This IP address has been reported a total of
28
times from
19 distinct
sources.
5.252.160.194 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
United States of America
with 4
reports;
Ukraine
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Bad Web Bot
17
times;
Hacking
4
times;
Brute-Force
3
times;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[07/Oct/2026:01:32:09 +0300] -- 5.252.160.194 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more[07/Oct/2026:01:32:09 +0300] -- 5.252.160.194 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Automated honeypot defense: host probed a decoy/trap endpoint (/epedsh.zip) on a monitored web serve ...
show moreAutomated honeypot defense: host probed a decoy/trap endpoint (/epedsh.zip) on a monitored web server; confirmed malicious and blocked.
show less
[05/Oct/2026:00:13:41 +0300] -- 5.252.160.194 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp- ...
show more[05/Oct/2026:00:13:41 +0300] -- 5.252.160.194 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp-admin/admin-ajax.php HTTP/1.1
show less
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show moreAutomated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-27 07:51 UTC.
show less
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show moreThis address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: / | 2026-09-23 09:38 UTC
show less
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-13 02:54 UTC
show less
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-12 21:23 UTC
show less
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/plugins/boti ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/plugins/botiga-pro/assets/js/botiga-pagination.js via rule: /wp-content
show less
