JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.8.121.165

51.8.121.165 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 53%: ?

53%

ISP	Microsoft Deutschland MCIO GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 51.8.121.165

Whois 51.8.121.165

IP Abuse Reports for 51.8.121.165:

This IP address has been reported a total of 50 times from 37 distinct sources. 51.8.121.165 was first reported on October 10th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-25 21:59:11 (18 hours ago)	Auto-ban: >3000 req/min op 2026-07-25	Web App Attack SSH Hacking
🇺🇸 xmission.com	2026-07-25 09:24:35 (1 day ago)	Blocked by UFW (TCP on 2083) Source port: 2186 TTL: 46 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 2083) Source port: 2186 TTL: 46 Packet length: 60 TOS: 0x00 This report (for 51.8.121.165) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-25 08:40:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 51.8.121.165 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 51.8.121.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 04:40:03.088060 2026] [security2:error] [pid 3461837:tid 3461837] [client 51.8.121.165:2078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.230"] [uri "/.git/HEAD"] [unique_id "amR2Y4rgkbPtqQh1_Ci1mwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 SentinalX by uzumaru	2026-07-02 03:44:02 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇩🇪 ghostwarriors	2026-06-16 10:50:54 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇯🇵 SentinalX by uzumaru	2026-06-11 04:34:31 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: edge-mqtt.facebook.com:80 show less	Open Proxy Port Scan
🇪🇸 yvoictra	2026-06-08 05:09:08 (1 month ago)	51.8.121.165 - - [08/Jun/2026:07:09:03 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X1 ... show more 51.8.121.165 - - [08/Jun/2026:07:09:03 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 51.8.121.165 - - [08/Jun/2026:07:09:04 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 51.8.121.165 - - [08/Jun/2026:07:09:05 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 51.8.121.165 - - [08/Jun/2026:07:09:06 +0200] "GET /.env.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" 51.8.121.165 - - [08/Jun/2026:07:09:07 +0200] "GET /.env.production HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇵🇱 Wepted	2026-06-08 04:39:34 (1 month ago)	Port scan detected by honeypot	Port Scan Hacking
🇫🇷 dynamix	2026-06-08 04:30:06 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 RAP	2026-06-08 04:11:00 (1 month ago)	2026-06-08 04:11:00 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇫🇷 LRNP	2026-06-08 04:08:07 (1 month ago)	_:80 51.8.121.165 - - [08/Jun/2026:04:08:07 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Wi ... show more _:80 51.8.121.165 - - [08/Jun/2026:04:08:07 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 Tamsy	2026-06-08 04:07:06 (1 month ago)	HTTPD - Web Application scripting attack	Web App Attack
🇺🇸 Cyber Crusader	2026-06-07 23:49:44 (1 month ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 gu-alvareza	2026-06-03 07:05:24 (1 month ago)	Spring.Boot.Actuator.Unauthorized.Access	Brute-Force
🇬🇧 andypiper	2026-06-03 01:01:55 (1 month ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.84.88.30

🇳🇱 45.148.10.239

🇺🇸 20.75.217.64

🇸🇬 185.200.116.83

🇵🇱 176.53.159.198

🇵🇱 176.53.159.197

🇨🇳 110.249.202.70

🇺🇸 104.218.145.107

🇸🇬 47.79.205.240

🇮🇩 36.64.131.68

🇮🇪 3.254.147.73

🇧🇷 177.177.200.244

🇺🇸 144.202.92.17

🇷🇴 92.118.39.14

🇸🇬 84.75.155.65

🇵🇱 20.215.211.95

🇧🇩 163.61.153.139

🇵🇭 103.235.95.222

🇿🇲 102.23.122.235

🇺🇸 72.240.125.133