🇺🇸 45.156.129.46

🇭🇰 35.220.158.192

🇺🇸 20.106.197.7

🇺🇸 216.25.89.105

🇺🇸 195.184.76.129

🇭🇳 181.115.7.203

🇨🇳 115.190.156.119

🇰🇷 59.12.212.38

🇬🇧 193.163.125.133