JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

163.52.135.170

Recent Activity

Abuse confidence score ?

100% Critical

48 reports

43 reporters · latest 2 days ago

ISP	CV Griya Cloud Server
Usage Type	Data Center/Web Hosting/Transit
ASN	AS154896
Domain Name	griyacloud.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 163.52.135.170

Export CSV

This IP address has been reported a total of 48 times from 43 distinct sources. 163.52.135.170 was first reported on October 19th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: United States of America with 11 reports; Germany with 8 reports; France with 6 reports. The most common categories in these recent reports were: Web App Attack 31 times; Hacking 16 times; Brute-Force 13 times; Bad Web Bot 13 times; Port Scan 3 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇰 sbk97 (https://sayor.net)	2026-10-23 02:30:07 (2 days ago)	SAYOR honeypot: observed attack /api/development/config	Brute-Force
🇧🇷 ICS Labs	2026-10-21 14:39:45 (3 days ago)	ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-21 UTC.	Hacking
🇮🇩 soc-yk	2026-10-21 04:06:19 (4 days ago)	Type: suspicious_network_activity Risk: 100 Events: 198 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 100 Events: 198 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇮🇩 solusi247.com	2026-10-21 03:54:52 (4 days ago)	Wazuh rule 31198: Web Attack is Multiple web server 400 error code detected trigger Active Re ... show more Wazuh rule 31198: Web Attack is Multiple web server 400 error code detected trigger Active Response. show less	Hacking Web App Attack
🇩🇪 Dominik Lysiak	2026-10-21 03:14:59 (4 days ago)	163.52.135.170 - - [21/Oct/2026:05:14:58 +0200] "GET /.env.prod.local HTTP/1.1" 444 0 "-" "Mozilla/5 ... show more 163.52.135.170 - - [21/Oct/2026:05:14:58 +0200] "GET /.env.prod.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 163.52.135.170 - - [21/Oct/2026:05:14:58 +0200] "GET /.env.staging HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 163.52.135.170 - - [21/Oct/2026:05:14:58 +0200] "GET /.env.development HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 expandmade.com	2026-10-21 02:54:09 (4 days ago)	WAF triggered [21/Oct/2026:02:54:09 "GET /.env.sample"]	Web App Attack
🇳🇱 Site.eu	2026-10-21 02:43:40 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇨🇦 Sakusen	2026-10-21 01:38:02 (4 days ago)	Automated web attack: 273 reqs, 267 paths probed, 260 returned 404; probed: 52 other, 33 .env, 32 .y ... show more Automated web attack: 273 reqs, 267 paths probed, 260 returned 404; probed: 52 other, 33 .env, 32 .yml, 30 .git, 23 .json, 21 secret, 15 .php, 14 .sql, 13 config, 7 backup, 6 archive, 6 cloud-cred, 6 log, 4 .xml, 4 script, 1 .jsp show less	Hacking Bad Web Bot Web App Attack
🇮🇹 eliosbrocchi	2026-10-21 01:21:27 (4 days ago)	[Wed Oct 21 03:21:25.573427 2026] [proxy_fcgi:error] [pid 3510196:tid 3510285] [client 163.52.135.17 ... show more [Wed Oct 21 03:21:25.573427 2026] [proxy_fcgi:error] [pid 3510196:tid 3510285] [client 163.52.135.170:37634] AH01071: Got error 'Primary script unknown', referer: http://vocidallapiazzaliberta.ddns.net/info.php [Wed Oct 21 03:21:25.672108 2026] [proxy_fcgi:error] [pid 3514997:tid 3515055] [client 163.52.135.170:37484] AH01071: Got error 'Primary script unknown', referer: http://vocidallapiazzaliberta.ddns.net/config.php [Wed Oct 21 03:21:25.688642 2026] [proxy_fcgi:error] [pid 3514996:tid 3515061] [client 163.52.135.170:37576] AH01071: Got error 'Primary script unknown', referer: http://vocidallapiazzaliberta.ddns.net/phpinfo.php [Wed Oct 21 03:21:25.693057 2026] [proxy_fcgi:error] [pid 3514996:tid 3515063] [client 163.52.135.170:37624] AH01071: Got error 'Primary script unknown', referer: http://vocidallapiazzaliberta.ddns.net/server-info.php [Wed Oct 21 03:21:25.887523 2026] [proxy_fcgi:error] [pid 3514997:tid 3515065] [client 163.52.135.170:37698] AH01071: Got error 'Primary script ... show less	VPN IP
