209.250.252.171

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
36 reports
31 reporters · latest 17 hours ago
ISP
JW Lucasweg 35
Usage Type
Data Center/Web Hosting/Transit
ASN
AS20473
Domain Name
vultr.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
36 from 31 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 10 🇺🇸 United States of America 6 🇧🇪 Belgium 3
Most common categories Web App Attack 29 Hacking 8 Bad Web Bot 5 Brute-Force 4 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 eryilmaz
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /nm.php
Web App Attack Hacking
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇫🇷 IRISIO
scans/SQL injection/spam posts : 1 queries
Web App Attack SQL Injection
🇺🇸 etu brutus
209.250.252.171 has been banned for [WebApp Pipeline] ...
Hacking Bad Web Bot Web App Attack
🇩🇪 todix
"GET /nm.php HTTP/1.1" 404 15391 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
Web App Attack
🇩🇪 expandmade.com
trolling for installation vulnerabilities [06/Nov/2026:06:50:43 "GET /nm.php"]
Web App Attack
🇳🇱 ConsulHosting
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
Anonymous
Probed for exploit/credential paths. Paths: /nm.php
Web App Attack
🇧🇪 taivas.nl
Many_bad_calls
Web App Attack
🇪🇸 netfactotum
Hacking Web App Attack
🇺🇸 omc
Barred IP [QC]. GET /nm.php [Q4].
Web App Attack
🇵🇱 lns.bz
Web app attack [PL.Lu]
Exploited Host Web App Attack
🇩🇪 sverson
Trolling for resource vulnerabilities
Hacking
🇺🇸 rafaelpfister.ch
Blocked by WAF: 1 request(s) probing for PHP scripts, WordPress files or secrets on a site without PHP: GET /nm.php • Reported by: github.com/pfstr/cloudflare-abuseipdb-reporter
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 186.57.132.187
🇸🇪 154.14.144.138
🇺🇸 147.185.132.189
🇺🇸 99.184.180.201
🇺🇸 73.167.32.170
🇲🇾 49.124.145.57
🇨🇦 198.44.157.162
🇧🇦 188.246.73.208
🇨🇴 186.81.100.194
🇷🇺 185.245.184.230
🇦🇷 181.209.36.53
🇦🇷 181.14.38.35
🇧🇷 179.48.211.79
🇺🇸 147.185.132.153
🇺🇸 147.185.132.135
🇨🇳 115.190.165.165
🇺🇸 84.37.180.130
🇨🇴 201.185.202.182
🇷🇴 193.32.162.148
🇲🇩 176.123.4.188
feedback