51.254.49.102

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse confidence score ?
0% Low Risk
946 reports
86 reporters Β· latest 1 week ago

51.254.49.102 is an IP address from within our whitelist belonging to the subnet 51.254.49.96/28, which we identify as "Onyphe".

ISP ONYPHE SAS
Usage Type Data Center/Web Hosting/Transit
ASN AS16276
Hostname(s) kiefer.probe.onyphe.net
Domain Name onyphe.com
Country πŸ‡«πŸ‡· France
City Roubaix, Hauts-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 51.254.49.102

This IP address has been reported a total of 946 times from 86 distinct sources. 51.254.49.102 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Bulgaria with 1 report; Denmark with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Web App Attack 3 times; Brute-Force 1 time; Hacking 1 time; Exploited Host 1 time; Bad Web Bot 1 time.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΊπŸ‡Έ HamSammich
Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-09-11T11:19Z).
Brute-Force Web App Attack
πŸ‡©πŸ‡° RhQM
Bad Web Bot Exploited Host Web App Attack
πŸ‡§πŸ‡¬ pa4080
Detected by ModSecurity. Host header is an IP address, Request URI: /
Hacking Web App Attack
πŸ‡ΊπŸ‡Έ RogueAutomata
Detected malicious request: GET / Detections triggered: Access via IP addr (v4)
Web App Attack
πŸ‡ΊπŸ‡Έ HamSammich
Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-07-09T20:34Z).
Brute-Force Web App Attack
πŸ‡³πŸ‡± knock
Knock-Knock honeypot brute-force: proto8 (1 total hits)
Brute-Force
πŸ‡―πŸ‡΅ knock
Knock-Knock honeypot brute-force: proto8 (1 total hits)
Brute-Force
πŸ‡©πŸ‡ͺ Mykola Spesivtsev
Port Scan Web App Attack Bad Web Bot
πŸ‡©πŸ‡° RhQM
Bad Web Bot Exploited Host Web App Attack
πŸ‡ΊπŸ‡Έ Jx Doe
Port Scan
πŸ‡ΊπŸ‡Έ Charlesiv
Bad Web Bot
πŸ‡¨πŸ‡³ ThreatBook.io
Web App Attack
πŸ‡§πŸ‡· diego
Web App Attack
πŸ‡ΊπŸ‡Έ iwle
Bad Web Bot Web App Attack
Anonymous
$f2bV_matches
Port Scan Hacking Brute-Force

Showing 1 to 15 of 946 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡°πŸ‡· 211.221.196.103
πŸ‡¬πŸ‡§ 172.239.111.91
πŸ‡ΊπŸ‡Έ 162.216.149.182
πŸ‡¬πŸ‡§ 92.237.135.136
πŸ‡ΊπŸ‡Έ 216.25.89.152
πŸ‡§πŸ‡· 192.141.104.45
πŸ‡§πŸ‡· 187.255.195.216
πŸ‡¨πŸ‡± 181.163.184.38
πŸ‡§πŸ‡· 177.23.208.235
πŸ‡©πŸ‡ͺ 172.71.144.118
πŸ‡§πŸ‡© 160.187.159.81
πŸ‡ΊπŸ‡Έ 136.70.28.96
πŸ‡«πŸ‡· 91.196.152.118
πŸ‡ΊπŸ‡Έ 74.249.180.39
πŸ‡ΊπŸ‡Έ 72.17.34.38
πŸ‡¨πŸ‡³ 36.156.195.120
πŸ‡¬πŸ‡§ 35.203.211.174
πŸ‡³πŸ‡± 34.178.148.21
πŸ‡ΊπŸ‡Έ 34.123.120.61
πŸ‡ΊπŸ‡Έ 216.25.89.106