AbuseIPDB » 5.252.154.68
5.252.154.68 was found in our database!
This IP was reported 66 times. Confidence of Abuse is 100%: ?
| ISP | We Host Servers LTD |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS30860 |
| Hostname(s) |
srv.freednsdedi.com |
| Domain Name | wehostservers.com |
| Country | 🇺🇦 Ukraine |
| City | Kyiv, Kyiv City |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 5.252.154.68:
This IP address has been reported a total of 66 times from 56 distinct sources. 5.252.154.68 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇧🇷 SOC-BR |
|
Port Scan Hacking | ||
| 🇨🇭 Kepler-1649c |
Detected Attack: PHPUnit.Eval-stdin.PHP.Remote.Code.Execution
|
Hacking | ||
| 🇺🇸 RAP |
2026-09-01 18:08:03 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | ||
| 🇨🇭 zynex |
URL Probing: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
|
Web App Attack | ||
| 🇫🇷 marine |
SSH brute-force server2 attack from 5.252.154.68, blocked by Fail2Ban.
|
SSH Brute-Force | ||
| 🇺🇸 teamsmith |
Fail2ban banned 5.252.154.68 (sshd) on server.surgexi.com
|
Brute-Force | ||
| 🇺🇸 MPL |
tcp/22 (4 or more attempts)
|
Port Scan | ||
| Anonymous |
SSH brute force attempt. User: admin, Pass: [REDACTED]
|
Brute-Force SSH | ||
| 🇺🇸 xmission.com |
|
Port Scan SSH Brute-Force | ||
| 🇩🇪 tc-hawkes.com |
SSH Bruteforce
...
|
Brute-Force SSH | ||
| 🇧🇾 lns.bz |
Too many 404 requests [BY]
|
Web App Attack | ||
| 🇳🇱 Webhoster |
CrowdSec scenario: crowdsecurity/CVE-2017-9841
|
Hacking | ||
| Anonymous |
|
Brute-Force SSH | ||
| Anonymous |
Automated report (2026-09-01T15:08:43+00:00). Traversal attack detected.
|
Hacking Web App Attack Open Proxy | ||
| Anonymous |
Automated report (2026-09-01T15:08:37+00:00). Caught probing for CVE-2018-20062 vulnerability.
|
Hacking Web App Attack Open Proxy |
Showing 1 to 15 of 66 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