JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.68.45.189

51.68.45.189 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 0%: ?

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	189.ip-51-68-45.eu
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 51.68.45.189

Whois 51.68.45.189

IP Abuse Reports for 51.68.45.189:

This IP address has been reported a total of 49 times from 31 distinct sources. 51.68.45.189 was first reported on March 7th 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 rakkor	2024-02-25 09:49:55 (2 years ago)	2024-02-25T09:49:54+00:00 NAS [Sun Feb 25 09:49:54.263097 2024] [proxy_fcgi:error] [pid 828:tid 1404 ... show more 2024-02-25T09:49:54+00:00 NAS [Sun Feb 25 09:49:54.263097 2024] [proxy_fcgi:error] [pid 828:tid 140478565570240] [client 51.68.45.189:39014] AH01071: Got error 'Primary script unknown', referer: rakkor.uk ... show less	Hacking Brute-Force
🇳🇱 mawan	2024-02-24 15:35:30 (2 years ago)	Suspected of having performed illicit activity on AMS server.	Web App Attack
🇦🇺 weblite	2024-02-24 11:30:12 (2 years ago)	WP_MALWARE_PROBE	Hacking Web App Attack
🇩🇪 _ArminS_	2024-02-22 23:08:12 (2 years ago)	WEB-Scan 48278:80 detected 2024.02.23 00:08:12 blocked until 2024.04.12 18:10:59	Port Scan
🇦🇺 MAGIC	2024-02-22 13:01:05 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇷 JCB	2024-02-21 07:19:00 (2 years ago)	51.68.45.189 - - [20/Feb/2024:23:47:45 +0200] "GET /wp-content/plugins/wordfence/vendor/wordfence/wf ... show more 51.68.45.189 - - [20/Feb/2024:23:47:45 +0200] "GET /wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/rules.key HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇪 taivas.nl	2024-02-20 23:32:04 (2 years ago)	Wordpress_Attack	Web App Attack
🇦🇺 MAGIC	2024-02-20 14:16:49 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-02-20 13:09:16 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the las ... show more (mod_security) mod_security (id:210730) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 20 08:09:10.860299 2024] [security2:error] [pid 23676] [client 51.68.45.189:47758] [client 51.68.45.189] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ubuciko.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ubuciko.com"] [uri "/www/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/rules.key"] [unique_id "ZdSkdvJwlY07D-CHsPgP8QAAABA"], referer: ubuciko.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-02-01 10:20:35 (2 years ago)	Bot / scanning and/or hacking attempts: GET /xmlrpc.php??xmlrpc=1 HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-01-30 09:41:03 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the las ... show more (mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 30 04:40:58.330383 2024] [security2:error] [pid 1121] [client 51.68.45.189:53436] [client 51.68.45.189] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:2825" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.kerrywood.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kerrywood.com"] [uri "/wp-includes/js/tinymce/plugins/wpeditimage/"] [unique_id "ZbjEKlt2lfjNcjgDZ66lbAAAABQ"], referer: www.kerrywood.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-30 06:51:38 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the las ... show more (mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 30 01:51:33.767120 2024] [security2:error] [pid 17810] [client 51.68.45.189:57896] [client 51.68.45.189] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:2825" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|fsh101.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fsh101.com"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/"] [unique_id "ZbicdTIsLIeLLo4cZrFOCwAAAAs"], referer: fsh101.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-30 03:33:13 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the las ... show more (mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 29 22:33:09.876336 2024] [security2:error] [pid 20346] [client 51.68.45.189:44276] [client 51.68.45.189] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:2825" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.bb103.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bb103.us"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/"] [unique_id "Zbht9UZ-wtjBXaMN8fiLngAAAAc"], referer: bb103.us show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-29 21:36:50 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the las ... show more (mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 29 16:36:41.922137 2024] [security2:error] [pid 23374:tid 47569513502464] [client 51.68.45.189:51660] [client 51.68.45.189] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:2825" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.georgementz.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.georgementz.org"] [uri "/wp-includes/js/tinymce/plugins/wpeditimage/"] [unique_id "ZbgaaRycGzNXT2NPGvzOPQAAAI8"], referer: georgementz.org show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-29 10:43:59 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the las ... show more (mod_security) mod_security (id:225080) triggered by 51.68.45.189 (189.ip-51-68-45.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 29 05:43:55.661109 2024] [security2:error] [pid 256366] [client 51.68.45.189:52436] [client 51.68.45.189] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:2825" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.brushmileage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.brushmileage.org"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/"] [unique_id "ZbeBa_fU0eAccPf1_HxB4wAAAAA"], referer: brushmileage.org show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.133.150.18

🇨🇳 120.48.99.236

🇮🇳 103.174.34.49

🇧🇾 37.45.191.229

🇬🇧 2a06:4883:b000::d4

🇩🇪 212.30.36.118

🇧🇷 200.155.76.14

🇰🇷 175.202.26.132

🇸🇬 143.198.210.3

🇻🇳 103.90.226.200

🇲🇬 102.17.236.230

🇺🇿 92.63.205.132

🇮🇷 79.175.176.177

🇳🇱 45.148.10.151

🇧🇷 200.150.115.228

🇳🇱 94.154.43.254

🇷🇺 85.12.200.52

🇸🇬 47.79.207.58

🇨🇴 200.119.85.58

🇸🇪 185.209.199.82