JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.75.74.253

51.75.74.253 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 0%: ?

ISP	OVH GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	253.ip-51-75-74.eu
Domain Name	ovh.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 51.75.74.253

Whois 51.75.74.253

IP Abuse Reports for 51.75.74.253:

This IP address has been reported a total of 89 times from 57 distinct sources. 51.75.74.253 was first reported on October 8th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 YF	2026-04-16 04:10:25 (1 month ago)	wp-login.php (Brute force)	Brute-Force Web App Attack
🇺🇸 CMT	2026-04-07 12:59:00 (2 months ago)	5.5.1 - SQL Injection via Double URL Encode Bypass in query string: rest_route=%2Fwc%2Fstore%2Fprod ... show more 5.5.1 - SQL Injection via Double URL Encode Bypass in query string: rest_route=%2Fwc%2Fstore%2Fproducts%2Fcollection-data at show less	Hacking SQL Injection
🇨🇿 ptlab	2026-04-07 12:45:03 (2 months ago)	Detected wp_admin attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 11:56:05 (2 months ago)	(mod_security) mod_security (id:210580) triggered by 51.75.74.253 (253.ip-51-75-74.eu): 1 in the las ... show more (mod_security) mod_security (id:210580) triggered by 51.75.74.253 (253.ip-51-75-74.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 07:56:00.579190 2026] [security2:error] [pid 1225998:tid 1225998] [client 51.75.74.253:60364] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:log_filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|badconsultingllc.com\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:log_filename: ../../../../../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "badconsultingllc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adTw0Lx2A275R-emGx-dugAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-04-07 11:45:05 (2 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-04-07 08:44:56 (2 months ago)	Modsecurity: probe or injection attempt	SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 08:27:39 (2 months ago)	(mod_security) mod_security (id:210580) triggered by 51.75.74.253 (253.ip-51-75-74.eu): 1 in the las ... show more (mod_security) mod_security (id:210580) triggered by 51.75.74.253 (253.ip-51-75-74.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 04:27:36.328411 2026] [security2:error] [pid 863601:tid 863601] [client 51.75.74.253:39534] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:log_filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|arsenalfordemocracy.com\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:log_filename: ../../../../../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "arsenalfordemocracy.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adS_-Dz_3YkUThZwStQGTgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-04-07 06:41:47 (2 months ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
🇩🇪 4server	2026-04-07 06:39:07 (2 months ago)	[TueApr0708:39:02.0260612026][security2:error][pid903966:tid904108][client51.75.74.253:0]ModSecurity ... show more [TueApr0708:39:02.0260612026][security2:error][pid903966:tid904108][client51.75.74.253:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"98\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"alessandrolucchini.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"adSmhm8gH1BDrY3Uts5KvQAAABA\"] show less	Port Scan Brute-Force Web App Attack
🇨🇦 1gz	2026-04-07 06:24:05 (2 months ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-admin/admin-post.php UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-04-07 06:04:56 (2 months ago)	[Tue Apr 07 08:04:01.533241 2026] [authz_core:error] [pid 461977:tid 462136] [client 51.75.74.253:47 ... show more [Tue Apr 07 08:04:01.533241 2026] [authz_core:error] [pid 461977:tid 462136] [client 51.75.74.253:47292] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/admin-post.php [Tue Apr 07 08:04:02.314710 2026] [authz_core:error] [pid 461978:tid 462120] [client 51.75.74.253:47302] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/admin-ajax.php [Tue Apr 07 08:04:46.307987 2026] [authz_core:error] [pid 462162:tid 462206] [client 51.75.74.253:39394] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/admin-ajax.php [Tue Apr 07 08:04:55.361792 2026] [authz_core:error] [pid 461977:tid 462133] [client 51.75.74.253:57492] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/admin-ajax.php ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 01:39:06 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 51.75.74.253 (253.ip-51-75-74.eu): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 51.75.74.253 (253.ip-51-75-74.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 21:39:02.226738 2026] [security2:error] [pid 625634:tid 625634] [client 51.75.74.253:33530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advancedmotorsports.com"] [uri "/wp-admin/admin-post.php"] [unique_id "adRgNts9K3Ov0ngO3_OYYgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-04-07 01:08:46 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇺🇸 nyt	2026-04-07 00:38:17 (2 months ago)	XSS	Web App Attack
🇫🇷 dynamix	2026-04-07 00:08:08 (2 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 82.102.18.190

🇳🇵 27.34.64.35

🇰🇷 3.35.10.187

🇳🇱 195.170.172.128

🇷🇴 193.29.13.164

🇧🇷 177.84.223.59

🇺🇸 162.216.150.166

🇷🇺 87.250.224.15

🇨🇭 81.62.135.233

🇩🇪 45.135.194.10

🇺🇸 35.226.115.94

🇺🇸 20.163.30.205

🇺🇸 205.210.31.5

🇷🇴 193.32.162.16

🇧🇷 185.194.204.183

🇰🇿 176.222.167.33

🇺🇸 162.216.149.242

🇸🇬 152.42.240.74

🇧🇪 128.90.145.17

🇺🇸 107.150.103.12