JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.4.106.30

51.4.106.30 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 80%: ?

80%

ISP	Microsoft Deutschland MCIO GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 51.4.106.30

Whois 51.4.106.30

IP Abuse Reports for 51.4.106.30:

This IP address has been reported a total of 16 times from 13 distinct sources. 51.4.106.30 was first reported on July 1st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Smish	2026-07-01 16:28:04 (2 hours ago)	HONEYPOT HIT --> Fail2ban time=1782923282 log=2026-07-01T17:28:02+01:00 ip=51.4.106.30 host=89.39.21 ... show more HONEYPOT HIT --> Fail2ban time=1782923282 log=2026-07-01T17:28:02+01:00 ip=51.4.106.30 host=89.39.211.6 method=GET uri="/.env" status=404 ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ref="-" rid=798607ab2b873de4e103918c4bab6961 show less	Web App Attack
🇫🇷 Version Net	2026-07-01 16:27:56 (2 hours ago)	IPS Detection: AndroxGh0st.Malware	Hacking
🇺🇸 Al Coholic	2026-07-01 15:35:15 (3 hours ago)	Detected By Fail2ban	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 14:08:33 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 51.4.106.30 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 51.4.106.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 10:08:29.944135 2026] [security2:error] [pid 27349:tid 27349] [client 51.4.106.30:46730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/.env"] [unique_id "akUfXehpGI1YwITgQ0K_nAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-07-01 13:41:05 (5 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-01 13:40:24.113 \|	Web App Attack
🇺🇸 chronos	2026-07-01 13:25:45 (5 hours ago)	[AUTORAVALT][[01/07/2026 - 10:25:44 -03:00 UTC] Attack from [51.4.106.30] Action: BLocKed Hacking.. ... show more [AUTORAVALT][[01/07/2026 - 10:25:44 -03:00 UTC] Attack from [51.4.106.30] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions. ] ... show less	Hacking Web App Attack
🇺🇸 Power Ca	2026-07-01 13:21:37 (5 hours ago)	51.4.106.30 - - [01/Jul/2026:13:21:36 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Lin ... show more 51.4.106.30 - - [01/Jul/2026:13:21:36 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack Hacking
🇺🇸 cazae	2026-07-01 11:16:18 (7 hours ago)	Unauthorized attempt on debian [80/tcp] Source port: 49002 TTL: 222 Packet length: 40 TOS: 0x00 htt ... show more Unauthorized attempt on debian [80/tcp] Source port: 49002 TTL: 222 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-01 10:27:29 (8 hours ago)	tcp/80 (4 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-07-01 09:36:31 (9 hours ago)	Blocked by UFW (TCP on 80) Source port: 49002 TTL: 225 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 49002 TTL: 225 Packet length: 40 TOS: 0x00 This report (for 51.4.106.30) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 MPL	2026-07-01 09:34:32 (9 hours ago)	tcp/80 (8 or more attempts)	Port Scan
🇩🇪 Yachiyo Runami	2026-07-01 09:00:58 (9 hours ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 234 \| Len: 44B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 234 \| Len: 44B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-07-01T09:00:57Z show less	Port Scan Hacking
🇺🇸 xmission.com	2026-07-01 08:31:38 (10 hours ago)	Blocked by UFW (TCP on 80) Source port: 49002 TTL: 226 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 49002 TTL: 226 Packet length: 40 TOS: 0x00 This report (for 51.4.106.30) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 MPL	2026-07-01 07:39:02 (11 hours ago)	tcp/80 (2 or more attempts)	Port Scan
🇺🇸 gu-alvareza	2026-07-01 07:05:42 (11 hours ago)	AndroxGh0st.Malware	Hacking Exploited Host

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇯 156.0.212.141

🇧🇷 148.227.90.91

🇨🇦 142.44.228.234

🇨🇳 120.48.106.205

🇭🇰 101.36.106.78

🇫🇷 91.196.152.210

🇬🇧 89.37.172.146

🇬🇧 89.37.172.140

🇷🇺 85.234.8.116

🇮🇪 54.229.236.52

🇳🇱 45.74.7.108

🇬🇧 2a06:4880:8000::94

🇸🇬 2404:6800:4003:c1e::127

🇩🇪 212.30.36.12

🇫🇷 185.177.72.24

🇵🇰 153.117.15.128

🇭🇰 121.202.198.98

🇳🇬 102.88.137.213

🇫🇮 80.223.201.173

🇷🇺 77.106.78.215