51.52.84.223

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
53% Elevated
54 reports
40 reporters · latest 4 weeks ago
ISP
Gamma Telecom Limited
Usage Type
Fixed Line ISP
ASN
AS31655
Domain Name
gamma.co.uk
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
Rochdale, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
54 from 40 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 19 🇺🇸 United States of America 9 🇳🇱 Netherlands 8
Most common categories Web App Attack 38 Hacking 15 Brute-Force 15 Port Scan 8 Bad Web Bot 7
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 HandyTreff.de
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -41.739 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.2233.101
Web App Attack Bad Web Bot
Anonymous
(wordpress) Failed wordpress login from 51.52.84.223 (GB/United Kingdom/-)
Brute-Force
🇺🇸 RH5
Restricted URL probing (/xmlrpc.php) (UTC 2026-10-09 13:13)
Web App Attack
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack Brute-Force Bad Web Bot
🇳🇱 MM-bot
URL-probe: HTTP/1.1 POST request on /xmlrpc.php (2026-10-08 19:34:26 UTC+2)
Web App Attack Hacking
Anonymous
Malicious activity detected by fail2ban (jail=honeypot)
Hacking Web App Attack
🇩🇪 findlab
Backdrop CMS module - malicious activity detected
Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH
Wordpress hacking attempt
Web App Attack
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
🇩🇪 4server
Port Scan Brute-Force Web App Attack
🇺🇸 ne1for23
51.52.84.223 - - [06/Oct/2026:14:35:00 +0000] "POST /xmlrpc.php HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/74.0.0.0 Safari/537.36"
Hacking Web App Attack
🇩🇰 toolbit.online
Automated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cgi-bin and similar) that do not exist on this server - all requests 404'd, volume stayed below any automatic ban threshold.
Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting
Probing websites for vulnerabilities
Web App Attack
🇺🇸 lostswordfish.com
Wordfence waf block on ncrsol
Web App Attack
🇸🇬 securejdprop
This IP was detected by CrowdSec triggering custom/vpatch-xmlrpc-abuse.
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.228
🇺🇸 195.184.76.215
🇧🇷 191.128.5.108
🇮🇳 182.95.230.74
🇮🇳 117.245.173.45
🇺🇸 104.248.125.158
🇵🇱 87.251.64.128
🇳🇱 77.239.124.44
🇳🇱 64.205.72.151
🇮🇳 61.12.84.172
🇺🇸 20.83.169.235
🇭🇰 8.218.26.254
🇲🇾 202.184.148.229
🇩🇪 193.124.20.231
🇮🇩 180.245.255.48
🇸🇪 78.68.69.14
🇺🇸 44.202.254.113
🇷🇺 2.63.201.176
🇮🇷 217.218.250.79
🇹🇼 198.235.24.60
feedback