JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.254.132.201

51.254.132.201

Neutral Activity

75 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

OVH SAS

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16276

Hostname(s)

vps-0345fdb2.vps.ovh.net

Domain Name

ovh.net

Country

🇫🇷 France

City

Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

51.254.132.201 has been reported 75 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 51.254.132.201:

This IP address has been reported a total of 75 times from 58 distinct sources. 51.254.132.201 was first reported on May 7th 2026, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cyber SOC	2026-05-19 09:36:06 (3 months ago)	Peaksys - 2026-05-19 10:35:43 UTC+01	Port Scan
🇮🇳 evicky2002	2026-05-13 07:18:32 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 mc4bbs	2026-05-12 08:42:40 (3 months ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-includes/wlwmanifest.xml -> 404 UA=""; GET /xmlrpc.php?rsd -> 404 UA=""; GET /blog/wp-includes/wlwmanifest.xml -> 404 UA=""; GET /web/wp-includes/wlwmanifest.xml -> 404 UA=""; GET /wordpress/wp-includes/wlwmanifest.xml -> 404 UA="" show less	Web App Attack Hacking
🇧🇪 cmbplf	2026-05-12 03:58:40 (3 months ago)	3.946 requests from abuseipdb.com blacklisted IP (1yr1mo3w)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-05-11 23:08:19 (3 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 Murazaki	2026-05-11 23:01:08 (3 months ago)	51.254.132.201 - - [11/May/2026:21:11:42 +0200] "" 400 0 "-" "-" "-" ...	Hacking
🇨🇦 Dolphi	2026-05-11 22:10:02 (3 months ago)	Excessive POST //wp-login.php requests	Brute-Force Web App Attack
🇺🇸 Charlesiv	2026-05-11 22:08:18 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK ASN: 16276 (OVH SAS) Protocol ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK ASN: 16276 (OVH SAS) Protocol: HTTP/1.1 (GET method) Endpoint: /2019/wp-includes/wlwmanifest.xml Timestamp: 2026-05-11T20:37:28Z Ray ID: 9fa3fb56eb0e99bd UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-05-11 13:00:11 (3 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
Anonymous	2026-05-11 12:50:57 (3 months ago)	51.254.132.201 - - [11/May/2026:14:50:50 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 471 ... show more 51.254.132.201 - - [11/May/2026:14:50:50 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 51.254.132.201 - - [11/May/2026:14:50:50 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 51.254.132.201 - - [11/May/2026:14:50:55 +0200] "POST //xmlrpc.php HTTP/1.0" 200 593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 51.254.132.201 - - [11/May/2026:14:50:56 +0200] "POST //xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 51.254.132.201 - - [11/May/2026:14:50:56 +0200] "POST //xmlrpc.php HTTP/1.0" 200 593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ... show less	Brute-Force Web App Attack
🇺🇸 9LEVEL.com.br	2026-05-11 11:03:40 (3 months ago)	Blocked by Fail2ban for traefik-404 abuse	Web App Attack
🇩🇪 LRob	2026-05-11 10:00:12 (3 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 Prepaid-Host.com	2026-05-11 09:43:30 (3 months ago)	SSH Bruteforce detected \| Events: 15 \| First seen: 2026-05-11 09:43 UTC \| Last seen: 2026-05-11 09:4 ... show more SSH Bruteforce detected \| Events: 15 \| First seen: 2026-05-11 09:43 UTC \| Last seen: 2026-05-11 09:43 UTC \| Sample: SSH Bruteforce detected by fail2ban jail 'plesk-one-week-ban': 15 failed attempt(s) from 51.254.132.201 SSH Bruteforce detected by fail2ban jail 'plesk-one-week-ban': 15 failed attempt(s) from 51.254.132.201 show less	SSH Brute-Force
🇩🇪 Prepaid-Host.com	2026-05-11 09:43:27 (3 months ago)	Web Exploit detected \| Events: 225 \| First seen: 2026-05-11 08:32 UTC \| Last seen: 2026-05-11 09:43 ... show more Web Exploit detected \| Events: 225 \| First seen: 2026-05-11 08:32 UTC \| Last seen: 2026-05-11 09:43 UTC \| Sample: Web Exploit detected by fail2ban jail 'plesk-wordpress': 15 failed attempt(s) from 51.254.132.201 Web Exploit detected by fail2ban jail 'plesk-wordpress': 15 failed attempt(s) from 51.254.132.201 Web Exploit detected by fail2ban jail 'plesk-wordpress': 15 failed attempt(s) from 51.254.132.201 Web Exploit detected by fail2ban jail 'plesk-wordpress': 15 failed attempt(s) from 51.254.132.201 Web Exploit detected by fail2ban jail 'plesk-wordpress': 15 failed attempt(s) from 51.254.132.201 Web Exploi show less	Web App Attack
🇩🇪 LRob	2026-05-11 09:00:08 (3 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇦🇷 186.5.180.176

🇺🇸 165.154.36.71

🇭🇰 148.66.59.230

🇧🇬 109.160.32.107

🇱🇹 62.60.130.219

🇮🇹 34.154.134.170

🇸🇬 34.21.198.223

🇺🇸 173.239.211.229

🇵🇰 153.117.13.232

🇨🇳 144.123.76.79

🇮🇳 143.110.242.162

🇵🇭 122.54.197.165

🇮🇳 103.123.53.88

🇭🇰 74.125.179.150

🇷🇺 46.147.113.91

🇳🇱 5.255.101.251

🇻🇳 171.244.14.216

🇨🇦 158.69.220.86

🇵🇰 154.91.164.44