This IP address has been reported a total of
111
times from
105 distinct
sources.
52.238.197.190 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Coordinated attack against 84.46.253.134. Webshell scanning, PHPUnit RCE, credential harvesting, PHP ...
show moreCoordinated attack against 84.46.253.134. Webshell scanning, PHPUnit RCE, credential harvesting, PHP vuln scanning. Active June 7-11 2026. ZAC Bayern ref BY0257-500359-26/8.
show less
Web App Attack
Brute-Force
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Malicious User-Agent
show less
{"level":"error","ts":1781051755.7841167,"logger":"http.log.access.log1","msg":"handled request","re ...
show more{"level":"error","ts":1781051755.7841167,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"52.238.197.190","remote_port":"17972","proto":"HTTP/1.1","method":"GET","host":"widget.sellena.co","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"widget.sellena.co"}},"user_id":"","duration":0.000097266,"size":0,"status":404,"resp_headers":{"Server":["Caddy"]}}
{"level":"error","ts":1781051757.4679408,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"52.238.197.190","remote_port":"17972","proto":"HTTP/1.1","method":"GET","host":"widget.sellena.co","uri":"/this_is_a_new_hello_world.php","headers":{},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"widget.sellena.co"}},"user_id":"","duration":0.000063722,"size":0,"status":404,"resp_headers":{"Server":["Caddy"]}}
{"level":"error","ts":1781051759.091026
...
show less