JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.38.187.112

51.38.187.112 was found in our database!

This IP was reported 203 times. Confidence of Abuse is 52%: ?

52%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-66241019.vps.ovh.net
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 51.38.187.112

Whois 51.38.187.112

IP Abuse Reports for 51.38.187.112:

This IP address has been reported a total of 203 times from 52 distinct sources. 51.38.187.112 was first reported on March 28th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-19 13:37:02 (8 hours ago)	Web App Attack	Web App Attack
🇮🇹 A000Z	2026-06-18 22:58:24 (22 hours ago)	Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-18 04:10:03 (1 day ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-16 11:49:38 (3 days ago)	(mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 14:49:35.929991 2026] [security2:error] [pid 2210176:tid 2210261] [client 51.38.187.112:40596] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-66241019.vps.ovh.net"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2020/01/911-%CE%A09-%CE%A06-%CE%95%CE%A5%CE%A1%CE%A9%CE%A4%CE%91%CE%A3-2.jpg"] [unique_id "ajE4T40pb6dkgQfaMdByOQAAAQg"] show less	Port Scan
🇬🇷 setupgr	2026-06-13 06:12:29 (6 days ago)	(mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 09:12:28.431323 2026] [security2:error] [pid 568461:tid 568566] [client 51.38.187.112:46076] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-66241019.vps.ovh.net"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/pet-store01-e1562745455189.jpg"] [unique_id "aiz0zC6u4wBYKeZ3kF65nAAAAMM"] show less	Port Scan
🇫🇷 Sklurk	2026-06-11 14:52:40 (1 week ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-11 14:07:06 (1 week ago)	(mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 17:07:05.518602 2026] [security2:error] [pid 2152061:tid 2152249] [client 51.38.187.112:39954] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-66241019.vps.ovh.net"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%B5%CF%80%CE%B1%CE%B3%CE%B3%CE%B5%CE%BB%CE%BC%CE%B1%CF%84%CE%B9%CE%BA%CE%BF%CE%AF_%CF%87%CF%8E%CF%81%CE%BF%CE%B9/%CE%B3%CF%81%CE%B1%CF%86%CE%B5%CE%AF%CE%BF-%CF%83%CF%8D%CE%BD%CE%B8%CE%B5%CF%83%CE%B7-52/"] [unique_id "airBCb6g179B6nG0Xi7ttgAAAQ8"] show less	Port Scan
🇮🇹 A000Z	2026-06-10 22:14:46 (1 week ago)	Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 show less	Bad Web Bot
🇬🇷 setupgr	2026-06-10 21:36:35 (1 week ago)	(mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 00:36:31.873602 2026] [security2:error] [pid 1859174:tid 1859372] [client 51.38.187.112:47688] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-66241019.vps.ovh.net"] [hostname "babis.photo"] [uri "/wp-content/uploads/2021/09/at-Agia-Paraskeui-neighborhood2.jpg"] [unique_id "ainY3_XgkX-T0UDyoqX6PgAAAMg"] show less	Port Scan
🇬🇷 setupgr	2026-06-10 19:48:12 (1 week ago)	(mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 51.38.187.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 10 22:48:08.324609 2026] [security2:error] [pid 1859174:tid 1859387] [client 51.38.187.112:41720] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-66241019.vps.ovh.net"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%B5%CF%80%CE%B1%CE%B3%CE%B3%CE%B5%CE%BB%CE%BC%CE%B1%CF%84%CE%B9%CE%BA%CE%BF%CE%AF_%CF%87%CF%8E%CF%81%CE%BF%CE%B9/reception-3/"] [unique_id "aim_ePXgkX-T0UDyoqXwrQAAAMw"] show less	Port Scan
🇩🇪 HandyTreff.de	2026-06-10 01:52:15 (1 week ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -86.275 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -86.275 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇬🇧 adnscom.net	2026-05-31 22:57:53 (2 weeks ago)	IPS trigger: Brute force WebApp/CMS scanning/attack	Brute-Force Web App Attack
🇮🇹 A000Z	2026-05-31 01:23:34 (2 weeks ago)	Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-05-28 19:52:00 (3 weeks ago)	Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 51.38.187.112 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-28 00:24:07 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 51.38.187.112 (vps-66241019.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 51.38.187.112 (vps-66241019.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 20:24:01.227713 2026] [security2:error] [pid 4746:tid 4746] [client 51.38.187.112:45154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.med-engineering.com\|F\|2"] [data ".doxycycline.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/www.doxycycline.com"] [unique_id "aheLIePUsUr55YUBB-AinAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 203 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 194.5.82.164

🇮🇳 139.59.36.109

🇧🇷 205.210.31.217

🇹🇼 198.235.24.107

🇧🇷 189.127.172.48

🇮🇩 163.7.3.154

🇨🇴 152.200.181.42

🇹🇷 95.173.172.200

🇳🇱 45.153.34.195

🇺🇸 44.106.118.227

🇺🇸 192.34.128.202

🇵🇪 161.132.50.236

🇺🇸 138.197.200.106

🇺🇸 44.17.12.174

🇧🇪 34.78.189.165

🇮🇩 103.153.190.105

🇳🇱 91.92.40.27

🇳🇱 91.92.40.4

🇺🇸 44.90.188.217

🇺🇸 23.234.88.149