5.252.225.184

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
33 reports
22 reporters · latest 9 months ago
ISP
netcup GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS197540
Hostname(s)
8ft.ch
Domain Name
netcup.de
Country
🇩🇪 Germany
City
Nuremberg, Bavaria
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

5.252.225.184 has been reported 33 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
33 from 22 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 phil2k
Firewall within 2026-01-14 22:08:47 - 2026-01-14 22:08:47 CET(+0100) identified: unallowed access from 5.252.225.184 on port telnet(23) (1 trial)
Port Scan Brute-Force
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/8080
Brute-Force
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/23
Brute-Force
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇬🇧 [email protected]
...
Brute-Force SSH
🇬🇧 spamverify.com
Honeypot Hit: Port Scan (8080) ALTERNATIVE_HTTP
Web Spam Blog Spam Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.252.225.184
SSH
🇺🇸 RAP
2026-01-18 05:05:39 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇬🇧 spamverify.com
Honeypot Hit: Port Scan (23) TELNET
Web Spam Blog Spam Bad Web Bot Web App Attack
🇦🇱 router.al
01/18/2026-00:20:05.283405 5.252.225.184 Protocol: 6 ET WEB_SERVER ThinkPHP RCE Exploitation Attempt
Hacking
🇨🇳 ThreatBook.io
Web App Attack
🇵🇱 IROK
Firewall Blocked - Unauthorized Port Scanning ...
Port Scan
🇧🇷 SOC Blue Team
IPs get by Hunting on SIEM
Phishing Web Spam Port Scan Hacking
🇩🇪 Axel
[2026-01-17 14:22:11 UTC] Honeypot HTTP-Alt connection attempt | AXFRA HONEYPOT
Web App Attack
🇺🇸 NetGuard
🚨 CRITICAL: Real-time threat on Cowrie | unknown | PhantomGrid Real-time Defense
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 193.163.125.244
🇬🇧 185.216.145.177
🇨🇳 113.95.145.80
🇳🇱 104.248.194.148
🇺🇸 64.225.35.233
🇳🇱 34.7.77.17
🇳🇱 195.178.110.26
🇷🇴 80.94.92.179
🇬🇧 31.14.254.40
🇻🇳 14.191.161.28
🇻🇳 14.188.70.116
🇺🇸 3.82.148.1
🇵🇰 101.53.225.188
🇨🇦 85.217.149.33
🇺🇸 34.229.245.87
🇬🇧 213.166.84.60
🇧🇷 192.141.60.93
🇺🇸 172.104.30.66
🇺🇸 162.216.149.27
🇫🇷 85.217.140.8
feedback