JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

206.204.51.66

Neutral Activity

Abuse confidence score ?

0% Low Risk

16 reports

10 reporters · latest 6 months ago

ISP	HostRoyale Technologies Pvt Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS207990
Domain Name	hostroyale.com
Country	🇺🇸 United States of America
City	Wilmington, Delaware

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

206.204.51.66 has been reported 16 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 206.204.51.66

Export CSV

This IP address has been reported a total of 16 times from 10 distinct sources. 206.204.51.66 was first reported on June 5th 2023, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-03-24 01:40:12 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇹🇷 jacobjanse	2026-03-04 06:31:00 (7 months ago)		Web App Attack
🇺🇸 ChamberofCommerce.com	2026-02-20 13:04:05 (7 months ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-07 06:05:26 (8 months ago)	(mod_security) mod_security (id:248270) triggered by 206.204.51.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:248270) triggered by 206.204.51.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 01:05:16.510263 2026] [security2:error] [pid 28754:tid 28754] [client 206.204.51.66:33779] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?\|rmi\|dns\|iiop\|nis\|nds\|corba\|\\\\$\\\\{(?:lower\|upper)):" at REQUEST_HEADERS:X-Api-Version. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j\|\|houston-church-of-god.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "houston-church-of-god.org"] [uri "/"] [unique_id "aYbWHI96ffUx_WmG4RiACAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 skycodee	2025-10-05 12:49:25 (1 year ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack
🇨🇳 ThreatBook.io	2025-04-14 01:44:33 (1 year ago)	ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/206.204.51.66 2025-04-13 23: ... show more ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/206.204.51.66 2025-04-13 23:51:36 /?locale=locale%3Dde-DE&cda'%22%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E show less	Web App Attack
🇺🇸 TPI-Abuse	2024-11-10 01:44:13 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 206.204.51.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:221260) triggered by 206.204.51.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 20:44:04.661818 2024] [security2:error] [pid 5196:tid 5196] [client 206.204.51.66:38945] [client 206.204.51.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\$\\\$\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|anenchantingevening.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anenchantingevening.com"] [uri "/"] [unique_id "ZzAP5CEmTEVzMpIUWaSwbwAAAAI"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-17 19:32:27 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 206.204.51.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 206.204.51.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 17 15:32:22.146649 2024] [security2:error] [pid 15503:tid 47453213824768] [client 206.204.51.66:33601] [client 206.204.51.66] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gafm.org\|F\|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gafm.org"] [uri "/www.GAFM.com"] [unique_id "ZfdFRicRLu3vgVpAB5-NrwAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-03-03 02:45:03 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 VSM Networks	2023-11-06 00:38:20 (2 years ago)	Credential Stuffing	Brute-Force
Anonymous	2023-06-28 17:13:24 (3 years ago)	credential stuffing attack	Hacking Brute-Force
Anonymous	2023-06-28 17:13:24 (3 years ago)	credential stuffing attack	Hacking Brute-Force
Anonymous	2023-06-28 17:13:24 (3 years ago)	credential stuffing attack	Hacking Brute-Force
Anonymous	2023-06-28 17:13:24 (3 years ago)	credential stuffing attack	Hacking Brute-Force
Anonymous	2023-06-28 17:13:24 (3 years ago)	credential stuffing attack	Hacking Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 2602:f71d:400::20

🇺🇸 2001:470:2cc:1::22f

🇨🇳 180.184.84.77

🇫🇷 167.86.123.130

🇺🇸 159.203.176.100

🇺🇸 109.105.209.89

🇳🇱 77.91.71.92

🇲🇾 47.250.131.49

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇺🇸 20.106.191.112

🇫🇮 193.187.110.145

🇨🇳 180.184.178.165

🇲🇳 180.149.125.227

🇺🇸 162.216.150.121

🇮🇩 128.14.232.254

🇳🇱 109.160.32.117

🇦🇷 98.97.134.215

🇨🇿 88.100.141.92

🇫🇷 82.233.226.119