🇦🇺 aranguren.org	2026-10-21 00:47:47 (4 days ago)	163.52.135.170 - - [21/Oct/2026:11:47:46 +1100] "GET /config.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 ( ... show more 163.52.135.170 - - [21/Oct/2026:11:47:46 +1100] "GET /config.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 163.52.135.170 - - [21/Oct/2026:11:47:46 +1100] "GET /.env.old HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 163.52.135.170 - - [21/Oct/2026:11:47:46 +1100] "GET /.env.bak HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Bad Web Bot
🇫🇷 ✨	2026-10-21 00:42:12 (4 days ago)	Domain : tilesoc.org.uk Rule : env 2026-10-21 00:39:57 W3SVC284 PLESK76 217.194.212.48 GET /.env.sta ... show more Domain : tilesoc.org.uk Rule : env 2026-10-21 00:39:57 W3SVC284 PLESK76 217.194.212.48 GET /.env.staging - 80 - 163.52.135.170 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36 - - tilesoc.org.uk 301 0 0 418 343 276 - - show less	Hacking SQL Injection
🇫🇷 geot	2026-10-21 00:28:58 (4 days ago)	50 requests, including : GET /.env.stage HTTP/1.1 GET /database.php HTTP/1.1 GET /wp-config.php HTT ... show more 50 requests, including : GET /.env.stage HTTP/1.1 GET /database.php HTTP/1.1 GET /wp-config.php HTTP/1.1 GET /application.json HTTP/1.1 GET /database.sql HTTP/1.1 GET /secrets.yml HTTP/1.1 GET /server-info.php HTTP/1.1 GET /settings.py HTTP/1.1 GET /src/config HTTP/1.1 GET /settings.php HTTP/1.1 GET /.env.bak HTTP/1.1 GET /api/config HTTP/1.1 GET /config.env HTTP/1.1 GET /phpinfo.php HTTP/1.1 GET /config.yaml HTTP/1.1 GET /.env.example HTTP/1.1 GET /app/.env HTTP/1.1 GET /secrets.json HTTP/1.1 GET /api/settings HTTP/1.1 GET /.aws/config HTTP/1.1 show less	Hacking Bad Web Bot Web App Attack
🇺🇸 masterguru	2026-10-21 00:19:25 (4 days ago)	. Matched phrase "/.env" at REQUEST_URI. (210492-128)	Web App Attack
🇺🇸 dot.mg	2026-10-20 23:13:02 (4 days ago)	Bad behaviour	Web Spam
🇩🇪 hchristo	2026-10-20 23:05:27 (4 days ago)	[Wed Oct 21 01:05:24.018752 2026] [authz_core:error] [pid 64086:tid 64391] [client 163.52.135.170:50 ... show more [Wed Oct 21 01:05:24.018752 2026] [authz_core:error] [pid 64086:tid 64391] [client 163.52.135.170:50768] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/MK-Bau.gmbh/.env.old, referer: http://mk-bau.gmbh/.env.old [Wed Oct 21 01:05:24.035871 2026] [authz_core:error] [pid 64086:tid 64314] [client 163.52.135.170:50772] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/MK-Bau.gmbh/.env.save, referer: http://mk-bau.gmbh/.env.save [Wed Oct 21 01:05:24.985263 2026] [authz_core:error] [pid 64086:tid 64383] [client 163.52.135.170:50840] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/MK-Bau.gmbh/.env.bak, referer: http://mk-bau.gmbh/.env.bak [Wed Oct 21 01:05:26.900704 2026] [authz_core:error] [pid 14113:tid 14176] [client 163.52.135.170:39064] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/MK-Bau.gmbh/wp-config.bak, referer: http://mk-bau.gmbh/wp-config.bak [Wed Oct 21 01:05:26.902289 2026] [authz_core:er ... show less	Brute-Force

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 159.223.148.247

🇮🇳 106.219.84.217

🇮🇳 103.248.120.6

🇰🇷 220.116.117.213

🇮🇩 182.253.56.60

🇳🇱 138.226.239.91

🇺🇸 136.70.213.21

🇳🇱 91.108.9.102

🇺🇸 72.63.112.1

🇮🇶 45.146.15.116

🇺🇸 45.131.193.205

🇮🇳 42.110.163.190

🇺🇸 23.129.64.158

🇨🇱 201.241.61.40

🇹🇳 196.178.47.199

🇳🇱 195.178.110.26

🇺🇸 193.56.116.64

🇺🇸 157.230.222.133

🇺🇸 147.185.132.127

🇧🇪 130.211.72.192