JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.135.52.162

5.135.52.162 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 27%: ?

27%

ISP	Ovh Hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	gwc.cluster103.hosting.ovh.net
Domain Name	ovh.net
Country	🇫🇷 France
City	Roubaix, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.135.52.162

Whois 5.135.52.162

IP Abuse Reports for 5.135.52.162:

This IP address has been reported a total of 31 times from 18 distinct sources. 5.135.52.162 was first reported on October 8th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2026-10-16 00:37:00 (1 day ago)	coe-404 : Too many 404 errors	Brute-Force
🇹🇷 neron	2026-10-01 10:06:38 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 xavier-momain.eu	2026-09-30 12:58:48 (2 weeks ago)	CrowdSec ban — scenario: ssh:bruteforce	Brute-Force SSH
🇹🇷 neron	2026-09-27 17:51:37 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-09-26 10:12:44 (3 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇰🇷 2048	2026-09-22 03:03:43 (3 weeks ago)	SSH credential brute-force observed by honeypot. Source IP: 5.135.52.162 Targeted device: Ubuntu ser ... show more SSH credential brute-force observed by honeypot. Source IP: 5.135.52.162 Targeted device: Ubuntu server First seen: 22 Sep 2026 03:03:43 UTC Last seen: 22 Sep 2026 03:03:43 UTC Attempts: 1 Client: SSH-2.0-Go Sample credentials: ubnt:ubnt show less	Brute-Force SSH
🇩🇪 LRob	2026-09-16 19:24:04 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /feed/ \| 2026-09-16 19:24 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-09-09 17:04:39 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /feed/ \| 2026-09-09 17:04 UTC show less	Bad Web Bot
🇩🇪 conseilgouz	2026-09-06 01:11:22 (1 month ago)	coe- 404 : Too many 404 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-09 15:04:42 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 5.135.52.162 (gwc.cluster103.hosting.ovh.net): ... show more (mod_security) mod_security (id:210350) triggered by 5.135.52.162 (gwc.cluster103.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 11:04:37.882058 2026] [security2:error] [pid 14594:tid 14594] [client 5.135.52.162:44766] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|studiopilates.net\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "studiopilates.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ak-4hat8Byh_vPUCRJXGIAAAAAc"], referer: https://studiopilates.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 12:05:58 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 5.135.52.162 (gwc.cluster103.hosting.ovh.net): ... show more (mod_security) mod_security (id:210350) triggered by 5.135.52.162 (gwc.cluster103.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 08:05:53.836815 2026] [security2:error] [pid 14864:tid 14864] [client 5.135.52.162:42948] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|solventtrapco.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "solventtrapco.com"] [uri "/"] [unique_id "ak-OocYW4FK8IsJ9_t8P_QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-09 00:37:14 (3 months ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 5.135.52.162 (DE/Germany/gwc.cluster103.hosti ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 5.135.52.162 (DE/Germany/gwc.cluster103.hosting.ovh.net): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-08 17:43:07 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 5.135.52.162 (gwc.cluster103.hosting.ovh.net): ... show more (mod_security) mod_security (id:225170) triggered by 5.135.52.162 (gwc.cluster103.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:43:01.370554 2026] [security2:error] [pid 13990:tid 13990] [client 5.135.52.162:58102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barigby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ak6MJYsqXp774FXqDvlweAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 13:20:01 (3 months ago)	Web attack blocked by Wordfence on vestingstadvalkenburg.nl (1 hit). Reported by CRMON.	Web App Attack
🇫🇷 ingroscart.it	2026-07-05 03:23:35 (3 months ago)	(wordpress) Failed wordpress login from 5.135.52.162 (FR/France/-/-/gwc.cluster103.hosting.ovh.net/[ ... show more (wordpress) Failed wordpress login from 5.135.52.162 (FR/France/-/-/gwc.cluster103.hosting.ovh.net/[redacted]) show less	Brute-Force

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.71.14.142

🇧🇷 190.89.55.250

🇺🇸 162.216.150.98

🇺🇸 152.32.182.41

🇦🇷 148.227.121.191

🇺🇸 137.27.32.70

🇨🇳 106.13.48.117

🇧🇬 79.124.60.218

🇺🇸 65.49.1.104

🇨🇳 221.228.203.3

🇲🇽 187.216.224.85

🇰🇷 115.90.65.132

🇺🇸 104.196.161.44

🇷🇴 92.118.39.50

🇫🇷 85.217.140.52

🇸🇬 47.128.20.188

🇯🇵 35.200.86.153

🇨🇳 218.75.165.74

🇺🇦 195.64.239.40

🇬🇧 193.163.125.50