This IP address has been reported a total of
11
times from
10 distinct
sources.
163.52.135.4 was first reported on
October 4th 2026 , and the most recent report was
1 hour ago United States of America
with 3
reports;
Belgium
with 1
report;
Brazil
with 1
report.
The most common categories in these recent reports were:
Web App Attack
9
times;
Brute-Force
3
times;
Bad Web Bot
3
times;
Hacking
2
times;
Web Spam
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
robotstxt
2026-10-04 21:40:58
(1 hour ago)
163.52.135.4 - - [04/Oct/2026:21:40:16 +0000] "GET /tmp/mini.php HTTP/2.0" 400 193 "-" "-" "163.52.1 ...
show more
163.52.135.4 - - [04/Oct/2026:21:40:16 +0000] "GET /tmp/mini.php HTTP/2.0" 400 193 "-" "-" "163.52.135.4" edge="104.22.66.203"
163.52.135.4 - - [04/Oct/2026:21:40:16 +0000] "GET /tmp/alfa.php HTTP/2.0" 400 193 "-" "-" "163.52.135.4" edge="104.22.66.203"
163.52.135.4 - - [04/Oct/2026:21:40:16 +0000] "GET /files/x.php HTTP/2.0" 400 193 "-" "-" "163.52.135.4" edge="104.22.66.203"
163.52.135.4 - - [04/Oct/2026:21:40:24 +0000] "GET /files/upload.php HTTP/2.0" 400 193 "-" "-" "163.52.135.4" edge="104.22.66.203"
163.52.135.4 - - [04/Oct/2026:21:40:25 +0000] "GET /files/idx.php HTTP/2.0" 400 193 "-" "-" "163.52.135.4" edge="104.22.66.203"
...
show less
Web Spam
Web App Attack
🇳🇱
MyGlobalFlowers
2026-10-04 21:35:30
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇮🇩
securejdprop
2026-10-04 21:32:29
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband.
Hacking
🇮🇹
VHosting
2026-10-04 21:25:04
(1 hour ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
spot
2026-10-04 21:21:22
(1 hour ago)
163.52.135.4 - - [04/Oct/2026:22:21:20 +0100] "GET /wp-content/cache/upload.php HTTP/1.1" 404 4676 " ...
show more
163.52.135.4 - - [04/Oct/2026:22:21:20 +0100] "GET /wp-content/cache/upload.php HTTP/1.1" 404 4676 "-" "-"
...
show less
Web App Attack
Hacking
🇺🇸
xmission.com
2026-10-04 21:02:15
(1 hour ago)
163.52.135.4 - - [04/Oct/2026:15:02:09 -0600] "GET /wp-content/uploads/1.php HTTP/1.1" 404 47 "-" "- ...
show more
163.52.135.4 - - [04/Oct/2026:15:02:09 -0600] "GET /wp-content/uploads/1.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:10 -0600] "GET /wp-content/uploads/upload.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:10 -0600] "GET /wp-content/uploads/idx.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:10 -0600] "GET /wp-content/uploads/mini.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:11 -0600] "GET /wp-content/uploads/alfa.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:11 -0600] "GET /wp-content/cache/x.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:11 -0600] "GET /wp-content/cache/z.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:11 -0600] "GET /wp-content/cache/1.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:12 -0600] "GET /wp-content/cache/upload.php HTTP/1.1" 404 47 "-" "-"
163.52.135.4 - - [04/Oct/2026:15:02:12 -0600] "GET /wp-content/cache/idx
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 20:29:46
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 163.52.135.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 163.52.135.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:29:39.109715 2026] [security2:error] [pid 5263:tid 5263] [client 163.52.135.4:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||uni-plan.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "uni-plan.com"] [uri "/wp-content/uploads/defunct.dat"] [unique_id "asK3M4l7bDFD3DG5r5WcDwAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-10-04 20:13:43
(2 hours ago)
163.52.135.4 - - [04/Oct/2026:20:12:09 +0000] "GET /wp-content/cache/alfa.php HTTP/1.1" 400 193 "-" ...
show more
163.52.135.4 - - [04/Oct/2026:20:12:09 +0000] "GET /wp-content/cache/alfa.php HTTP/1.1" 400 193 "-" "-" "-"
163.52.135.4 - - [04/Oct/2026:20:12:29 +0000] "GET /storage/app/public/alfa.php HTTP/1.1" 400 193 "-" "-" "-"
163.52.135.4 - - [04/Oct/2026:20:12:25 +0000] "GET /storage/app/public/idx.php HTTP/1.1" 400 193 "-" "-" "-"
163.52.135.4 - - [04/Oct/2026:20:13:20 +0000] "GET /uploads/upload.php HTTP/1.1" 400 193 "-" "-" "-"
163.52.135.4 - - [04/Oct/2026:20:13:23 +0000] "GET /uploads/idx.php HTTP/1.1" 400 193 "-" "-" "-"
...
show less
Web Spam
Web App Attack
🇬🇧
consul.to
2026-10-04 20:02:21
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇪
cmbplf
2026-10-04 10:30:42
(12 hours ago)
1.306 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇧🇷
borbolla
2026-10-04 05:42:41
(17 hours ago)
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /wp-login.php HTTP/1.1"
Web App Attack
Bad Web Bot
Showing 1 to
11
of 11 reports
